Spectra Assure
Community
Docs
failIncident: Malware
Scanned: 18 days ago

Language Support for Java(TM) by Red Hat

Artifact:
malicious
key project
Top 100
License: unknown
Published: 4 months ago
Publisher: redhat
See on Visual Studio Code

SAFE Assessment

Compliance

Licenses
No license compliance issues
Secrets
8 debugging symbols found

Security

Vulnerabilities
1 critical severity vulnerabilities
Hardening
1 unsafe code linking practices

Threats

Tampering
5 tampered signatures detected
Malware
5 tampered signatures detected

INCIDENTS:

malware
4 months agoReported By: ReversingLabs (Automated)
Learn more about malware detection
List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2025/10/16
All detected vulnerabilities are fixable
Run the update/upgrade command in your package manager to resolve the detected vulnerabilities
CVSS Score
CVE
Name
Tags
critical
9.8
CVE-2017-1000487
—
Fix Available
high
7.5
CVE-2022-4244
—
Fix Available
high
7.5
CVE-2023-6378
—
Fix Available
medium
5.3
CVE-2025-48924
—
Fix Available
medium
4.3
CVE-2022-4245
—
Fix Available

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.