All pull requests

Pull requests

• Add @apexscore/cli, @apexfdn/copilot-mcp (Apex Accelerator / REF8801 lineage) and imgdecode (MALFEX)

  #1647·pduggusa opened Oct 17, 2026·

  ·

• Report malicious PyPI package ukraine69

  #1646·skb1209 opened Oct 17, 2026Contributor·

  ·

• Add 8 PhantomSub Baileys forks (OX Security, 2026-09-28)

  #1645·pduggusa opened Oct 16, 2026·

  ·
  3

• Add @apexacc/cli and @apexacc/audit (Elastic REF8801)

  #1644·pduggusa opened Oct 16, 2026·

  ·
  1

• More improvements to GitHub workflows.

  #1642·calebbrown opened Oct 16, 2026Contributor·

  ·

• Improve schema validation so errors are display inside the broken files

  #1640·calebbrown opened Oct 16, 2026Contributor·

  ·
  9

• Add npm parxleys (PhantomSub Baileys fork) WhatsApp channel-follow report

  #1608·jaym2026 opened Oct 8, 2026Contributor·

  ·

• Withdraw false-positive fs advisory MAL-2025-21003

  #1583·themohitnair opened Oct 2, 2026·

  ·
  1

• Add @hanzofc/baileys 7.0.1 (npm) - forced WhatsApp newsletter subscription

  #1568·Juhyeok0603 opened Sep 30, 2026·

  ·
  1

• report: add @xiaohhhh1/canvas-agent 0.4.109

  #1554·0xAxii opened Sep 25, 2026Contributor·

  ·
  2

• Add MAL record: com.tbruyelle.rxpermissions2:rxpermissions:0.9.4 malicious lint-backdoored AAR on Maven Central

  #1535·zhaojiewen opened Sep 18, 2026·

  ·
  1

• fix: support VSCode ecosystem in PURL validation (#1512)

  #1528·neo0007777 opened Sep 16, 2026·

  ·
  1

• fix(npm/deployowl): update MAL-2026-10677 to reflect fix in v2.3.0+

  #1504·emika389 opened Sep 7, 2026·

  ·
  1

  7

• analysis: add IoCs for MAL-2026-13631

  #1468·neo0007777 opened Aug 24, 2026·

  ·
  1

  1

• Move database specific parsing to a protobuf

  #1466·calebbrown opened Aug 24, 2026Contributor·

  ·
  3

• report: npm/@whalent/agent 0.3.303-0.3.358 (obfuscated credential-stealing RAT)

  #1462·rbnfrhnr opened Aug 22, 2026Contributor·

  ·

• report: npm/totp-utils 1.4.4 (Discord/Minecraft credential stealer)

  #1461·rbnfrhnr opened Aug 21, 2026Contributor·

  ·

• Add OSV reports: AI-agent CLI C2 npm campaign (3 packages)

  #1450·johncassil opened Aug 16, 2026Contributor·

  ·
  4

• Add LPM Firewall npm malware reports

  #1377·tolgaergin opened Jul 14, 2026Contributor·

  ·

• docs: add a consumer guide for using the reports

  #1329·DevamShah opened Jun 23, 2026·

  ·
  1

  1

• fix: recursively merge and deduplicate database_specific maps and arrays

  #1317·jeffrey-theog06 opened Jun 17, 2026·

  ·
  2

• fix: scope @browserbasehq/* advisories to only compromised versions

  #1139·shrey150 opened Feb 21, 2026·

  ·
  2

• Doc changes for git-repo support.

  #1063·calebbrown opened Nov 3, 2025Contributor·

  ·

• Report ok-script pypi package

  #849·OmkarPh opened Mar 28, 2025Contributor·

  ·
  2

• Add tiger packages

  #848·behnazh-w opened Mar 25, 2025Contributor·

  ·