MalDet

Scan report

malwaredllc / byob

Report Rescan
Vulnerability Critical

Could an attacker exploit mistakes in this code?

448 risk score

Strong warning signs. Do not run or install this without a careful review.

High
72
Medium
104
Low
79

Sources: Bandit, Semgrep, pip-audit

Malicious pattern High

Does this code look like it is trying to cause harm?

70 risk score

Serious issues. Review the high-severity findings before using it.

High
89
Medium
0
Low
25

Sources: YARA, ClamAV, GuardDog, dependency checker

Findings overview
369 total findings
Likely real
28
Uncertain
135
Likely noise
206

The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.

What we found, in plain English

This repository shows clear signs of malicious intent rather than just poor coding practices. The most serious issue is that the code contains active cryptocurrency mining tools and reverse shells, which are designed to steal money or control other computers, not just cause temporary errors. While there are some standard security warnings about using insecure file permissions and FTP protocols, these are common mistakes in many projects and do not indicate that the entire system is unsafe. The presence of known malware evasion techniques like checking for debuggers before running code further confirms that this is a botnet or mining farm rather than a legitimate application. You should not use this repository as it poses a high risk of financial loss and data theft if accessed by an attacker.

Written by a local language model from the findings below. The risk scores come from the classifier, not from this summary.

Detections by engine

  • Bandit 255

    Python security linter · Vulnerability

  • YARA 113

    Malware signature rules · Malicious pattern

  • ClamAV 1

    Antivirus engine · Malicious pattern

Score over time

Overall score each time this repository was scanned.

Findings

Highest severity first. Select a finding to see the code and what it means.

Large result: showing the top 314 of 369 findings (up to 200 per engine, most severe and most likely real first). Totals above include everything.