ossf / malicious-packages

A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

View on GitHub

619 stars

156 forks

57 issues

Chat with Codebase Architecture Scan Security Audit Explain Codebase

AI Architecture Analysis

This repository is indexed by Codyn. By analyzing ossf/malicious-packages in our AI interface, you can instantly generate complete architecture diagrams, visualize control flows, and perform automated security audits across the entire codebase.

Our Agentic Context Augmented Generation (Agentic CAG) engine loads full source files into context on-demand, avoiding the fragmentation of traditional RAG systems. Ask questions about the architecture, dependencies, or specific features to see it in action.

Source files are only loaded when you start an analysis to optimize performance.

Click here to launch the interactive analysis workspace

Embed this Badge

Showcase Codyn's analysis directly in your repository's README.

[![Analyzed by Codyn](https://img.shields.io/badge/Analyzed%20by-Codyn-4F46E5?style=for-the-badge)](http://codyn.app/repo/ossf/malicious-packages)

Preview: