TI Mindmap HUB
Threat Intelligence Report

OSV Withdraws 157 Malware Reports After Automated False Positives Hit npm and PyPI

📅 May 27, 2026 📰 socket.dev 🔍 0 CVE(s) referenced

OSV was forced to withdraw 157 malware reports after automated false positives from Amazon Inspector wrongly flagged trusted npm and PyPI packages, causing widespread disruption as inaccurate threat data propagated into security tools and developer pipelines.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle