GitHub has expanded its Malware Advisories database to cover eight package repositories.
Starting last week, the database also includes warnings for malicious packages on PyPI, Maven, RubyGems, NuGet, Go, Rust Crates, and PHP Composer... on top of npm
Open Source Security FoundationCase Study: GitHub Expands Malware Advisories with OpenSSFLearn how GitHub integrated OpenSSF's malicious-package data into its Advisory Database to expand Dependabot malware alerts across eight ecosystems.