failIncident: Malware

Scanned:

CircuitPython v2

Artifact:

latest

malicious

Top 10k

CircuitPython for Visual Studio Code

License: Permissive (MIT)

Published:

Publisher: wmerkens

Visit Github

See on Visual Studio Code

SAFE Assessment

Compliance

Licenses

3 software distribution restrictions

Secrets

4 web service credentials found

Security

Vulnerabilities

No known vulnerabilities detected

Hardening

2 baseline mitigations missing

Threats

Tampering

3 components with malware history

Malware

1 protestware dependencies found

IMPORTANT: All versions of this package have been malicious

Latest malware incident detected:

Version: 0.3.4

INCIDENTS FOR THIS VERSION:

malware

Reported By: ReversingLabs (Automated)

Learn more about malware detection

Spectra Assure analysis detects 438 more components

Learn more about Spectra Assure

Below is the list of direct dependencies declared by the software package through its manifest.

Name

Version

@electron/node-gyp

^10.2.0-electron.2

@serialport/bindings-cpp

^13.0.1

@serialport/bindings-interface

^1.2.2

^0.5.16

^1.10.0

^12.0.2

^11.3.0

^11.1.0

^4.17.21

^7.7.2

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.