Skip to content

Pull requests: ossf/malicious-packages

New pull request New
12 Open 1,325 Closed
12 Open 1,325 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add @types-beta/sdk (npm) — import-time Windows RAT dropper
#1410 opened Jul 29, 2026 by akyroslabs Contributor Loading…
report: npm/app-soda-layer 2.1.6 (credential + wallet stealer, SSH backdoor)
#1405 opened Jul 28, 2026 by rbnfrhnr Loading…
7
Add iocs.files[] to database_specific for file indicators (per #1345 discussion)
#1394 opened Jul 21, 2026 by akyroslabs Contributor Loading…
21
Add LPM Firewall npm malware reports
#1377 opened Jul 14, 2026 by tolgaergin Contributor Loading…
Add malicious npm package polymarket-mcp-v2@2.1.6 (SSH-key backdoor)
#1368 opened Jul 12, 2026 by akyroslabs Contributor Loading…
2
docs: add a consumer guide for using the reports
#1329 opened Jun 23, 2026 by DevamShah Loading…
1
fix: recursively merge and deduplicate database_specific maps and arrays
#1317 opened Jun 17, 2026 by jeffrey-theog06 Loading…
2
Add initial malosv command for managing the repo.
#1306 opened Jun 11, 2026 by calebbrown Contributor Loading…
fix: scope @browserbasehq/* advisories to only compromised versions
#1139 opened Feb 21, 2026 by shrey150 Loading…
2
Doc changes for git-repo support.
#1063 opened Nov 3, 2025 by calebbrown Contributor • Draft
Report ok-script pypi package
#849 opened Mar 28, 2025 by OmkarPh Contributor Loading…
2
Add tiger packages
#848 opened Mar 25, 2025 by behnazh-w Contributor Loading…
ProTip! Filter pull requests by the default branch with base:main.