Check your dependencies for malware and vulnerabilities without leaving VS Code

Meet Spectra Code, for free

Get the extension
Spectra Assure
Community
  • Toolbox
  • Explore
  • Learn
  • ReversingLabs
    • Spectra Assure
    Community
    Quarantine
    Scanned: 11 days ago

    aiocpa

    0.1.14
    Artifact:
    aiocpa-0.1.14-py3-none-any.whl
    latest
    removed
    malicious
    Research
    sync & async Crypto Pay API client.
    License: Permissive (MIT)
    Published: almost 2 years ago
    See on PyPI

    SAFE Assessment

    Compliance

    Licenses
    No license compliance issues
    Secrets
    No sensitive information found

    Security

    Vulnerabilities
    1 high severity vulnerabilities
    Hardening
    No application hardening issues

    Threats

    Tampering
    4 malware-like behaviors found
    Malware
    3 supply chain attack artifacts

    INCIDENTS FOR THIS VERSION:

    malware
    almost 2 years agoReported By: ReversingLabs (Researcher)
    See more info on our blog
    malware
    almost 2 years agoReported By: Community (Phylum)
    More info
    removal
    almost 2 years agoReported By: Community
    malware
    almost 2 years agoReported By: Community (Snyk)
    More info
    malware
    almost 2 years agoReported By: Community (OpenSSF)
    More info
    Overviewissues12vulnerabilities1malware3behaviors20dependencies5contributors1versions15

    Did you know...

    ... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

    We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.