Evidence · DiggingBeagle record
GitHub Advisory GHSA-76h8-w3px-47hx, malicious is-it-ai
The advisory identifies is-it-ai 0.1.0, 0.1.1 and 0.1.3 as malicious, and describes installation through other apparently useful packages, including a skill-analysis package.
- Source role
- primary disclosure
Evidence record
The advisory identifies is-it-ai 0.1.0, 0.1.1 and 0.1.3 as malicious, and describes installation through other apparently useful packages, including a skill-analysis package.
Claim-level citations (1)
- supportsAI skill utility dependencies carried malicious is-it-ai packages from PyPI: The advisory identifies is-it-ai 0.1.0, 0.1.1 and 0.1.3 as malicious, and describes installation through other apparently useful packages, including a skill-analysis package.
GitHub malware advisory, package dependency chain and activation