Terms of use

Last updated: September 25, 2026

OpenSourceMalware helps security professionals research threats, protect their organizations, and respond to incidents faster. These terms explain what you can do with our data, what needs a license, and what is never allowed. They apply to everyone who uses OpenSourceMalware, whether you have a free account, a trial, or a paid plan.

OpenSourceMalware is operated by OSM Security, Inc. ("we" or "us"). By creating an account or using this service, you agree to these terms. If you’re using OpenSourceMalware for an organization, you confirm that you have the authority to agree on its behalf.

1. What you can do

You can use our data for research and to protect your own organization. For example, you can:

  • Research malware trends, threat actors, campaigns, and attack techniques
  • Check whether a package is malicious before you use it
  • Investigate whether your organization has been exposed to a threat
  • Respond to security incidents
  • Feed our data into your internal tools, pipelines, and platforms
  • Share internal reports with leadership, legal counsel, or your cyber insurer

Using our API for this is encouraged, including automated lookups, bulk pulls, and storing the data in your own systems. That's how threat feeds are meant to work. Contractors working on your behalf can use the data under the same rules, and you're responsible for them.

2. What needs a license

If people outside your organization benefit from our data as part of something you sell or deliver, that's commercial use, and you need a license agreement with us first. This includes:

  • Building our data into a commercial product, such as a threat intelligence platform, AppSec tool, or vulnerability management product
  • Offering managed security, consulting, or incident response services that use our data
  • Sharing or selling our data, or a dataset built from it
  • Training AI models for commercial purposes

To discuss a license, contact us via the contact form.

3. AI services

Don't give our data to an AI provider that can use it to train its models. Using AI tools with our data is fine when your agreement with the provider prohibits training on your inputs.

4. What is never allowed

  • Scraping or crawling our datafeed with bots or other automated tools.
  • Getting around API rate limits or access controls, for example by creating multiple accounts.

5. Trials

If we give you trial access to paid features, use it only to evaluate whether to buy, and only within your organization. Data you receive through a trial is confidential. Your trial ends when either of us says it's over, or when we turn off your trial access. Within 30 days after it ends, delete any data you received through the trial that free accounts can't access, unless you've signed up for a paid plan. We may ask you to confirm the deletion in writing.

6. Ownership

Our data belongs to us. We give you a limited license to use it as these terms allow, and we can revoke that license if you break these terms.

7. No guarantees

Threat intelligence can be wrong, including false positives and false negatives. Our data and service are provided "as is," without warranties of any kind. You're responsible for decisions you make using them.

8. If you break these terms

We may end your access, your license to use our data ends automatically, and you may be liable for damages, including any profits from unauthorized use. We'd rather work things out than take enforcement action, so if you think you've crossed a line, please reach out via the contact form. If you see someone else misusing our data, please tell us the same way.