w3bs.AccountStart building
PACKAGES / Ollama

Ollama

Runs open-weight language models locally behind a CLI and a local HTTP API.

ThreatCrush · No malware found
INSTALLw3bs install ollama.com/ollama

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install ollama.com/ollamaInstall Ollama and track it for updates
  2. ollama run gemma4Download a model if needed and chat with it
  3. ollama pull <model>Download a model from the library without running it
  4. ollama lsList models downloaded on this machine
  5. ollama launch claudeLaunch Claude Code wired to a local Ollama model
  6. ollama run hf.co/profullstack/saas-business-strategist-agent-GGUFTry a model: Profullstack's CPU-friendly SaaS business strategist from Hugging Face (hf.co/ models need Ollama 0.3.13 or later)
  7. curl -fsSL https://ollama.com/install.sh | shUpdate: rerun the installer (w3bs update does this for you). On Linux it uses sudo to install a systemd service; on macOS it installs Ollama.app

Every option: ollama --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in Ollama 0.40.14. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-11-05 00:14 UTC · threatcrush 0.13.30
Files
1316 (installer + github.com/ollama/ollama)
Findings
3 high · 4 medium · 2 low
9 other findings (not malware)
  • high
    unquoted expansion in a destructive commandinstaller/install.sh:19sh-unquoted-expansion-destructive · CWE-78
  • high
    Hardcoded Credentialsource/model/renderers/lfm2.go:18secret-generic-credential · CWE-798
  • high
    unquoted expansion in a destructive commandsource/scripts/install.sh:19sh-unquoted-expansion-destructive · CWE-78
  • medium
    MAC or signature compared with ==source/app/ui/app/src/components/ModelPicker.tsx:50js-timing-unsafe-mac-compare · CWE-208
  • medium
    MAC or signature compared with ==source/app/ui/app/src/components/ModelPicker.tsx:333js-timing-unsafe-mac-compare · CWE-208
  • medium
    MAC or signature compared with ==source/app/ui/app/src/hooks/useSelectedModel.ts:57js-timing-unsafe-mac-compare · CWE-208
  • medium
    MAC or signature compared with ==source/app/ui/app/src/hooks/useSelectedModel.ts:184js-timing-unsafe-mac-compare · CWE-208
  • low
    SQL text produced by a format helpersource/app/store/database_test.go:436sql-format-call · CWE-89
  • low
    SQL text produced by a format helpersource/app/store/database_test.go:446sql-format-call · CWE-89

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/ollama.com/ollama/badge.svg)](https://w3bs.org/packages/ollama.com/ollama)