Spectra Assure
Community
Docs

requestsprov2.2

malicious
Research
Copy SHA256
License: unknown
PyPI
Published: over 1 year ago
Fail
Incident: Malware
5 supply chain attack artifacts
Incidents
Type: malwareReported By: ReversingLabs (Researcher) Reported: about 1 year ago
Learn more about malware detection
Type: malwareReported By: Community (OpenSSF)Reported: 5 months ago

SAFE Assessment

Compliance

Licenses
No license compliance issues
Secrets
No sensitive information found

Security

Vulnerabilities
No known vulnerabilities detected
Hardening
No application hardening issues

Threats

Tampering
2 suspicious application behaviors
Malware
5 supply chain attack artifacts

Issues

See all issues
high
Detected presence of files containing domains used for intercepting and inspecting HTTP requests.
hunting
high
Detected presence of files containing URLs that link to raw files on GitHub.
hunting
high
Detected presence of files with behaviors similar to malicious packages published on PyPI.
hunting
high
Detected presence of malicious files through analyst-vetted file reputation.
threats
high
Detected presence of known software supply chain attack artifacts.
threats

Behaviors

See all behaviors
Permits an incoming connection on a TCP socket.
network
Sends data on a connected TCP socket.
network
Receives data from a connected TCP socket.
network
Opens a socket listening for an incoming connection.
network
Decodes data using the Base64 algorithm.
packer

Vulnerabilities

critical0
high0
medium0
low0

Downloads

528
Total Downloads

Maintenance

0
Maintainers

Dependencies

0
Declared Dependencies

Dependents

0
Dependents

Issues per Version Graph

Scanned 20 days ago