All pull requests

Pull requests

• dependencykfeg: add 2.1.3, current collector hosts

  #1711·ir-pranesh-shrestha opened Nov 2, 2026Contributor·

  ·

• atlassian-wallboard-plugin: add details and IoCs (install beacon via GitHub-hosted second stage)

  #1710·ir-pranesh-shrestha opened Nov 2, 2026Contributor·

  ·

• Malicious package: ui-universal-auth (npm)

  #1709·w0rmsign opened Nov 2, 2026Contributor·

  ·

• Malicious package: me5123 (npm)

  #1708·w0rmsign opened Nov 2, 2026Contributor·

  ·

• Malicious package: on-direct-click (npm)

  #1707·w0rmsign opened Nov 2, 2026Contributor·

  ·

• Add 25 malicious npm packages from devtest91001 (@goparrot-dashboard dependency confusion)

  #1705·ir-pranesh-shrestha opened Nov 2, 2026Contributor·

  ·

• Add malicious RubyGems package strutil-core

  #1701·sbahra opened Nov 1, 2026Contributor·

  ·
  1

• Add malicious package reports for @atfm/utils and @atfm/atfm-material-ui (npm dependency confusion beacon)

  #1695·smythp opened Oct 30, 2026·

  ·
  2

• Add random-transactions-sdk, hs-framework, bfvkjmeikpwhqxc, internal-renderers, pandafortunerush and the fake job interview campaign: 13 new packages, 2 new versions

  #1694·lb2002 opened Oct 30, 2026·

  ·
  1

• Add malicious npm package @dmangal/curse-dependent-ecto

  #1682·lb2002 opened Oct 29, 2026·

  ·
  1

• Add malicious npm package spectral-core

  #1681·lb2002 opened Oct 29, 2026·

  ·
  5

• Withdraw 4 more Baileys-fork reports (false positives)

  #1678·vitaliichepurko-ox opened Oct 28, 2026Contributor·

  ·

• Bump github.com/go-jose/go-jose/v4 from 4.1.4 to 4.1.6

  dependenciesgo
  #1675·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  3

• Add 258 malicious npm packages: PhantomSub Baileys forks (CyberXYZ research)

  #1674·cyberxyz-security opened Oct 27, 2026·

  ·

• Add 36 malicious npm packages: PhantomSub Baileys forks and new names in known campaigns

  #1666·cyberxyz-security opened Oct 26, 2026·

  ·

• Add actions-cool/issues-helper and actions-cool/maintain-one-comment (GitHub Actions, Mini Shai-Hulud)

  #1654·cyberxyz-security opened Oct 20, 2026·

  ·
  11

• Add a dep confusion doc and tweak contrib guidelines.

  #1650·calebbrown opened Oct 19, 2026Contributor·

  ·
  3

• Add @apexscore/cli, @apexfdn/copilot-mcp (Apex Accelerator / REF8801 lineage) and imgdecode (MALFEX)

  #1647·pduggusa opened Oct 17, 2026Contributor·

  ·
  3

• Add 8 PhantomSub Baileys forks (OX Security, 2026-09-28)

  #1645·pduggusa opened Oct 16, 2026Contributor·

  ·
  3

• More improvements to GitHub workflows.

  #1642·calebbrown opened Oct 16, 2026Contributor·

  ·

• Improve schema validation so errors are display inside the broken files

  #1640·calebbrown opened Oct 16, 2026Contributor·

  ·
  9

• Add npm parxleys (PhantomSub Baileys fork) WhatsApp channel-follow report

  #1608·jaym2026 opened Oct 8, 2026Contributor·

  ·

• Withdraw false-positive fs advisory MAL-2025-21003

  #1583·themohitnair opened Oct 2, 2026·

  ·
  1

• Add @hanzofc/baileys 7.0.1 (npm) - forced WhatsApp newsletter subscription

  #1568·Juhyeok0603 opened Sep 30, 2026·

  ·
  1

• report: add @xiaohhhh1/canvas-agent 0.4.109

  #1554·0xAxii opened Sep 25, 2026Contributor·

  ·
  2