Packages

Every open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex that an advisory or malicious release names, the most advised first. See the worst packages this week, or check your lockfile.