failIncident: Malware

Scanned:

platforms

Artifact:

latest

removed

malicious

Research

Python 3 library for short text

License: unknown

Published:

Visit GitHub

See on PyPI

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

1 inactive web service credentials

Security

Vulnerabilities

4 medium severity vulnerabilities

Hardening

No application hardening issues

Threats

Tampering

1 suspicious application behaviors

Malware

3 supply chain attack artifacts

INCIDENTS FOR THIS VERSION:

malware

Reported By: Community (OpenSSF)

More info

removal

Reported By: Community

malware

Reported By: ReversingLabs (Researcher)

Learn more about malware detection

malware

Reported By: Community (GitHub Advisory)

More info

malware

N/AReported By: Community (kam193)

More info

Overview issues8 vulnerabilities4 malware3 behaviors27 dependencies5 contributors1 versions7

List of detected malware threats.

Threat name

Count

Description

Downloader.SupplyChain

3 on components

A downloader is a program designed to retrieve additional components or software from a remote source. While typically small in size, downloader complexity and footprint can vary based on the programming language used. The code is often written in a flexible manner, allowing it to download and execute various types of data. In malicious contexts, downloaders commonly serve as the initial stage of malware deployment. Although not all downloaders are inherently harmful, some may be considered unwanted due to their association with or installation of third-party components that users may not have intended to install.

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.

platforms

SAFE Assessment

Compliance

Security

Threats

IMPORTANT: All versions of this package have been maliciousLatest version with malware incident detected: over 2 years agoVersion: 6.0.0

INCIDENTS FOR THIS VERSION:

Did you know...