A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
ossf/malicious-packages has 617 GitHub stars.
It currently ranks #28126 daily, #28617 weekly, #30479 monthly by momentum on Trending Repos; its best-ever rank is #859.
Trending Repos first recorded it on Jun 14, 2026.