Malicious package versions found by Strix's own scanning of new releases & public reports, plus those from ossf/malicious-packages & OSV.dev. Generated; don't edit.
One file per registry. Each row is tab-separated:
<package> <version> <advisory id> <advisory URL>.
The version is exact, >=<version>, or * for every version.