Spectra Assure
Community
failIncident: Malware
Scanned: 12 days ago

Vetur-wepy

Artifact:
latest
removed
malicious
Top 10k
Vue tooling for VS Code 简单粗暴的添加对wepy框架的.wpy后缀支持
License: unknown
Published: about 7 years ago
Publisher: hu2ren
Visit GitHub
See on Visual Studio Code

SAFE Assessment

Compliance

Licenses
2 copyleft licensed components
Secrets
No sensitive information found

Security

Vulnerabilities
37 severe vulnerabilities exploited
Hardening
2 baseline mitigations missing

Threats

Tampering
3 components with malware history
Malware
4 undesirable applications found

INCIDENTS FOR THIS VERSION:

malware
10 months agoReported By: ReversingLabs (Automated)
Learn more about malware detection
removal
N/AReported By: Community
List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2026/01/03
CVSS Score
CVE
Name
Tags
critical
9.8
CVE-2019-10746
—
Exploits Exist
Fix Available
critical
9.8
CVE-2019-10747
—
Exploits Exist
Fix Available
critical
9.8
CVE-2019-15657
—
Fix Available
critical
9.8
CVE-2019-19919
—
Exploits Exist
Fix Available
critical
9.8
CVE-2020-7774
—
Exploits Exist
Fix Available
critical
9.8
CVE-2020-7788
—
Exploits Exist
Fix Available
critical
9.8
CVE-2021-23369
—
Exploits Exist
Fix Available
critical
9.8
CVE-2021-23383
—
Exploits Exist
Fix Available
critical
9.8
CVE-2021-23440
—
Exploits Exist
Fix Available
critical
9.8
CVE-2021-3918
—
Exploits Exist
Fix Available

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.