workweaver

Artifact:

malicious

AI for business operations — open-source, self-hostable

License: Copyleft (AGPL-3.0-or-later)

Published:

Visit GitHub

See on PyPI

SAFE Assessment

Compliance

Licenses

1 copyleft licensed components

Secrets

3 web service credentials found

Security

Vulnerabilities

1 high severity vulnerabilities

Hardening

No application hardening issues

Threats

Tampering

1 quarantined components found

Malware

1 malicious components found

INCIDENTS FOR THIS VERSION:

malware

Reported By: ReversingLabs (Automated)

Learn more about malware detection

Overview issues19 vulnerabilities1 malware1 behaviors213 dependencies71 contributors1 versions11

List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2026/09/16

Hide triaged

CVSS Score

CVE Identifier

Summary

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.