failIncident: Malware

Scanned:

python-fork

Artifact:

removed

malicious

Research

A CLI tool to fork and set up files.

License: unknown

Published:

See on PyPI

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

No sensitive information found

Security

Vulnerabilities

No known vulnerabilities detected

Hardening

No application hardening issues

Threats

Tampering

1 components prone to hijacking

Malware

1 supply chain attack artifacts

INCIDENTS FOR THIS VERSION:

malware

Reported By: Community (Snyk)

More info

malware

Reported By: Community (kam193)

More info

malware

Reported By: Community (OpenSSF)

More info

malware

Reported By: Community (GitHub Advisory)

More info

removal

Reported By: Community

malware

Reported By: ReversingLabs (Researcher)

Learn more about malware detection

malware

Reported By: ReversingLabs (Automated)

Learn more about malware detection

Overview issues8 vulnerabilities0 malware3 behaviors2 dependencies0 contributors1 versions2

List of detected malware threats.

Threat name

Count

Description

PUA.SupplyChain

2 on components

Potentially Unwanted Applications (PUA) are programs that may be considered undesirable in certain environments. For example, a torrent downloader in a corporate setting may conflict with internal policies, even though it might be used legitimately for personal purposes. This category also includes joke applications, hoaxes, and scareware, as well as software installers that bundle third-party programs without giving users the option to decline them. Such applications can disrupt system performance, introduce security risks, or negatively impact the user experience.

Trojan.ForkBomb

1 on component

A trojan is a type of malicious software designed to deceive users by appearing legitimate while carrying out harmful activities in the background. Named after the Trojan horse from Greek mythology, trojans rely on social engineering, email attachments, deceptive advertisements, and drive-by downloads to infiltrate systems. Unlike malware with a single function, trojans often combine multiple capabilities, such as remote access, keylogging, and data theft. As a result, the term trojan is often used as a broad classification for malware with diverse functionalities.

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.

python-fork

SAFE Assessment

Compliance

Security

Threats

IMPORTANT: All versions of this package have been maliciousLatest version with malware incident detected: about 2 months agoVersion: 0.1.1

INCIDENTS FOR THIS VERSION:

Did you know...