-
Notifications
You must be signed in to change notification settings - Fork 134
Pull requests: ossf/malicious-packages
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Add npm ClickFix fake-CAPTCHA phishing packages (OX Security)
#1472
opened Aug 26, 2026 by
MosesOX
Contributor
Loading…
6 tasks done
Move database specific parsing to a protobuf
#1466
opened Aug 24, 2026 by
calebbrown
Contributor
Loading…
Add malicious file details for boto4 for version 1.0.2
#1463
opened Aug 22, 2026 by
loganaden
Loading…
report: npm/@whalent/agent 0.3.303-0.3.358 (obfuscated credential-stealing RAT)
#1462
opened Aug 22, 2026 by
rbnfrhnr
Contributor
Loading…
report: npm/totp-utils 1.4.4 (Discord/Minecraft credential stealer)
#1461
opened Aug 21, 2026 by
rbnfrhnr
Contributor
Loading…
Add OSV reports: AI-agent CLI C2 npm campaign (3 packages)
#1450
opened Aug 16, 2026 by
johncassil
Contributor
Loading…
fix: recursively merge and deduplicate database_specific maps and arrays
#1317
opened Jun 17, 2026 by
jeffrey-theog06
Loading…
fix: scope @browserbasehq/* advisories to only compromised versions
#1139
opened Feb 21, 2026 by
shrey150
Loading…
ProTip!
Exclude everything labeled
bug with -label:bug.