SQ30122

Detected presence of advertising-supported applications.

priority	CI/CD status	severity	effort	SAFE level	SAFE assessment
	fail	medium	high	2	malware: fail Reason: adware applications found

About the issue

Advertising-supported software can be considered a risk by some software users. This threat type commonly collects usage and private user data, displays obtrusive advertisements, or in more extreme cases, automatically installs other unwanted applications. Most threat prevention solutions detect and block adware. Software packages that trigger security solution detections also tend to increase the number of support calls and open tickets from users.

How to resolve the issue

• Revise the use of components that raise these alarms. If you can't deprecate those components, make sure they are well-documented.

Incidence statistics

ReversingLabs periodically collects and analyzes the contents of popular software package repositories for threat research purposes. Analysis results are used to calculate incidence statistics for issues (policy violations) that Spectra Assure can detect in software packages.

This section is updated when new data becomes available.

Total amount of packages analyzed

• RubyGems: 183K
• Nuget: 644K
• PyPi: 628K
• NPM: 3.72M

Statistics are not collected for the SQ30122 policy at this time, or not applicable to this type of issue.

Recommended reading

• Adware (External resource - Wikipedia)