---
id: 20260807-T0-14
title: "GitHub安全通告升级：恶意软件数据不再局限于npm"
title_en: "GitHub Expands Malware Advisories Beyond npm with OpenSSF Data"
url: https://ai.daily.yangsir.net/daily/20260807-T0-14
issue_date: 2026-08-07
publish_date: 2026-08-06T16:51:12.000Z
category: news
source_name: "GitHub Blog"
source_url: https://github.blog/security/supply-chain-security/how-we-took-malware-advisories-beyond-npm/
---

# GitHub安全通告升级：恶意软件数据不再局限于npm

GitHub宣布其安全通告系统不再局限于npm包管理器，现已整合OpenSSF的恶意软件包数据。GitHub团队表示，构建这条数据管道时采取了偏执的安全设计，确保集成过程本身不会引入新风险。此次升级意味着开发者在使用GitHub时，可以更全面地获取开源生态中的恶意软件情报。

## English Version

**GitHub Expands Malware Advisories Beyond npm with OpenSSF Data**

GitHub announced its malware advisories now extend beyond npm, integrating malicious-package data from OpenSSF. The team said they built the pipeline with a paranoid security design to avoid introducing new risks during integration. This upgrade gives developers broader malware intelligence across the open-source ecosystem directly within GitHub.

---

**来源**：[GitHub Blog](https://github.blog/security/supply-chain-security/how-we-took-malware-advisories-beyond-npm/)

**详情页**：https://ai.daily.yangsir.net/daily/20260807-T0-14

---

*智语观潮 · Daily — https://ai.daily.yangsir.net/llms.txt*