Packagist incidents
Recent Packagist vulnerabilities and malicious packages from OSV and CISA KEV, enriched with EPSS exploit probability.
Tooling for Packagist
Snyk — Scan your dependencies in CI and fix this vulnerability.→Socket — Detect malicious and compromised packages before they ship.→
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.