Spectra Assure
Community
Docs
failIncident: Malware
Scanned: 11 days ago

Code LLDB

Artifact:
latest
removed
malicious
Top 10k
A native debugger powered by LLDB. Debug C++, Rust and other compiled languages with VSCode
License: Permissive (MIT)
Published: 20 days ago
Publisher: codevsce
Visit Github
See on Visual Studio Code

SAFE Assessment

Compliance

Licenses
No license compliance issues
Secrets
No sensitive information found

Security

Vulnerabilities
No known vulnerabilities detected
Hardening
No application hardening issues

Threats

Tampering
1 components prone to hijacking
Malware
2 analyst-vetted malware found

INCIDENTS FOR THIS VERSION:

malware
16 days agoReported By: Community (Secure Annex)
More info
removal
14 days agoReported By: Community
malware
11 days agoReported By: ReversingLabs (Researcher)
Learn more about malware detection
Spectra Assure analysis detects 2 more components
Learn more about Spectra Assure
Below is the list of direct dependencies declared by the software package through its manifest.
Name
Version
jsonc-parser
^3.3.1
string-argv
^0.3.2
yaml
^1.10.0

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.