-= Per source details. Do not edit below this line.=-
Package exploits dependency confusion. A beacon request is used to report usage back, but no additional information are exfiltrated.
Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.
Campaign: GENERIC-beacon-dependency-confusion
Reasons (based on the campaign):
typosquatting
dependency-confusion
1.0.12.0.02.0.12.0.22.0.32.0.4Exploitability
AV:NAC:LPR:NUI:NScope
S:CImpact
C:HI:HA:H10.0/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H