Early Access — Mondoo Vulnerability Intelligence is currently in preview.
Mondoo Vulnerability Intelligence
Search vulnerabilities and malicious packages across npm, PyPI, Go, GitHub Actions, VS Code, and more.
Search vulnerabilities and malicious packages across npm, PyPI, Go, GitHub Actions, VS Code, and more.
-= Per source details. Do not edit below this line.=-
Importing the module downloads and executes malware
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2025-12-colorfulpacket
Reasons (based on the campaign):
malware
Downloads and executes a remote executable.
0.0.1Exploitability
AV:NAC:L10.0/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H