failIncident: Malware

Scanned:

solana-token

Artifact:

latest

malicious

Research

Solana token package

License: unknown

Published:

See on PyPI

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

No sensitive information found

Security

Vulnerabilities

No known vulnerabilities detected

Hardening

No application hardening issues

Threats

Tampering

2 malware-like behaviors found

Malware

3 supply chain attack artifacts

IMPORTANT: All versions of this package have been malicious

Latest malware incident detected:

Version: 0.0.2

INCIDENTS:

malware

Reported By: ReversingLabs (Researcher)

Learn more about malware detection

malware

Reported By: Community (OpenSSF)

More info

Historical list of all previously published software package versions.

Versions overview

Versions

828

Total Downloads

Direct Imports

Incidents

v0.0.2

malicious

Research

Artifact: solana_token-0.0.2-py3-none-any.whl

Published:

fail

Risk: Malware

3 supply chain attack artifacts

+2 other deployment risks

v0.0.1

malicious

Research

Artifact: solana_token-0.0.1-py3-none-any.whl

Published:

fail

Risk: Malware

3 supply chain attack artifacts

+2 other deployment risks

v1.0.2

removed

malicious

Research

Artifact: solana_token-1.0.2-py3-none-any.whl

Published:

fail

Risk: Malware

2 supply chain attack artifacts

+2 other deployment risks

v1.0.1

removed

malicious

Research

Artifact: solana_token-1.0.1-py3-none-any.whl

Published:

fail

Risk: Malware

2 supply chain attack artifacts

+2 other deployment risks

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.