🦋 OSV has withdrawn 157 malware reports after automated detections incorrectly flagged npm and PyPI packages as malicious, pushing bad records for trusted projects into OSV-consuming security tools and CI/CD systems.

[bloglab@mstdn.feddit.social]

OSV has withdrawn 157 malware reports after automated detections incorrectly flagged npm and PyPI packages as malicious, pushing bad records for trusted projects into OSV-consuming security tools and CI/CD systems.

https://socket.dev/blog/osv-withdraws-157-malware-reports

https://bsky.app/profile/socket.dev/post/3mmtsbeufhs22

#Security #SupplyChain #Bluesky