The Package Analysis project analyses the capabilities of packages available on open source repositories. The project looks for behaviors that indicate malicious software:
What files do they access?
What addresses do they connect to?
What commands do they run?
Related contents: