Skip to content

Pull requests: ossf/malicious-packages

New pull request New
12 Open 1,367 Closed
12 Open 1,367 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add entry for @postman-cse/okta-aio-darwin-arm64
#1465 opened Aug 23, 2026 by loganaden Loading…
3
Add malicious file details for boto4 for version 1.0.2
#1463 opened Aug 22, 2026 by loganaden Loading…
report: npm/@whalent/agent 0.3.303-0.3.358 (obfuscated credential-stealing RAT)
#1462 opened Aug 22, 2026 by rbnfrhnr Contributor Loading…
report: npm/totp-utils 1.4.4 (Discord/Minecraft credential stealer)
#1461 opened Aug 21, 2026 by rbnfrhnr Contributor Loading…
Add OSV reports: AI-agent CLI C2 npm campaign (3 packages)
#1450 opened Aug 16, 2026 by johncassil Contributor Loading…
3
Add LPM Firewall npm malware reports
#1377 opened Jul 14, 2026 by tolgaergin Contributor Loading…
docs: add a consumer guide for using the reports
#1329 opened Jun 23, 2026 by DevamShah Loading…
1
fix: recursively merge and deduplicate database_specific maps and arrays
#1317 opened Jun 17, 2026 by jeffrey-theog06 Loading…
2
fix: scope @browserbasehq/* advisories to only compromised versions
#1139 opened Feb 21, 2026 by shrey150 Loading…
2
Doc changes for git-repo support.
#1063 opened Nov 3, 2025 by calebbrown Contributor • Draft
Report ok-script pypi package
#849 opened Mar 28, 2025 by OmkarPh Contributor Loading…
2
Add tiger packages
#848 opened Mar 25, 2025 by behnazh-w Contributor Loading…
ProTip! Filter pull requests by the default branch with base:main.