Malware

Review malware findings in imported SBOMs.

Use the Malware tab to review malware findings across imported SBOMs.

Use Search by name or dependency to find a finding. Select Filter to limit visible results. Use the entries selector to change the number of displayed rows.

The Malware tab displays the following information:

• Name identifies the malware finding.

• Discovered shows when the finding was discovered.

• CVSS shows the severity score.

• Dependencies lists affected components.

• Review status shows the review state.

See information about a specific malware finding

Select a malware finding to open its detail view. This view shows:

• The malware identifier.

• The publication and latest update dates.

• The affected dependency and package manager.

• The OSV advisory and its source link.

• A description of the malicious package and its impact.

Select Show more to read the full advisory description.

Use Set a review status for SBOM file to select an SBOM or all SBOMs. You can flag the finding as malicious or mark it as unaffected.