Check your dependencies for malware and vulnerabilities without leaving VS Code

Meet Spectra Code, for free

Get the extension
Spectra Assure
Community
  • Toolbox
  • Explore
  • Learn
  • ReversingLabs
    • Spectra Assure
    Community
    Quarantine
    Scanned: 6 days ago

    teligram

    1.0.0
    Artifact:
    teligram-1.0.0-py3-none-any.whl
    latest
    removed
    malicious
    Research
    Telegram based friendly library
    License: Permissive (MIT)
    Published: 9 months ago
    Visit GitHub
    See on PyPI

    SAFE Assessment

    Compliance

    Licenses
    1 software distribution restrictions
    Secrets
    1 inactive web service credentials

    Security

    Vulnerabilities
    No known vulnerabilities detected
    Hardening
    No application hardening issues

    Threats

    Tampering
    1 malware-like behaviors found
    Malware
    3 supply chain attack artifacts

    INCIDENTS FOR THIS VERSION:

    malware
    9 months agoReported By: Community (OpenSSF)
    More info
    removal
    9 months agoReported By: Community
    malware
    8 months agoReported By: ReversingLabs (Researcher)
    Learn more about malware detection
    malware
    4 months agoReported By: Community (GitHub Advisory)
    More info
    malware
    N/AReported By: Community (Badpackages)
    More info
    Overviewissues10vulnerabilities0malware3behaviors13dependencies1contributors1versions1

    Did you know...

    ... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

    We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.