Back to rankings

ossf / malicious-packages

A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

Repository stars
642All-time #52,944
Fork
178
Last push
updated today
Repository created
since 2023
Apps & systemsGeneralGoApache-2.0 · Permissive
View source

About

Original · GitHub
A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

Summarised by AI from the README; the original prevails

Author description: A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

Basic listing based on official public information; functionality has not been independently evaluated.

Pricing
Pricing not verifiedCheck current official software, hosting, model and infrastructure pricing.

Star trend

64264364311-06 · 64210-0810-1310-1810-2310-2811-0211-06

First collected 2026-11-06Measured at 2026-11-06 13:05 UTCSourceLicense source

Compiled from public project information; not independently tested. · Repository Stars, not unique users · License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.