{
 "date": "2026-07-17",
 "per_ecosystem": {
  "npmjs.org": {
   "osv_advisory_pkgs": 219723,
   "osv_malicious_pkgs": 216506,
   "oob_and_compromised_in_top2000": 115,
   "confirmed_hits": 111,
   "malicious_hits": 4,
   "top15": [
    {
     "name": "fsevents",
     "deps": 5289351,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": true
    },
    {
     "name": "uri-js",
     "deps": 4745435,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "set-value",
     "deps": 3784516,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "websocket-driver",
     "deps": 3054684,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "websocket-extensions",
     "deps": 3053754,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "deep-extend",
     "deps": 2907130,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "sockjs",
     "deps": 2898020,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "rc",
     "deps": 2862005,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "querystringify",
     "deps": 2603839,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "eslint-utils",
     "deps": 2601363,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "url-parse",
     "deps": 2588673,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "coa",
     "deps": 2561415,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "ansi-html",
     "deps": 2414385,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "simple-swizzle",
     "deps": 2152974,
     "reason": "archived",
     "bucket": "conf",
     "malicious": true
    },
    {
     "name": "lodash.template",
     "deps": 2051263,
     "reason": "deprecated",
     "bucket": "conf",
     "malicious": false
    }
   ]
  },
  "proxy.golang.org": {
   "osv_advisory_pkgs": 1601,
   "osv_malicious_pkgs": 18,
   "oob_and_compromised_in_top2000": 30,
   "confirmed_hits": 30,
   "malicious_hits": 0,
   "top15": [
    {
     "name": "gopkg.in/yaml.v2",
     "deps": 247600,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "github.com/gogo/protobuf",
     "deps": 125927,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "github.com/dgrijalva/jwt-go",
     "deps": 98905,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "github.com/aws/aws-sdk-go",
     "deps": 69623,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "gopkg.in/square/go-jose.v2",
     "deps": 40168,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "github.com/Masterminds/goutils",
     "deps": 19393,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "github.com/btcsuite/go-socks",
     "deps": 9527,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "gopkg.in/src-d/go-git.v4",
     "deps": 7932,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "github.com/cloudflare/golz4",
     "deps": 6131,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "github.com/Masterminds/vcs",
     "deps": 5816,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "github.com/heketi/heketi",
     "deps": 3197,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "github.com/mholt/archiver/v3",
     "deps": 2881,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "github.com/disintegration/imaging",
     "deps": 2581,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "github.com/flynn/noise",
     "deps": 2232,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "github.com/gorilla/csrf",
     "deps": 2067,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    }
   ]
  },
  "pypi.org": {
   "osv_advisory_pkgs": 13353,
   "osv_malicious_pkgs": 11530,
   "oob_and_compromised_in_top2000": 35,
   "confirmed_hits": 25,
   "malicious_hits": 3,
   "top15": [
    {
     "name": "py",
     "deps": 132961,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "typed-ast",
     "deps": 66523,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "pycrypto",
     "deps": 30404,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "codecov",
     "deps": 13570,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "pyxdg",
     "deps": 10133,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "dash-html-components",
     "deps": 8235,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "python-apt",
     "deps": 7854,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "django-rest-framework",
     "deps": 3765,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "diskcache",
     "deps": 2500,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "pdfkit",
     "deps": 1989,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "pytorch",
     "deps": 1875,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "priority",
     "deps": 1804,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "mxnet",
     "deps": 1714,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "cfscrape",
     "deps": 1675,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "python-jwt",
     "deps": 1578,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    }
   ]
  },
  "repo1.maven.org": {
   "osv_advisory_pkgs": 3272,
   "osv_malicious_pkgs": 2,
   "oob_and_compromised_in_top2000": 109,
   "confirmed_hits": 29,
   "malicious_hits": 0,
   "top15": [
    {
     "name": "mysql:mysql-connector-java",
     "deps": 562953,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "log4j:log4j",
     "deps": 236580,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "commons-lang:commons-lang",
     "deps": 103016,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "org.codehaus.jackson:jackson-mapper-asl",
     "deps": 69520,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "commons-collections:commons-collections",
     "deps": 63019,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "commons-httpclient:commons-httpclient",
     "deps": 34589,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "dom4j:dom4j",
     "deps": 29699,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "org.apache.velocity:velocity",
     "deps": 25721,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "org.apache.commons:commons-io",
     "deps": 24775,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "org.apache.derby:derby",
     "deps": 22059,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "commons-configuration:commons-configuration",
     "deps": 21974,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "net.sf.json-lib:json-lib",
     "deps": 20613,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "xerces:xercesImpl",
     "deps": 17907,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "com.jcraft:jsch",
     "deps": 17304,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "org.mortbay.jetty:jetty",
     "deps": 15554,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    }
   ]
  },
  "nuget.org": {
   "osv_advisory_pkgs": 1448,
   "osv_malicious_pkgs": 777,
   "oob_and_compromised_in_top2000": 8,
   "confirmed_hits": 4,
   "malicious_hits": 0,
   "top15": [
    {
     "name": "jquery",
     "deps": 1276,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "bootstrap.less",
     "deps": 543,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "starkbank-ecdsa",
     "deps": 299,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "bootstrap-select",
     "deps": 210,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "jquery.cookie",
     "deps": 209,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "telerikmvcextensions",
     "deps": 157,
     "reason": "removed",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "curl",
     "deps": 57,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "system.data.sqlclient",
     "deps": 53,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    }
   ]
  },
  "rubygems.org": {
   "osv_advisory_pkgs": 4006,
   "osv_malicious_pkgs": 3510,
   "oob_and_compromised_in_top2000": 34,
   "confirmed_hits": 22,
   "malicious_hits": 1,
   "top15": [
    {
     "name": "websocket-extensions",
     "deps": 378244,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "rack-ssl",
     "deps": 145384,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "paperclip",
     "deps": 46471,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "cocaine",
     "deps": 40324,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "rdiscount",
     "deps": 27183,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "jruby-openssl",
     "deps": 10916,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "em-http-request",
     "deps": 8725,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "moped",
     "deps": 8211,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "ruby-openid",
     "deps": 6972,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "extlib",
     "deps": 4215,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "hub",
     "deps": 3187,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "gibbon",
     "deps": 2083,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "rbovirt",
     "deps": 2074,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "pdfkit",
     "deps": 1928,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "twitter-stream",
     "deps": 1915,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    }
   ]
  },
  "crates.io": {
   "osv_advisory_pkgs": 1719,
   "osv_malicious_pkgs": 10,
   "oob_and_compromised_in_top2000": 127,
   "confirmed_hits": 117,
   "malicious_hits": 0,
   "top15": [
    {
     "name": "adler",
     "deps": 36783,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "proc-macro-error",
     "deps": 36312,
     "reason": "stale_release_no_commit_signal",
     "bucket": "unv",
     "malicious": false
    },
    {
     "name": "paste",
     "deps": 23840,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "bincode",
     "deps": 21396,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "untrusted",
     "deps": 20963,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "fxhash",
     "deps": 15943,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "dirs",
     "deps": 15606,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "failure",
     "deps": 14385,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "rustls-pemfile",
     "deps": 14097,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "structopt",
     "deps": 12644,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "safemem",
     "deps": 12283,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "serde_yaml",
     "deps": 9134,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "mach",
     "deps": 9077,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "gdkwayland-sys",
     "deps": 8833,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "rustc-serialize",
     "deps": 8360,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    }
   ]
  },
  "packagist.org": {
   "osv_advisory_pkgs": 1428,
   "osv_malicious_pkgs": 1,
   "oob_and_compromised_in_top2000": 59,
   "confirmed_hits": 59,
   "malicious_hits": 0,
   "top15": [
    {
     "name": "swiftmailer/swiftmailer",
     "deps": 452482,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "facade/ignition",
     "deps": 209863,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "components/jquery",
     "deps": 42351,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "zendframework/zend-diactoros",
     "deps": 37714,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "namshi/jose",
     "deps": 24943,
     "reason": "stale_both",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "zendframework/zend-cache",
     "deps": 12097,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "zendframework/zend-json",
     "deps": 12001,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "zendframework/zendframework",
     "deps": 7968,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "zendframework/zend-feed",
     "deps": 7379,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "phpoffice/phpexcel",
     "deps": 7228,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "zendframework/zend-http",
     "deps": 6907,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "zendframework/zend-view",
     "deps": 5041,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "symfony/security",
     "deps": 4696,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "zendframework/zend-db",
     "deps": 4113,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    },
    {
     "name": "zendframework/zend-form",
     "deps": 4111,
     "reason": "archived",
     "bucket": "conf",
     "malicious": false
    }
   ]
  }
 }
}