A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
By chatting or signing in you agree to the Terms and chat-message logging (revocable in History).