ossf/malicious-packages
View on GitHubA repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
- Stars
- 610
- Forks
- 142
- Open beginner issues
- 0
- Indexed issues
- 33
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 56
- Dominant language
- Go
- License
- Apache-2.0
- Last GitHub push
- Sep 19, 2026
- Latest indexed
- Sep 19, 2026
- Contributing guide
- Contributing guide
- Code of conduct
- Code of conduct
- Beginner labels
- No beginner labels indexed
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
ossf/malicious-packages#1537 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
ossf/malicious-packages#1512 · 1 comment ·
-
Request to update MAL-2026-13416: affected versions are limited to 0.1.0-beta through 0.1.7-beta Open
Difficulty 3/5 1-2 days Newbie friendliness 65/100
ossf/malicious-packages#1474 · 4 comments ·
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
ossf/malicious-packages#1470 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
ossf/malicious-packages#1457 · 2 comments ·
-
enhancement
Difficulty 4/5 3-5 days Newbie friendliness 55/100
ossf/malicious-packages#1440 · 2 comments · 1 reaction ·
-
Difficulty 5/5 Over a week Newbie friendliness 30/100
ossf/malicious-packages#1439 · 2 comments · 1 reaction ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 58/100
ossf/malicious-packages#1390 ·
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
ossf/malicious-packages#1315 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
ossf/malicious-packages#1311 · 2 comments ·
-
Difficulty 3/5 1-2 days Newbie friendliness 25/100
ossf/malicious-packages#1286 ·
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
ossf/malicious-packages#1233 · 3 comments ·
-
Difficulty 5/5 Over a week Newbie friendliness 30/100
ossf/malicious-packages#1232 · 1 comment ·
-
False Positive Open
Difficulty 2/5 1-3 hours Newbie friendliness 52/100
ossf/malicious-packages#1173 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
ossf/malicious-packages#1170 · 2 comments ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 38/100
ossf/malicious-packages#1150 · 2 comments ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 48/100
ossf/malicious-packages#1138 ·
-
AI skills Open
Difficulty 5/5 Over a week Newbie friendliness 20/100
ossf/malicious-packages#1131 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 32/100
ossf/malicious-packages#1130 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 35/100
ossf/malicious-packages#1116 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
ossf/malicious-packages#1115 · 4 comments ·
-
Difficulty 1/5 Under an hour Newbie friendliness 62/100
ossf/malicious-packages#1109 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
ossf/malicious-packages#1102 · 1 comment ·
-
Difficulty 5/5 Over a week Newbie friendliness 32/100
ossf/malicious-packages#1097 · 6 comments · 2 reactions ·
-
Difficulty 5/5 Over a week Newbie friendliness 20/100
ossf/malicious-packages#798 · 2 comments ·
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
ossf/malicious-packages#700 · 4 comments ·
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
ossf/malicious-packages#660 · 3 comments ·
-
ossf/malicious-packages#579 · 2 comments · 1 assignee ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
ossf/malicious-packages#569 · 2 comments ·
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
ossf/malicious-packages#517 ·
-
ossf/malicious-packages#430 · 1 comment · 1 assignee ·
-
Difficulty 4/5 3-5 days Newbie friendliness 28/100
ossf/malicious-packages#351 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 35/100
ossf/malicious-packages#110 ·