Top issues
Detected presence of software components that had a recent package version removal incident.
hunting
Problem
Software developers use programming and design knowledge to build reusable software components. Software components are the basic building blocks for modern applications. Software consumed by an enterprise consists of hundreds, and sometimes even thousands of open source components. Software developers publish components they have authored to public repositories. Some open source repositories allow the developers to take down software component versions that they have published. For open source projects, version unpublishing is uncommon. Versions are typically removed due to a security incident, such as malicious code tampering or accidental development secrets exposure. Software developers often prioritize taking down such packages before informing the community that they have experienced a security incident. Therefore, it is prudent to review the reasons behind software version removals as these events might be a signal of an ongoing software supply chain attack.Prevalence in PyPI community
47 packages
found in
Top 100
238 packages
found in
Top 1k
1834 packages
found in
Top 10k
89.18k packages
in community
Next steps
Review software component documentation for the reasons behind the recent version removal.
If the software version was removed due to a security incident, investigate the build and release environment for software supply chain compromise.
Revise the use of components that raise these alarms. If you can't deprecate those components, make sure that their versions are pinned.
Avoid using this software package until it is vetted as safe.
Top behaviors
Queries the system time.
settings
Prevalence in PyPI community
Behavior often found in this community (Common)
74 packages
found in
Top 100
598 packages
found in
Top 1k
4564 packages
found in
Top 10k
227.42k packages
in community
Queries the computer's network name and IP address.
network
Prevalence in PyPI community
Behavior often found in this community (Common)
13 packages
found in
Top 100
114 packages
found in
Top 1k
718 packages
found in
Top 10k
18.87k packages
in community
Imports the "sys" module, which provides access to system-specific parameters and functions.
execution
Prevalence in PyPI community
Behavior often found in this community (Common)
100 packages
found in
Top 100
840 packages
found in
Top 1k
7148 packages
found in
Top 10k
332.43k packages
in community
Imports the "json" module, which implements functions for manipulating JSON files.
execution
Prevalence in PyPI community
Behavior often found in this community (Common)
58 packages
found in
Top 100
522 packages
found in
Top 1k
4278 packages
found in
Top 10k
241.62k packages
in community
Imports the "datetime" module, which exposes classes for manipulating dates and times.
execution
Prevalence in PyPI community
Behavior often found in this community (Common)
65 packages
found in
Top 100
485 packages
found in
Top 1k
4205 packages
found in
Top 10k
196.19k packages
in community
Top vulnerabilities
No vulnerabilities found.