OpenSourceMalware

Meet OpenSourceMalware

OpenSourceMalware is a community-driven threat intelligence platform for identifying malicious software and infrastructure in open source ecosystems. Its searchable database covers packages, repositories, editor and browser extensions, container images, and related domains, IP addresses, and cryptocurrency wallets. Reports describe malicious behavior, affected versions, severity, and supporting evidence, helping developers and security teams investigate suspicious dependencies and software supply chain attacks.

Users can browse threats, search by package name, tag, or publisher, and filter results by type and severity. Researchers can contribute findings through a review process before publication. The platform provides free web search and core API access, allowing teams to check assets and incorporate threat intelligence into their own tools. Paid tiers add capabilities such as higher API limits, structured indicators of compromise, and threat actor attribution.