Quarantine

Scanned:

invokehttp

Artifact:

latest

removed

malicious

Research

Python HTTP for Humans.

License: Permissive (MIT)

Published:

Visit GitHub

See on PyPI

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

No sensitive information found

Security

Vulnerabilities

1 high severity vulnerabilities

Hardening

No application hardening issues

Threats

Tampering

1 quarantined components found

Malware

3 supply chain attack artifacts

INCIDENTS FOR THIS VERSION:

removal

Reported By: Community

malware

Reported By: ReversingLabs (Researcher)

Learn more about malware detection

malware

Reported By: Community (OpenSSF)

More info

malware

Reported By: Community (VirusTotal)

More info

malware

Reported By: Community (GitHub Advisory)

More info

malware

N/AReported By: Community (kam193)

More info

Overview issues10 vulnerabilities1 malware3 behaviors39 dependencies6 contributors1 versions2

Below is the list of direct dependencies declared by the software package through its manifest.

Name

Version

>=2017.4.17

<6,>=3.0.2

<4,>=2

<4,>=2.5

!=1.5.7,>=1.5.6

<3,>=1.21.1

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.

invokehttp

SAFE Assessment

Compliance

Security

Threats

IMPORTANT: All versions of this package have been maliciousLatest version with malware incident detected: about 2 years agoVersion: 2.5.5

INCIDENTS FOR THIS VERSION:

Did you know...