Spectra Assure
Community
Docs
failIncident: Malware
Scanned: 6 days ago

cychelloworld

Artifact:
latest
removed
malicious
Research
License: unknown
Published: 10 months ago
Publisher: ahban
See on Visual Studio Code

SAFE Assessment

Compliance

Licenses
No license compliance issues
Secrets
No sensitive information found

Security

Vulnerabilities
3 severe vulnerabilities exploited
Hardening
No application hardening issues

Threats

Tampering
1 components prone to hijacking
Malware
1 supply chain attack artifacts

INCIDENTS FOR THIS VERSION:

malware
9 months agoReported By: ReversingLabs (Researcher)
Learn more about malware detection
removal
Reported By: Community
List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2025/12/12
All detected vulnerabilities are fixable
Run the update/upgrade command in your package manager to resolve the detected vulnerabilities
CVSS Score
CVE
Name
Tags
critical
9.4
CVE-2025-7783
—
Exploits Exist
Fix Available
high
7.7
CVE-2025-27152
—
Exploits Exist
Fix Available
high
7.5
CVE-2025-58754
—
Exploits Exist
Fix Available

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.