Scan report
EmpireProject / PSInject
Could an attacker exploit mistakes in this code?
No issues of this kind were found.
- High
- 0
- Medium
- 0
- Low
- 0
Sources: Bandit, Semgrep, pip-audit
Does this code look like it is trying to cause harm?
Minor issues. Worth a glance, unlikely to be urgent.
- High
- 2
- Medium
- 0
- Low
- 0
Sources: YARA, ClamAV, GuardDog, dependency checker
- Likely real
- 1
- Uncertain
- 1
- Likely noise
- 0
The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.
What we found, in plain English
1 finding likely need attention. Most notable: ClamAV detected: Win.Trojan.PSempireInj-7013548-0 in /Invoke-PSInject.ps1 (98% confidence).
Detections by engine
Score over time
Overall score each time this repository was scanned.
Findings
Highest severity first. Select a finding to see the code and what it means.
-
- Engine
- ClamAV · Antivirus engine
- Counts towards
- Malicious pattern
- File
- /Invoke-PSInject.ps1
- Likely real
- Yes, 98% confidence
ClamAV detected: Win.Trojan.PSempireInj-7013548-0
-
- Engine
- YARA · Malware signature rules
- Counts towards
- Malicious pattern
- File
- /Invoke-PSInject.ps1
- Likely real
- Uncertain, 36% confidence
YARA rule matched: detect_process_injection — Windows process-injection API sequence
No findings match these filters.