Skip to main content

SQ30115

Detected presence of suspicious file formats.

priorityCI/CD statusseverityeffortSAFE levelSAFE assessment
passmediumhighNonemalware: warning
Reason: suspicious components found

About the issue​

Proprietary ReversingLabs malware detection algorithms have determined that the software package contains one or more suspicious files. The detection was caused by a suspicious file format. This malware detection method is considered predictive, and can typically identify unknown threats based on the file formats they use.

How to resolve the issue​

  • Suspicious detections are a lower confidence detection, so you should first review them for malicious intent.
  • If the software intent does not relate to malicious behavior, investigate the build and release environment for software supply chain compromise.
  • Proceed with increased caution when using this software package.

Incidence statistics​

ReversingLabs periodically collects and analyzes the contents of popular software package repositories for threat research purposes. Analysis results are used to calculate incidence statistics for issues (policy violations) that Spectra Assure can detect in software packages.

This section is updated when new data becomes available.

Total amount of packages analyzed

  • RubyGems: 183K
  • Nuget: 644K
  • PyPi: 628K
  • NPM: 3.72M
Statistics are not collected for the SQ30115 policy at this time, or not applicable to this type of issue.