Check your dependencies for malware and vulnerabilities without leaving VS Code

Meet Spectra Code, for free

Get the extension
Spectra Assure
Community
  • Toolbox
  • Explore
  • Learn
  • ReversingLabs
    • Spectra Assure
    Community
    Quarantine
    Scanned: 12 days ago

    mnemonic-py

    0.21
    Artifact:
    mnemonic_py-0.21.tar.gz
    latest
    removed
    malicious
    Research
    # mnemonic-py
    License: unknown
    Published: 3 months ago
    Visit GitHub
    See on PyPI

    SAFE Assessment

    Compliance

    Licenses
    No license compliance issues
    Secrets
    1 active web service credentials

    Security

    Vulnerabilities
    No known vulnerabilities detected
    Hardening
    No application hardening issues

    Threats

    Tampering
    1 malware-like behaviors found
    Malware
    5 supply chain attack artifacts

    INCIDENTS FOR THIS VERSION:

    malware
    10 months agoReported By: Community (OpenSSF)
    More info
    malware
    10 months agoReported By: Community (kam193)
    More info
    malware
    3 months agoReported By: Community (Snyk)
    More info
    removal
    3 months agoReported By: Community
    malware
    3 months agoReported By: Community (GitHub Advisory)
    More info
    malware
    about 2 months agoReported By: ReversingLabs (Researcher)
    Learn more about malware detection
    Overviewissues13vulnerabilities0malware4behaviors42dependencies0contributors1versions1

    Did you know...

    ... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

    We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.