🧰 OSV

The items that name it 38

• Spectrmachina/Ztrust
  repoas classification.technologies2026-10-22
• Raise or Check? Predicting the Necessity of Additional Fuzzing for Continuous Fuzzing
  paperas classification.technologies2026-10-20
• MemTensor Compromise: Poisoned MemOS Releases on npm and PyPI
  articleas tools2026-10-18It is written here as OSV (vulnerability and malware database tracking MAL-2026-16476 and MAL-2026-16475).

  vulnerability and malware database tracking MAL-2026-16476 and MAL-2026-16475

• SBOM vs. SBOM: Comparing SBOMs from Different Tools and Lifecycle Stages | Endor Labs
  writeupas tools2026-10-16It is written here as OSV (known vulnerability lookup).

  known vulnerability lookup

• 2024 Dependency Management Report | Endor Labs
  paperas classification.technologies2026-10-12
• New research: malware in open source ecosystems surges 14x as attackers hijack trusted packages | Endor Labs
  articleas classification.technologies2026-10-12
• Malicious npm Campaign “MALFEX” Delivers RAT and Stealer via Eight Packages with 40,000+ Downloads
  articleas classification.technologies2026-10-08
• MALFEX npm Malware Campaign: Three Payloads And An Adversary That Signs Their Work
  writeupas tools2026-10-05It is written here as OSV (Open Source Vulnerabilities).

  Advisory database; holds malware advisories for five removed packages and MAL-2026-17320 for cdn-img-fetch (incomplete coverage)

• lee1981 (@lee1981b) on X
  threadas tools2026-09-30

  vulnerability database; maps last affected tag to a commit but supplies no fixed event for this CVE

• [tl;dr sec] #347 - AI Agents Hacking Companies for $25, Threat Hunter's Guide to GitHub, Finding Gadgets Like it’s 2026
  articleas tools2026-09-24

  Vulnerability database that git-pkgs scans against

• Top 10 attacks on Claude Code and what each one actually broke
  writeupas tools2026-09-23

  Vulnerability database where CVE-2026-35020/35021/35022 are flagged as disputed.

• Dependabot vs Renovate
  articleas classification.technologies2026-09-14
• Malicious Code in Open Source: How to Detect It Before You Ship | Blog | Endor Labs
  articleas tools2026-09-11It is written here as OSV (Open Source Vulnerability Database).

  Database of confirmed malicious/vulnerable packages, queryable via web interface and API; used by Endor Labs to compare dependencies against confirmed malicious packages.

• OWASP OSS Risk 1: Known Vulnerabilities | Blog | Endor Labs
  articleas classification.technologies2026-09-11
• vet (SafeDep)
  repoas tools2026-09-07

  Open source vulnerability database used as an underlying data source

• mukul975/cve-mcp-server
  repoas classification.technologies2026-09-07
• PackageGuard
  repoas tools2026-08-31

  Open Source Vulnerabilities database used by PackageGuard to source known-vulnerability signals for risk scoring, SBOM enrichment (--report-risk), and OSV severity-based deny gating

• vibecheck
  repoas classification.technologies2026-08-27
• NIST NVD: V-etalon AI Enrichment Tool Announced After Audit Finds Backlog, Wasted Spend
  articleas tools2026-08-19It is written here as OSV (Open Source Vulnerabilities).

  Carries package, affected range, and fixed version information for open source vulnerabilities

• Have We Seen an Acceleration in Discoveries?
  articleas classification.technologies2026-08-14
• The OpenSourceMalware Show #16
  talkas tools2026-08-08

  Open Source Vulnerabilities database; tagging/labeling WEL1DROPPER malicious packages

• OpenSourceMalware Blog
  articleas tools2026-07-18

  Open Source Vulnerabilities database; false positives discussed.

• Introducing Gemini 3.5 Flash Cyber
  articleas classification.technologies2026-07-17
• XORCISM-AI/XORCISM
  repoas tools2026-07-01

  Vulnerability lookup service integration

• RAPTOR
  repoas tools2026-06-28It is written here as OSV (Open Source Vulnerabilities).

  Advisory source used to enrich /sca dependency findings

• SkillSpector
  repoas classification.technologies2026-06-14
• The OpenSourceMalware Show #8
  talkas tools2026-06-11

  Open source vulnerability/malicious package data source commonly used by package firewall tools.

• The OpenSourceMalware Show #7
  talkas tools2026-06-03It is written here as OSV (Open Source Vulnerabilities database).

  Database into which malicious packages are reported; used by Paul McCarty to estimate that 25–41% of malicious packages entering OSV between October 2024 and January 2025 were attributable to bug bounty researchers

• CVE Lite CLI
  repoas tools2026-05-31

  Advisory data source queried by CVE Lite CLI for vulnerability information and fix version validation.

• Socket: OSV Withdraws 157 Malware Reports
  articleas tools2026-05-28It is written here as OSV (Open Source Vulnerabilities database).

  OpenSSF-backed vulnerability/malware database consumed by scanners, dashboards, policy engines, SBOM tooling, registry controls, and CI/CD gates

• OSV
  toolas tools2026-05-25

  Open, precise, distributed database and schema for describing vulnerabilities in open source package versions or commit hashes; aggregates vulnerability databases using the OSV schema (e.g. GitHub Security Advisories, PyPA, RustSec, Global Security Database)

• Open Source Malware Podcast — episodes
  otheras tools2026-05-22It is written here as OSV (osv.dev).

  Open source vulnerability database; received 157 false positive entries from AWS Inspector

• FoxGuard
  repoas tools2026-05-16

  Backing database for FoxGuard's dependency (SCA) vulnerability scanning

• Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode
  articleas tools

  Open source vulnerability database providing CVE import data referenced for CVE-2026-75149

• Incident-Data Robustness Analysis of the OWASP Top 10 for LLM Applications (2026): How a Community-Expert Ranking Holds Up Against a Large-Scale LLM Incident Corpus
  paperas tools

  Data source for LLM-security incident corpus

• git-pkgs — dependency history & supply-chain analysis for git repos
  repoas tools

  Vulnerability database queried by 'git pkgs vulns' to check dependencies for known CVEs

• Supply Chain Firewall (Datadog)
  repoas classification.technologies
• cyanheads/osv-advisory-mcp-server
  repoas classification.technologies