-
Notifications
You must be signed in to change notification settings - Fork 142
Pull requests: ossf/malicious-packages
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix: support VSCode ecosystem in PURL validation (#1512)
#1528
opened Sep 16, 2026 by
neo0007777
Loading…
fix(npm/deployowl): update MAL-2026-10677 to reflect fix in v2.3.0+
#1504
opened Sep 7, 2026 by
emika389
Loading…
Move database specific parsing to a protobuf
#1466
opened Aug 24, 2026 by
calebbrown
Contributor
Loading…
report: npm/@whalent/agent 0.3.303-0.3.358 (obfuscated credential-stealing RAT)
#1462
opened Aug 22, 2026 by
rbnfrhnr
Contributor
Loading…
report: npm/totp-utils 1.4.4 (Discord/Minecraft credential stealer)
#1461
opened Aug 21, 2026 by
rbnfrhnr
Contributor
Loading…
Add OSV reports: AI-agent CLI C2 npm campaign (3 packages)
#1450
opened Aug 16, 2026 by
johncassil
Contributor
Loading…
fix: recursively merge and deduplicate database_specific maps and arrays
#1317
opened Jun 17, 2026 by
jeffrey-theog06
Loading…
fix: scope @browserbasehq/* advisories to only compromised versions
#1139
opened Feb 21, 2026 by
shrey150
Loading…
ProTip!
Find all pull requests that aren't related to any open issues with -linked:issue.