GitHub has extended its malware advisories beyond npm, now integrating OpenSSF’s malicious-packages data into its Advisory Database. This expansion significantly strengthens supply chain security, offering broader protection against vulnerabilities for developers.
Source: GitHub Blog