Supply-chain attacks move fast. We stay ahead.

Free campaign tracking

Spectra Assure

Community

Toolbox

Explore

Learn

ReversingLabs

Spectra Assure

Community

PS Gallery

Search by package name, PURL or hash

failRisk: Secrets

Scanned:

Entra-PIM

Top 10k

Manage Microsoft Entra PIM roles for both Entra ID and Azure Resources with an interactive console experience. Features browser-based authentication with ForceLogin, cross-platform support (Windows/macOS), automatic step-up MFA handling, one-command activation/deactivation of eligible roles, and auto-installation of dependencies. Just run Start-EntraPIM - no app registration or complex configuration required.

License: unknown

Published:

Visit GitHub

See on PowerShell Gallery

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

4 source control artifacts found

Security

Vulnerabilities

No known vulnerabilities detected

Hardening

No application hardening issues

Threats

Tampering

No evidence of software tampering

Malware

No evidence of malware inclusion

INCIDENTS FOR THIS VERSION:

Overview issues7 vulnerabilities0 malware0 behaviors84 dependencies0 contributors4 versions39

FAQ for Entra-PIM

What is Entra-PIM?

Is Entra-PIM malicious or is it safe to use?

The PS Gallery package Entra-PIM was scanned for malware, software tampering, risky behaviors, exposed secrets and known vulnerabilities. The package contains risks, and the analysis results should be reviewed before it is downloaded and used. Visit the Issues and Behaviors sections of the analysis for more details. There has been 1 compromised malicious version of Entra-PIM. The most recent was 2.3.3 8 months ago.

Does Entra-PIM have known vulnerabilities?

No vulnerabilities have been detected for this version of Entra-PIM.

Is Entra-PIM popular?

The PS Gallery package Entra-PIM ranks among the top 10000 projects in this community. It has 568 recorded downloads. A package's popularity is not a good indicator of its safety, visit the SAFE Assessment section to see the full analysis of package deployment risk categories.

Read our best practices for protecting your software supply chain guide.

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.

Entra-PIM@2.2.8 - PowerShell Gallery: Malware Incident & Safety Report | ReversingLabs Spectra Assure Community

Popularity

568

Total Downloads

Contributors

Declared Dependencies

Dependents

Top issues

See all issues

Problem

Source Code Management (SCM) tools provide version control tracking for application source code. They track development histories for each source code unit, and store them in a version-control-specific database format. For convenience, the source code repository and its version control database typically reside in the same folder. Because some programming languages package source code as an artifact during the build, it is possible to misconfigure the packaging step and include the version control database. Contents of this database include all historic changes for the version control tracked repository. This includes private keys, certificates, and other sensitive information that should be kept secret. Given the access to a version control database, an attacker could use its artifacts to extract sensitive information, and gain privileged access.

Prevalence in PowerShell Gallery community

1 packages

found in

Top 100

50 packages

found in

Top 1k

350 packages

found in

Top 10k

618 packages

in community

Next steps

Remove all version control databases and their artifacts from the package before you release it.

Problem

Uniform Resource Locators (URLs) are structured addresses that point to locations and assets on the internet. URLs allow software developers to build complex applications that exchange data with servers that can be hosted in multiple geographical regions. URLs can commonly be found embedded in documentation, configuration files, source code and compiled binaries. One or more embedded URLs were discovered to link to raw files hosted on GitHub. Attackers often abuse popular web services to host malicious payloads. Since code-sharing service URLs are typically allowed by security solutions, using them for payload delivery increases the odds that the malicious code will reach the user. While the presence of code-sharing service locations does not imply malicious intent, all of their uses in a software package should be documented and approved. An increasing number of software supply chain attacks in the open source space leverage the GitHub service to deliver malicious payloads.

Prevalence in PowerShell Gallery community

7 packages

found in

Top 100

394 packages

found in

Top 1k

1525 packages

found in

Top 10k

2.97k packages

Check the software component behaviors for anomalies.

Consider exploratory software component testing within a sandbox environment.

Consider replacing the software component with a more widely used alternative.

Avoid using this software package until it is vetted as safe.

Problem

Software components contain executable code that performs actions implemented during its development. These actions are called behaviors. In the analysis report, behaviors are presented as human-readable descriptions that best match the underlying code intent. While most behaviors are benign, some are commonly abused by malicious software with the intent to cause harm. When a software package shares behavior traits with malicious software, it may become flagged by security solutions. Any detection from security solutions can cause friction for the end-users during software deployment. While the behavior is likely intended by the developer, there is a small chance this detection is true positive, and an early indication of a software supply chain attack.

Prevalence in PowerShell Gallery community

14 packages

found in

Top 100

179 packages

found in

Top 1k

969 packages

found in

Top 10k

1.76k packages

1924 packages

found in

Top 10k

3.63k packages

in community

Top vulnerabilities

No vulnerabilities found.

Entra-PIM

SAFE Assessment

Compliance

Security

Threats

IMPORTANT: This package had 1 malicious incident in versions published within 2 years prior to the latestLatest version with malware incident detected: 8 months agoVersion: 2.3.3

INCIDENTS FOR THIS VERSION:

FAQ for Entra-PIM

What is Entra-PIM?

Is Entra-PIM malicious or is it safe to use?

Does Entra-PIM have known vulnerabilities?

Is Entra-PIM popular?

Did you know...

Popularity

Top issues

SQ34201Detected presence of version control tool artifacts.Causes risk: source control artifacts foundsecrets

Problem

Prevalence in PowerShell Gallery community

Next steps

TH17127Detected presence of files containing URLs that link to raw files on GitHub.hunting

Problem

Prevalence in PowerShell Gallery community

Next steps

TH30106Detected presence of software components that have low popularity or number of downloads.hunting

Problem

Prevalence in PowerShell Gallery community

Next steps

TH15103Detected presence of files with behaviors commonly used by malicious software.hunting

Problem

Prevalence in PowerShell Gallery community

Next steps

TH16103Detected presence of files that dynamically execute Base-encoded data.hunting

Problem

Prevalence in PowerShell Gallery community

Next steps

Top behaviors

Retrieves the name of the user associated with the process.search

Prevalence in PowerShell Gallery community

Loads additional snap-ins or modules to the current session.payload

Prevalence in PowerShell Gallery community

Imports values from .PSD1 file.file

Prevalence in PowerShell Gallery community

Interacts with Microsoft .NET Framework code, types and assemblies.execution

Prevalence in PowerShell Gallery community

Executes a file.execution

Prevalence in PowerShell Gallery community

Top vulnerabilities