github: Dependabot alerts on malicious packages across more ecosystems
GitHub Advisory Database now ingests malware advisories from OpenSSF’s malicious-packages repository, expanding the malware data available to Dependabot alerts. This broadens coverage across more ecosystems.