ossf/malicious-packages issues and pull requests

#791 - Adding new malicious npm packages

Pull Request - State: open - Opened by awsactran 6 days ago

#790 - Adding new malicious NPM packages

Pull Request - State: closed - Opened by awsactran 7 days ago

#789 - Adding new malicious packages

Pull Request - State: closed - Opened by awsactran 7 days ago

#788 - Added new npm reports

Pull Request - State: closed - Opened by awsactran 7 days ago

#787 - Added new npm report @zohaib2121/dtapp

Pull Request - State: closed - Opened by awsactran 7 days ago

#786 - Added malicious npm package tree-sitter-hcl

Pull Request - State: closed - Opened by awsactran 7 days ago - 1 comment

#785 - Added malicious npm package tree-sitter-hcl

Pull Request - State: closed - Opened by awsactran 7 days ago

#784 - Adding new npm reports

Pull Request - State: closed - Opened by poppysec 7 days ago

#783 - Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.73.2 to 1.75.0 in the go-minor-updates group across 1 directory

Pull Request - State: closed - Opened by dependabot[bot] 8 days ago
Labels: dependencies, go

#782 - Bump the actions-minor-updates group across 1 directory with 3 updates

Pull Request - State: closed - Opened by dependabot[bot] 8 days ago
Labels: dependencies, github_actions

#781 - Added report for org.cocoapods.csv npm package

Pull Request - State: closed - Opened by 6mile 9 days ago

#780 - Added report for sample_cluster npm package

Pull Request - State: closed - Opened by 6mile 9 days ago

#779 - Bump the actions-minor-updates group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 10 days ago - 2 comments
Labels: dependencies, github_actions

#778 - Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.73.2 to 1.74.1 in the go-minor-updates group

Pull Request - State: closed - Opened by dependabot[bot] 10 days ago - 2 comments
Labels: dependencies, go

#777 - Add a validation check that ensures that IDs are never removed.

Pull Request - State: closed - Opened by calebbrown 15 days ago

#776 - Add recent reports

Pull Request - State: closed - Opened by poppysec 16 days ago

#775 - Bump the go-minor-updates group across 1 directory with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 17 days ago - 2 comments
Labels: dependencies, go

#774 - Fixed npm next-refresh-token details

Pull Request - State: closed - Opened by elad-pticha 18 days ago

#773 - Manually migrate osv-scanner to v1.9.2 to avoid issues with conflicting deps.

Pull Request - State: closed - Opened by calebbrown 18 days ago

#772 - Bump the go-minor-updates group with 3 updates

Pull Request - State: closed - Opened by dependabot[bot] 18 days ago - 1 comment
Labels: dependencies, go

#771 - Add preprocess check to validate, and split into separate jobs.

Pull Request - State: closed - Opened by calebbrown 18 days ago

#770 - Improve the dependabot config to lower toil.

Pull Request - State: closed - Opened by calebbrown 18 days ago

#769 - Added report for next-refresh-token npm package

Pull Request - State: closed - Opened by elad-pticha 18 days ago

#768 - Added report for openssl-node npm package

Pull Request - State: closed - Opened by elad-pticha 18 days ago

#767 - Added report for serve-static-corell npm package

Pull Request - State: closed - Opened by elad-pticha 18 days ago

#766 - Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.72.2 to 1.73.1

Pull Request - State: closed - Opened by dependabot[bot] 20 days ago - 1 comment
Labels: dependencies, go

#765 - Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0

Pull Request - State: closed - Opened by dependabot[bot] 20 days ago - 5 comments
Labels: dependencies, github_actions

#764 - Bump github.com/aws/aws-sdk-go from 1.55.5 to 1.55.6

Pull Request - State: closed - Opened by dependabot[bot] 21 days ago - 1 comment
Labels: dependencies, go

#763 - Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.72.2 to 1.73.0

Pull Request - State: closed - Opened by dependabot[bot] 21 days ago - 1 comment
Labels: dependencies, go

#762 - Added report for netflixdesign npm package

Pull Request - State: closed - Opened by 6mile 22 days ago

#761 - Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.72.2 to 1.72.3

Pull Request - State: closed - Opened by dependabot[bot] 22 days ago - 1 comment
Labels: dependencies, go

#760 - Add a step in validate workflow to loosen the "id" validation.

Pull Request - State: closed - Opened by calebbrown 23 days ago

#759 - Added report for venmo-ui npm package

Pull Request - State: closed - Opened by 6mile 23 days ago - 1 comment

#758 - Bump actions/checkout from 4.1.7 to 4.2.2

Pull Request - State: closed - Opened by dependabot[bot] 23 days ago
Labels: dependencies, github_actions

#758 - Bump actions/checkout from 4.1.7 to 4.2.2

Pull Request - State: closed - Opened by dependabot[bot] 23 days ago
Labels: dependencies, github_actions

#757 - Add an automated check to ensure that two user generated reports can not be created.

Issue - State: closed - Opened by calebbrown 24 days ago

#756 - Update to go v1.23.4. Update workflows to use go version from go.mod

Pull Request - State: closed - Opened by calebbrown 24 days ago

#756 - Update to go v1.23.4. Update workflows to use go version from go.mod

Pull Request - State: closed - Opened by calebbrown 24 days ago

#755 - Remove the explicit token to use the per-run token so we can checkout repos during PRs.

Pull Request - State: closed - Opened by calebbrown 24 days ago

#755 - Remove the explicit token to use the per-run token so we can checkout repos during PRs.

Pull Request - State: closed - Opened by calebbrown 24 days ago

#754 - Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.71.0 to 1.72.2

Pull Request - State: closed - Opened by dependabot[bot] 24 days ago - 2 comments
Labels: dependencies, go

#754 - Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.71.0 to 1.72.2

Pull Request - State: closed - Opened by dependabot[bot] 24 days ago - 2 comments
Labels: dependencies, go

#753 - fixed version number in MAL-2025-56

Pull Request - State: closed - Opened by 6mile 24 days ago

#753 - fixed version number in MAL-2025-56

Pull Request - State: closed - Opened by 6mile 24 days ago

#752 - MAL-2025-56 has an invalid version

Issue - State: closed - Opened by hogo6002 24 days ago - 1 comment

#752 - MAL-2025-56 has an invalid version

Issue - State: closed - Opened by hogo6002 24 days ago - 1 comment

#751 - Added reports for bigcommerce-cornerstone & parseq-tracevis npm packages

Pull Request - State: closed - Opened by 6mile 24 days ago

#751 - Added reports for bigcommerce-cornerstone & parseq-tracevis npm packages

Pull Request - State: closed - Opened by 6mile 24 days ago

#750 - Added reports for 4 malicious npm packages

Pull Request - State: closed - Opened by 6mile 24 days ago

#750 - Added reports for 4 malicious npm packages

Pull Request - State: closed - Opened by 6mile 24 days ago

#749 - Added report for mlb-site-core npm package

Pull Request - State: closed - Opened by 6mile 24 days ago

#749 - Added report for mlb-site-core npm package

Pull Request - State: closed - Opened by 6mile 24 days ago

#748 - Bump golang.org/x/net from 0.31.0 to 0.33.0

Pull Request - State: closed - Opened by dependabot[bot] 24 days ago - 1 comment
Labels: dependencies, go

#748 - Bump golang.org/x/net from 0.31.0 to 0.33.0

Pull Request - State: closed - Opened by dependabot[bot] 24 days ago - 1 comment
Labels: dependencies, go

#747 - Bump github/codeql-action from 3.27.9 to 3.28.1

Pull Request - State: closed - Opened by dependabot[bot] 24 days ago
Labels: dependencies, github_actions

#746 - Added report for jiolocate-ui npm package

Pull Request - State: closed - Opened by 6mile 25 days ago

#746 - Added report for jiolocate-ui npm package

Pull Request - State: closed - Opened by 6mile 25 days ago

#745 - Added report for romanes-eunt-domus-jd-1337 npm package

Pull Request - State: closed - Opened by 6mile 25 days ago

#745 - Added report for romanes-eunt-domus-jd-1337 npm package

Pull Request - State: closed - Opened by 6mile 25 days ago

#744 - Repair the walletcore-gen (npm) report.

Pull Request - State: closed - Opened by calebbrown 25 days ago

#743 - Fix solanacore (npm) report.

Pull Request - State: closed - Opened by calebbrown 25 days ago - 1 comment

#743 - Fix solanacore (npm) report.

Pull Request - State: closed - Opened by calebbrown 25 days ago - 1 comment

#742 - Added reports for malware deploying npm packages marked-cs and marked-ps

Pull Request - State: closed - Opened by 6mile 26 days ago

#742 - Added reports for malware deploying npm packages marked-cs and marked-ps

Pull Request - State: closed - Opened by 6mile 26 days ago

#741 - Add report for hardhat-dotenv

Pull Request - State: closed - Opened by poppysec 28 days ago

#740 - Bump actions/upload-artifact from 4.4.3 to 4.6.0

Pull Request - State: closed - Opened by dependabot[bot] 28 days ago
Labels: dependencies, github_actions

#739 - Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.71.0 to 1.72.1

Pull Request - State: closed - Opened by dependabot[bot] 28 days ago - 2 comments
Labels: dependencies, go