OpenSSF launches Malicious Packages repository to track reports of compromised open source packages
The Malicious Packages repository acts as a public database where reports of malicious packages are stored.
Caleb Brown Jossef Harush Kadouri Source Security Foundation Open Google Open Source Security Team Open Source Security Foundation Malicious Packages
Source: sdtimes.com