Dependabot alerts on malicious packages across more ecosystems - GitHub Changelog

The GitHub Advisory Database now ingests malware advisories from the OpenSSF malicious-packages repository, significantly expanding the breadth of malware data available to you through Dependabot alerts. What changed With this…

Raccontata dagithub.blog