github: Dependabot alerts on malicious packages across more ecosystems

GitHub Advisory Database now ingests malware advisories from OpenSSF’s malicious-packages repository, expanding the malware data available to Dependabot alerts. This broadens coverage across more ecosystems.

• Source: GitHub