The commands allow the malware to self-update, with the attackers being able to deliver a new version, as well as additional payloads in the form of Python scripts.

The scan command is: osv-scanner scan image <image-name>:<tag> The scanner now also detects vulnerabilities in other formats of project and container dependencies: Node modules, Python wheels, ...