Corrections Needed for Several Malware Attributions

[behnazh-w]

Describe the bug
As part of the Macaron package, we have identified several malicious Python packages in your records that have been incorrectly attributed to ReversingLabs as the FINDER. Two examples are the manyhttps and multiconnection packages. We are happy to provide confirmation emails from the PyPI security team for our reports. How can we share this information to update your records?

[hogo6002]

Hi @behnazh-w, thanks for reporting!

OSV gets all malicious package information from upstream. To correct the record, could you please raise an issue there to provide feedback directly to the record's originator?

FAQ: https://google.github.io/osv.dev/faq/#ive-found-something-wrong-with-the-data

[github-actions]

✨ Thank you for your interest in OSV.dev's data quality! ✨

Please review our FAQ entry on how to most efficiently have this addressed.

[behnazh-w]

Thank you, @hogo6002. I have opened an issue in the upstream repository: ossf/malicious-packages#660.

[hogo6002]

Thanks Behnaz! Close this issue for now, feel free to reopen it if you have any other issues.