Malicious code in pentest-copilot (RubyGems)

Source: ossf-package-analysis 8ed8a5f6d36e52a081b16492d7bc0cd65dc392d085384781cf3d661d47fca019 The OpenSSF Package Analysis project identified 'pentest-copilot' @ 1.0.1 rubygems as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in pentest-copilot (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e305059e2c1f7f8f37b8478aa90214d1e916fc3f2287eb90f7bca7e9dcac32 The gem declares an extension script mkrfconf.rb / RakeBuilder that runs automatically on gem install. At install time it collects installer-side...

pentest-copilot

Pentest Copilot An open-source, AI-driven penetration testing agent. Connects to a Kali attack box, runs tools autonomously, analyzes results, and iterates. You describe the target. It does the rest. Built for real-world engagements, boot2root boxes, and CTFs. In Action Pentest Copilot performing...