opensourcemalware.com valid

OpenSourceMalware

Open intelligence on malicious open-source packages, containers, repositories, IPs, wallets, and supply-chain threats. Free public threat feed with API access for security and developer teams.

For agents: Free threat intelligence feed on malicious open-source packages, containers and repos across npm, PyPI and more, with a check-malicious API and docs.

malicious packagessupply chain securitythreat feednpm pypi malwarethreat intelligence api

Their llms.txt

The beginning of the file, from our validated copy saved 2026-10-20T22:33:32.593Z. Cached copy · Source on opensourcemalware.com

# OpenSourceMalware

> Open intelligence on malicious open-source packages, containers, repositories, IPs, wallets, and supply-chain threats. Free public threat feed with API access for security and developer teams.

## Site

- [Home](https://opensourcemalware.com/): Search and browse malicious packages across npm, PyPI, RubyGems, Maven, NuGet, Go, Crates, Packagist, Homebrew, OpenVSX, VSCode, containers, and AI skills registries.
- [Use cases](https://opensourcemalware.com/use-cases): Five ways teams use the feed — block before download, detect in code, alert on new threats, respond to incidents, hunt adversaries.
- [Blog](https://opensourcemalware.com/blog): Security research, threat reports, and campaign analysis.
- [Most wanted](https://opensourcemalware.com/most-wanted): Highest-impact active threats.
- [Leaderboard](https://opensourcemalware.com/leaderboard): Top contributors to the public threat feed.
- [Activity](https://opensourcemalware.com/activity): Live stream of newly reported malicious packages.
- [Report malware](https://opensourcemalware.com/report): Submit a malicious package, container, repo, IP, or wallet.
- [Contact](https://opensourcemalware.com/contact): Reach the OpenSourceMalware team.

## API & docs

- [API overview](https://docs.opensourcemalware.com/api/overview): Endpoints, authentication, and rate limits.
- [Authentication](https://docs.opensourcemalware.com/api/authentication): How to authenticate API requests.
- [Threat feed endpoint](https://docs.opensourcemalware.com/api/feed): Polling-optimized endpoint for integrations.

## Feeds

- [RSS feed](https://opensourcemalware.com/rss.xml): Latest blog posts.
- [Sitemap](https://opensourcemalware.com/sitemap.xml): All public URLs.

## About

OpenSourceMalware tracks supply-chain threats across the open-source ecosystem: typosquats, dependency confusion, account takeovers, malicious AI skills, crypto-stealing wallets, C2 infrastructure, and DPRK-attributed campaigns. IOCs include packages, containers, repositories, domains, IPs (defanged), wallets, npm users, and Telegram bots.

Related sites

Other listed sites in Cybersecurity. See the whole category →

Machine-readable: GET /v1/resolve?q=opensourcemalware.com · GET /v1/domain/opensourcemalware.com · this page as Accept: application/json or text/markdown · MCP lookup_domain

Automatically discovered from public files. Inclusion does not imply endorsement or publisher participation.

Claim my listing on Agent Web Map for opensourcemalware.com:
1. POST https://agentwebmap.com/v1/sites/opensourcemalware.com/claims and keep claim_id and claim_secret private.
2. Publish the proof: add the line "AgentWebMap ownership: <token>" (token from step 1) to https://opensourcemalware.com/llms.txt, or use the DNS, meta-tag or well-known method the response describes.
3. POST https://agentwebmap.com/v1/sites/opensourcemalware.com/verify with {"claim_id": "...", "claim_secret": "..."}.
4. Save the api_key from the answer; it manages the listing (PATCH https://agentwebmap.com/v1/sites/opensourcemalware.com).
MCP equivalent: tools begin_ownership_claim, then verify_domain, at https://agentwebmap.com/mcp. Docs: https://agentwebmap.com/docs#verify

Corrections or removal requests: contact the directory.