StepSecurity OSS AI Package Analyst

Named by 2 kept items in this workspace.

Search every workspace for StepSecurity OSS AI Package Analyst. It matches the name as written, so it can find other things that share it.

The items that name it 2

@7nohe/openapi-react-query-codegen Compromised Through an Exposed npm Publishing Workflow
writeup2026-08-28
Hosted AI model that performed independent static analysis of package version 3.0.4, assigning a security score of 0, critical risk, and a rejected recommendation, identifying XOR decoded code passed to the JavaScript Function constructor, the malicious preinstall hook, and obfuscated binding.gyp ex
jscrambler npm package publishes malicious preinstall binary
writeup2026-07-12
Automated detection system that flagged jscrambler 8.14.0 with a suspicion score of 0 (maximum) on publish, triggering the investigation

All technologies in this workspace.