deepsec

deepsec deepsec は、自社インフラで実行できるエージェント駆動型の脆弱性スキャナであり、既存の大規模リポジトリ内のすべてのコードをオンデマンドでレビューするように最適化されています。 deepsec は、アプリケーションに長期間潜んでいる発見しにくい問題を表面化するように設計されています。最高のモデルを最大思考レベルで使用するように構成されているため（--thinking-level で調整可能、docs/models.md...

Malicious code in parallel-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis abf4ac32d4bbbf2bca51efed2166f670c707230f7da2b87c1318cbe8ca9dade1 The OpenSSF Package Analysis project identified 'parallel-workers' @ 99.99.101 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-6 Malicious code in parallel-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis abf4ac32d4bbbf2bca51efed2166f670c707230f7da2b87c1318cbe8ca9dade1 The OpenSSF Package Analysis project identified 'parallel-workers' @ 99.99.101 npm as malicious. It is considered malicious because: - The packa...

Malicious Package

Overview parallel-workers is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...