workweaver

Artifact:

latest

malicious

AI for business operations — open-source, self-hostable

License: Copyleft (AGPL-3.0-or-later)

Published:

Visit GitHub

See on PyPI

SAFE Assessment

Compliance

Licenses

1 copyleft licensed components

Secrets

4 web service credentials found

Security

Vulnerabilities

1 high severity vulnerabilities

Hardening

No application hardening issues

Threats

Tampering

1 dangerous AI extensions

Malware

1 malicious components found

INCIDENTS FOR THIS VERSION:

malware

Reported By: ReversingLabs (Automated)

Learn more about malware detection

Overview issues20 vulnerabilities1 malware1 behaviors236 dependencies74 contributors1 versions11

List of detected malware threats.

Threat name

Count

Description

Hyperlink.Punycode

1 on component

Hyperlinks are used to direct the user or an application to other resources, most commonly websites or files hosted on the world wide web. Attackers can use the structure and content of hyperlinks to mislead the user, using spelling and syntax variations known as typosquats, homoglyphs, and other techniques to appear legitimate, but in actuality redirect the user to a phishing page or a malicious file.

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.