asdk-plugin-ai-platform
Advanced tools
Security placeholder - defensively registered unclaimed name, reported to the vendor.
asdk-plugin-ai-platform was unregistered on the public index while appearing in a published SDK's
auto-import allowlist. Any environment resolving that allowlist from a public index would have
installed whatever an arbitrary third party uploaded under this name.
It was registered defensively by a security researcher and reported to the vendor through their bug bounty program.
This package is inert. It provides no functionality. Its only behaviour is an install-time record that the name was installed, used to establish whether real environments resolve it.
It collects nothing about the machine it is installed on - no hostname, username, environment variables, working directory, file contents, or installed-package list.
If you did not expect this package, your build is resolving an internal package name from a public index. Please contact your security team.
FAQs
Security placeholder - defensively registered unclaimed name, reported to the vendor.
The pypi package asdk-plugin-ai-platform receives a total of 0 weekly downloads. As such, asdk-plugin-ai-platform popularity was classified as not popular.
We found that asdk-plugin-ai-platform demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.
Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.
Research
/Security News
Benign-looking npm packages split malicious functionality across a dependency chain that deploys a cross-platform RAT targeting Alibaba developers.
