Skip to content

Topic

Malicious open-source packages

Hostile code published to public package registries and code-hosting platforms so that developers install it as a dependency.

Current clusters