failIncident: Malware

Scanned:

@redhat-cloud-services/entitlements-client

removed

malicious

Research

License: Permissive (Apache-2.0)

Published:

Visit GitHub

See on npm

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

No sensitive information found

Security

Vulnerabilities

No known vulnerabilities detected

Hardening

No application hardening issues

Threats

Tampering

2 malware-like behaviors found

Malware

4 analyst-vetted malware found

INCIDENTS FOR THIS VERSION:

malware

Reported By: Community (Aikido Security)

More info

malware

Reported By: Community (Socket)

More info

malware

Reported By: Community (GitHub Advisory)

More info

malware

Reported By: Community (OpenSSF)

More info

removal

Reported By: Community

malware

Reported By: ReversingLabs (Researcher)

Learn more about malware detection

Overview issues2 vulnerabilities0 malware4 behaviors9 dependencies2 contributors11 versions160

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.

@redhat-cloud-services/entitlements-client

SAFE Assessment

Compliance

Security

Threats

INCIDENTS FOR THIS VERSION:

Did you know...

Problem

Prevalence in npm community

Next steps

Problem

Prevalence in npm community

Next steps

@redhat-cloud-services/entitlements-client

SAFE Assessment

Compliance

Security

Threats

IMPORTANT: This package had 3 malicious incidents in versions published within 2 years prior to the latestLatest version with malware incident detected: 21 days agoVersion: 4.0.14

INCIDENTS FOR THIS VERSION:

Did you know...

SQ30109Detected presence of malicious files through analyst-vetted file reputation.Causes risk: analyst-vetted malware foundthreats

Problem

Prevalence in npm community

Next steps

TH15108Detected presence of files with behaviors that match the infostealer malware profile.Causes risk: malware-like behaviors foundhunting

Problem

Prevalence in npm community

Next steps