MalDet

Scan report

OSC / ondemand

Report Rescan
Vulnerability Critical

Could an attacker exploit mistakes in this code?

716 risk score

Strong warning signs. Do not run or install this without a careful review.

High
6
Medium
256
Low
0

Sources: Bandit, Semgrep, pip-audit

Malicious pattern High

Does this code look like it is trying to cause harm?

44 risk score

Serious issues. Review the high-severity findings before using it.

High
11
Medium
5
Low
19

Sources: YARA, ClamAV, GuardDog, dependency checker

Findings overview
297 total findings
Likely real
264
Uncertain
6
Likely noise
27

The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.

What we found, in plain English

This repository has two major security issues that require immediate attention before it can be used in production. The most critical finding is a high vulnerability risk score of 716.0, which indicates the code contains dangerous patterns like SQL injection and insecure file downloads that an attacker could exploit to steal data or run malicious scripts. While there are also signs of potential malicious intent flagged by tools like YARA and GuardDog, these findings appear to be related to known malware techniques rather than intentional attacks on your own system. However, the code still contains several other serious problems, including a high score of 44.0 for suspicious patterns that might indicate an attempt to bypass security checks or execute remote files. Because of these combined issues, you should not use this repository in any production environment without first fixing all the identified vulnerabilities and removing the dangerous code patterns.

Written by a local language model from the findings below. The risk scores come from the classifier, not from this summary.

Detections by engine

  • Semgrep 262

    Pattern-based code analysis · Vulnerability

  • YARA 28

    Malware signature rules · Malicious pattern

  • GuardDog 7

    Supply-chain attack heuristics · Malicious pattern

Score over time

Overall score each time this repository was scanned.

Findings

Highest severity first. Select a finding to see the code and what it means.

Large result: showing the top 235 of 297 findings (up to 200 per engine, most severe and most likely real first). Totals above include everything.