Record · corpus.blog/posts/01a0bdd8-5e85-70c0-a0da-6592a923329c

Detecting Malicious Packages using the OSV API

OpenSSF Blog · published 20 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at openssf.org Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 24
Words captured: 1,421

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/ossf/malicious-packages

github.com

https://www.npmjs.com/

npmjs.com

https://pypi.org/

pypi.org

https://cloudsmith.com/blog/axios-npm-attack-response

cloudsmith.com

https://www.trendmicro.com/en_us/research/26/c/inside-litellm-supply-chain-compromise.html

trendmicro.com

https://osv.dev/

osv.dev

https://google.github.io/osv-scanner/

google.github.io

https://deps.dev/

deps.dev

https://cloudsmith.com/blog/cve-2025-3248-serious-vulnerability-found-in-popular-python-ai-package

cloudsmith.com

https://osv.dev/vulnerability/MAL-2025-6812

osv.dev

https://google.github.io/osv.dev/post-v1-querybatch/

google.github.io

https://osv.dev/vulnerability/MAL-2026-2307

osv.dev

https://github.com/ndouglas-cloudsmith/exploit-check/blob/main/osv-kubernetes.py

github.com

https://github.com/ossf/malicious-packages/blob/272fc95ded8b8e56d3306f2540b231f16434e89f/osv/malicious/pypi/reuests/MAL-2022-7441.json

github.com

https://github.com/google/osv-scanner

github.com

https://github.com/anchore/syft

github.com

https://pip.pypa.io/en/stable/reference/requirements-file-format/

pip.pypa.io

https://cyclonedx.org/

cyclonedx.org

https://github.com/GoogleCloudPlatform/generative-ai/issues/2734

github.com

https://github.com/google/osv-scanner-action

github.com

https://google.github.io/osv-scanner/github-action/

google.github.io

https://docs.npmjs.com/cli/v8/configuring-npm/package-lock-json

docs.npmjs.com

https://docs.npmjs.com/cli/v11/using-npm/config

docs.npmjs.com

https://docs.npmjs.com/cli/v8/configuring-npm/npmrc

docs.npmjs.com