Spectra Assure
Community
QuarantineReason: Heuristics
Scanned: about 19 hours ago

@validate-sdk/v2

removed
malicious
Research
---
License: Permissive (MIT)
Published: 4 months ago
Visit GitHub
See on npm

SAFE Assessment

Compliance

Licenses
No license compliance issues
Secrets
1 web service credentials found

Security

Vulnerabilities
1 severe vulnerabilities exploited
Hardening
1 unsafe code linking practices

Threats

Tampering
3 malware-like behaviors found
Malware
5 supply chain attack artifacts

INCIDENTS FOR THIS VERSION:

malware
8 months agoReported By: ReversingLabs (Researcher)
See more info on our blog
removal
8 days agoReported By: Community
malware
8 days agoReported By: Community (GitHub Advisory)
More info
malware
8 days agoReported By: Community (OpenSSF)
More info
Overviewissues17vulnerabilities20malware5behaviors265dependencies2contributors1versions21

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.

This website uses cookies to ensure the best website experience. By continuing to use this website you are giving your consent to cookies being used. Detailed information about our use of cookies is here.