failIncident: Malware

Scanned:

pdf-to-office

latest

removed

malicious

Research

A lightweight npm library for converting PDF files to Office

License: Permissive (ISC)

Published:

See on npm

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

1 web service credentials found

Security

Vulnerabilities

No known vulnerabilities detected

Hardening

No application hardening issues

Threats

Tampering

1 components prone to hijacking

Malware

4 supply chain attack artifacts

IMPORTANT: All versions of this package have been malicious

Latest malware incident detected:

Version: 1.1.2

INCIDENTS FOR THIS VERSION:

malware

Reported By: ReversingLabs (Researcher)

Learn more about malware detection

removal

Reported By: Community

Historical list of all previously published software package versions.

Versions overview

Versions

348

Recorded Downloads Since 2021

Direct Imports

Incidents

v1.1.2

removed

malicious

Research

Published:

fail

Risk: Malware

4 supply chain attack artifacts

+1 other deployment risk

v1.0.2

removed

malicious

Research

Published:

fail

Risk: Malware

8 supply chain attack artifacts

+2 other deployment risks

v1.0.1

removed

malicious

Research

Published:

fail

Risk: Malware

7 supply chain attack artifacts

+2 other deployment risks

v1.0.0

removed

malicious

Research

Published:

fail

Risk: Malware

7 supply chain attack artifacts

+2 other deployment risks

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.