X XFediYour place in the Fediverse
XFEDI

Remote profile

ActivityPub
Profile banner

Catalin Cimpanu

@[email protected]

Cybersecurity reporter for Risky Business
#infosec #cybersecurity #security

Open remote profile ↗
Posts

GitHub has expanded its Malware Advisories database to cover eight package repositories.

Starting last week, the database also includes warnings for malicious packages on PyPI, Maven, RubyGems, NuGet, Go, Rust Crates, and PHP Composer... on top of npm

https://openssf.org/blog/2026/10/16/case-study-github-expands-malware-advisories-across-eight-ecosystems-with-openssf/

Media attachment
Open Source Security FoundationCase Study: GitHub Expands Malware Advisories with OpenSSFLearn how GitHub integrated OpenSSF's malicious-package data into its Advisory Database to expand Dependabot malware alerts across eight ecosystems.
↩ Reply ♡ 0 · ↻ 0 ↗ Original