Malicious-package directory

Cross-ecosystem malware/typosquat/dependency-confusion IOCs sourced from ossf/malicious-packages — the OpenSSF curated mirror of OSV-format reports across npm, PyPI, RubyGems, Maven, Go, and Rust. Each name links to its registry detail page; click the OSSF link for the full OSV record (versions + indicators) and timeline.