New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
Get Started

Dual-use functionality

Severity

Medium

Short Description

This package is a security research or testing tool — such as those used for offensive security, penetration testing, or vulnerability research — with legitimate professional uses that can also be misused for unauthorized or malicious purposes. Examples include network scanning and enumeration tools, exploitation frameworks, password-cracking and testing utilities, web application security testing tools, reverse engineering and debugging tools, packet manipulation and injection libraries, and privilege escalation utilities.

Suggestion

Confirm that this tool is appropriate for your use case and that its presence in your dependency tree is intentional. Dual-use tools are legitimate for authorized security work, but can be dangerous if introduced unexpectedly or used outside controlled environments.