git-git-git
Advanced tools
git-git-git - npm Package Compare versions
New alerts
Known malware
Supply chain riskThis package version is identified as malware. It has been flagged either by Socket's AI scanner and confirmed by our threat research team, or is listed as malicious in security databases and other sources.
Found 3 instances
Install scripts
Supply chain riskInstall scripts are run when the package is installed or built. Malicious packages often use scripts that run automatically to execute payloads or fetch additional code.
AI-detected possible typosquat
Supply chain riskAI has identified this package as a potential typosquat of a more popular package. This suggests that the package may be intentionally mimicking another package's name, description, or other metadata.
Network access
Supply chain riskThis module accesses the network.
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Unpublished package
Supply chain riskPackage version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Unpopular package
QualityThis package is not very popular.
Improved metrics
- Total package byte prevSize
2379570
6637.37%- Number of package files
26
8.33%- Lines of code
894
24.69%- Number of medium quality alerts
0
-100%Worsened metrics
- Number of critical supply chain risk alerts
3
Infinity%- Number of high supply chain risk alerts
1
Infinity%- Number of low supply chain risk alerts
3
Infinity%- Number of medium supply chain risk alerts
6
200%