failIncident: Malware

Scanned:

build-metadata-logger

Artifact:

latest

removed

malicious

Research

Build-environment metadata logger for CI/CD pipelines

License: Permissive (MIT)

Published:

See on PyPI

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

No sensitive information found

Security

Vulnerabilities

No known vulnerabilities detected

Hardening

No application hardening issues

Threats

Tampering

2 malware-like behaviors found

Malware

3 supply chain attack artifacts

INCIDENTS FOR THIS VERSION:

malware

Reported By: Community (kam193)

More info

malware

Reported By: Community (OpenSSF)

More info

removal

Reported By: Community

malware

Reported By: ReversingLabs (Researcher)

Learn more about malware detection

Overview issues8 vulnerabilities0 malware3 behaviors14 dependencies0 contributors0 versions1

List of detected malware threats.

Threat name

Count

Description

Infostealer.SupplyChain

3 on components

An infostealer is a type of malware designed to collect and steal personal information, including passwords and payment details. It employs various techniques such as capturing keystrokes, taking screenshots, monitoring network activity, and tracking user behavior to collect sensitive data. The stolen information may be stored locally for later retrieval or transmitted directly to a remote destination.

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.

build-metadata-logger

SAFE Assessment

Compliance

Security

Threats

IMPORTANT: All versions of this package have been maliciousLatest version with malware incident detected: about 2 months agoVersion: 0.0.1

INCIDENTS FOR THIS VERSION:

Did you know...