Our AI threat analyst detects malicious packages and blogs about OSS compromises
7000 write-ups and counting Read one
Real bash commands for PowerShell with typed objects. 76 commands (ls, grep, sort, awk, sed, jq, find, ps, du, tar, etc.) that accept real bash flags and return structured PowerShell objects while producing identical text output. Pipeline bridge pattern preserves typed objects through grep, sort, head, tail.
License: unknown
Published: 4 days ago
Licenses
No license compliance issues
Secrets
No sensitive information found
Vulnerabilities
No known vulnerabilities detected
Hardening
No application hardening issues
Tampering
No evidence of software tampering
Malware
No evidence of malware inclusion
List of software behaviors discovered with static code analysis.
Retrieves the name of the user associated with the process. 1 search
Prevalence in PowerShell Gallery community Behavior often found in this community (Common) 1.29k packages
in community
Loads additional snap-ins or modules to the current session. 1 payload
Prevalence in PowerShell Gallery community Behavior often found in this community (Common) 5.29k packages
in community
Contains potentially obfuscated code or data. 1 packer
Prevalence in PowerShell Gallery community Behavior commonly used by malicious software (Important) Behavior uncommon for this community (Uncommon) Imports values from .PSD1 file. 1 file
Prevalence in PowerShell Gallery community Behavior uncommon for this community (Uncommon) Interacts with Microsoft .NET Framework code, types and assemblies. 1 execution
Prevalence in PowerShell Gallery community Behavior often found in this community (Common) 11.95k packages
in community
Evaluates code dynamically. 1 execution
Prevalence in PowerShell Gallery community Behavior often found in this community (Common) 4.69k packages
in community
Downloads or installs modules from remote repositories. 1 execution
Prevalence in PowerShell Gallery community Behavior often found in this community (Common) 2.56k packages
in community
Creates and interacts with additional .NET objects. 1 execution
Prevalence in PowerShell Gallery community Behavior often found in this community (Common) 3.02k packages
in community
Detects generic virtualized environments. 1 evasion
Prevalence in PowerShell Gallery community Behavior commonly used by malicious software (Important) Behavior uncommon for this community (Uncommon) Executes a Base64-encoded string. 1 packer
Prevalence in PowerShell Gallery community Behavior commonly used by malicious software (Important) Behavior uncommon for this community (Uncommon)