On: Ask HN: How do you check for malware in OSS packages?

[avichalp]

If you are looking for something that helps you keep your OSS packages secure, then Snyk[0] is doing an excellent job at it.

[0] https://snyk.io

[riyakhanna1983 → avichalp]

Snyk only checks for known vulnerabilities, not if the package itself is malicious.