{ "ml": { "v": "7", "eng": "2.12.0-beta.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.22608964, "rte": "az", "prob": 0.22608964 }, { "cls": 0, "raw": 0.0057483315, "rte": "az/tar", "prob": 0.0057483315 } ], "prob": 0.22608964, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.22608964145183563, "type": "tar.gz" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000018268823623657227, "type": "shell" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000014821688637312036, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-09-20T03:09:10Z" }, "path": "hyprpilot-bin-3.21.0-1.src.tar.gz", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "abZy80000000zQ?*IU+n5Cra06:9ct)fzH\u0026c8BThtpg\u003eUibaHizW2H?AW.S8AFU#Qo9$eLEA\u003c=daj.O:*MDd1dqD)K.uisOC4UA1B$OKNu7sVzJhOZgiGpP6D3AA%lp*#w", "ln": 0 } ], "mol": "H₃(Cm₃FOs₂)Md(Pa)", "sha": "66817c0497acb9d46f5184865ad5af7de352d0502fb0065cab316e78c435d753", "path": "hyprpilot-bin-3.21.0-1.src.tar.gz", "risk": 6, "size": 1158, "type": "tar.gz", "facts": { "metrics": { "file": { "size": 1158, "entropy": 7.84 }, "parse": { "error_count": 1 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 7.82 } } }, "ident": { "name": { "value": "hyprpilot-bin", "source": "file.basename", "verified": false }, "trust": "unsigned", "version": { "value": "3.21.0-1.src", "source": "file.basename", "verified": false } }, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/string::multi-arch-runtime-wordlist--x86-or-mips", "atk": "T1082", "mbc": "E1082", "conf": 0.85, "crit": 1, "desc": "Shell x86 or MIPS architecture selector", "from": [ { "file": 2 } ] }, { "id": "metadata/package/repository::pkgbuild-binary-package-name", "conf": 0.9, "crit": 3, "desc": "PKGBUILD names a binary package" }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-amd64", "conf": 0.94, "crit": 3, "desc": "x86 or AMD64 architecture reference", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/download/release::forge-release-download-url", "conf": 0.95, "crit": 3, "desc": "References a release download URL path", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/write/copy::coreutils-install-executable", "conf": 0.8, "crit": 3, "desc": "coreutils install stages an executable file", "from": [ { "file": 2 } ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/directory/chdir::shell-change-directory", "conf": 0.95, "crit": 2, "desc": "Shell changes working directory", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/string::multi-arch-runtime-wordlist", "atk": "T1082", "mbc": "E1082", "conf": 0.85, "crit": 3, "desc": "Shell lists architecture selector names", "from": [ { "file": 2 } ], "uses": [ 1 ] }, { "id": "micro-behaviors/communications/email/address::google-consumer-email-domain-suffix", "conf": 0.55, "crit": 3, "desc": "Gmail consumer email domain suffix", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/url/external/github::github-release-download", "atk": "T1105", "conf": 0.85, "crit": 3, "desc": "GitHub release asset URL template", "from": [ { "file": 2 } ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "from": [ { "file": 2 } ] }, { "id": "metadata/package/repository::pkgbuild-b2-source-pins", "conf": 0.95, "crit": 3, "desc": "PKGBUILD pins BLAKE2 source checksums" }, { "id": "objectives/supply-chain/impersonation/package/pkgbuild::srcinfo-pkgver-match", "atk": "T1195.002", "conf": 0.6, "crit": 3, "desc": "PKGBUILD pkgver matches .SRCINFO" } ] }, { "ctx": [ { "b": "boPY?x(n33x(mH5iV{!3zFHv/-iBc%VbrEZjy.@uyCxsgzFI1qwO#otkXB}xx(2ziz/4VBAbf97vqPNsxNaMqAa%cbBs*%ozvgt#xlE\u003cbjU[YCfFk44boRj.A+f5#vrl0iAbo8]B7D}DwPz\u003caz/b]3yIdW0y=%GWAbf8%wPIuAb13o^w[+)fwo8ycwO@RToI3vyvrDD$xK#ibBzb98az2!ev@\u0026=mxK@rfwO#3%AWL]JzEET3C4z!8xjU$5avw*]asIhHwNY^@y\u0026*!ex(mv1C{%{Avrb\u003c\u003ejT.X5i5Ub4g::ZVB-IpYb4#7uAc15[fk20vxMW=pv@DiqxNaMqAa%cbBt4rMAb]]iy\u0026szt3t:A^wO#N2jT.WLnMm5^3ug37C4\u003eF#B3g{0xNaMqAa%cbBseHAv@Dl%y?Wy3B3g{0xNaMqAa%cbBs?ctBseHAB8Mhwv}v!Ka%.byxkRc{wI2fDyId*4AXqDxAXqVVBuhD@BAzFyiXJd0x([3hvLheez7/NFAb]]iy\u0026szGxNaMqAa%cbBt4VCy?m3@wPGInz*c8nz^^ffB%I3xxlE\u003cbfkbSIA=t-ez/^NObYEKiC4CXCCSmP*hz^1dzFKcdCwY0Gx(n6reOw%ze{7Jxe{.OXa$i\u003czaA.TlAbf9cB.#gxw[=6$B0bNrwPIA9x(k5izxJIlwPA5sA+f5#vrl0iAbo8]B7DF6B.#7ud0fclavf193l{WjBZ/f3B7=Xuz/PS9y\u0026sIuA=(nvayGthwn(r%B9htviV@J+B.a@6B8JgyxK@q%wPhE7D1yIep!KqBry]\u003eL3l{W4y\u003cfrkB0a$3A=L(9B0bHmvqE5@xK$W?B9htvayO[\u003ex(n0laARpdazbU9B7/xneP(2Gz^^f/wc%L7Byxi0vqG-", "ln": 0, "col": 1, "line": 1 }, { "b": "wI[7ivk*b7vLxYHwmYmbvR6aVgb-M0vk{h1g=w@ahzE0ziaDLQv(W%Li43cZ3ufA-yHH\u003c!c[co=3lQE3wfr6wB8\u003e=3x(U\u003euD2N!yx(4Zfa{]Cnx(n0lvqG:5eKTCmh8MH\u0026D2N!yx(4Zfar\u00267IyIdf(AXzMRAXy)ozzbWGAb]]iy\u0026szt3lQE9zGx]dy?$jCl#s?sg:2E-lQ::GmiA^1Abf8%x(U\u003eHB8\u0026{PxKL{)fkLujwO#N2B1X!TyIdJ[zdLv]nKC{wq:?(qarUxoB97\u0026by-\u003eq$z8Kjcazu4tA=tZ", "ln": 873, "col": 93, "line": 17 }, { "b": "wnc6qB-RNRB7/05wImFhAbok#vruj4zGvEAD2N!yx(4Zfe[wKmyJKGla{]Cnw]zYjB7]@iazCZof/ydgg9wzkat#50f!$ZhgbQ%jh8c\u003cFay]x$arR^Hx(n0lvqG:5eKTClg=cs0x\u003e870B1X!=B7]@iErW2:B7]@iEj/FRxcFE63lQDlarR^JbYEJ", "ln": 1125, "col": 41, "line": 23 } ], "depth": 1, "facts": { "imp": [ [ "", "cd" ], [ "", "install" ], [ "", "install" ], [ "", "install" ], [ "", "install" ], [ "", "install" ] ], "tgt": [ "cd", "install" ], "funcs": [ [ "package", 922 ] ], "metrics": { "ast": { "max_depth": 8, "call_count": 6, "node_count": 217, "max_array_len": 1 }, "file": { "size": 1436, "entropy": 5.38 }, "text": { "lines": 29, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.12, "space_count": 104, "char_entropy": 5.38, "unique_chars": 76, "top_char_null": 0, "string_density": 0.52, "top_char_ratio": 0.06, "avg_line_length": 48.52, "max_line_length": 154, "non_ascii_ratio": 0, "empty_line_ratio": 0.03, "last_line_length": 1, "long_token_count": 2, "whitespace_ratio": 0.09, "identifier_density": 1.79, "line_length_stddev": 38.13, "encoded_string_ratio": 0.07, "normalized_string_count": 2.79, "suspicious_comment_ratio": 0.14, "normalized_unique_identifiers": 5.15 }, "binds": { "count": 11 }, "binary": { "peak_region_bytes": 1436, "peak_region_entropy": 5.37 }, "source": { "function_count": 1 }, "strings": { "hex": 1, "bytes": 699, "count": 15, "url_count": 1, "avg_length": 46.6, "max_length": 143, "path_count": 1, "avg_entropy": 3.67, "entropy_stddev": 0.83 }, "comments": { "chars": 343, "count": 7, "lines": 7, "high_entropy": 1, "to_code_ratio": 0.32 }, "functions": { "count": 1, "density": 3.45, "avg_params": 6, "code_ratio": 0.38, "max_params": 6, "avg_name_length": 7, "avg_length_lines": 11, "max_length_lines": 11, "min_length_lines": 11, "avg_param_name_length": 33.33 }, "identifiers": { "count": 52, "unique": 25, "avg_length": 7.36, "max_length": 19, "min_length": 2, "avg_entropy": 2.53, "reuse_ratio": 0.48, "length_stddev": 3.76, "has_digit_ratio": 0.16, "high_entropy_count": 2, "high_entropy_ratio": 0.08, "all_lowercase_ratio": 0.68, "all_uppercase_ratio": 0.04, "numeric_suffix_count": 2 } } }, "id": 2, "mol": "H₃(Cm₃FOs₂)Md(Pa)", "path": "hyprpilot-bin-3.21.0-1.src.tar.gz!!hyprpilot-bin/PKGBUILD", "pid": 0, "risk": 6, "sha": "72d366f23c07bd9bee5269945ee107619717e916ba7f30de6cbc3170367182b6", "size": 1436, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 175, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 164, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 1173, 0 ] ] }, { "id": "metadata/package/repository::pkgbuild-b2-source-pins", "conf": 0.95, "crit": 3, "desc": "PKGBUILD pins BLAKE2 source checksums" }, { "id": "metadata/package/repository::pkgbuild-binary-package-name", "conf": 0.9, "crit": 3, "desc": "PKGBUILD names a binary package" }, { "id": "micro-behaviors/communications/email/address::google-consumer-email-domain-suffix", "conf": 0.55, "crit": 3, "desc": "Gmail consumer email domain suffix", "spans": [ [ 44, 10 ] ] }, { "id": "micro-behaviors/communications/http/download/release::forge-release-download-url", "conf": 0.95, "crit": 3, "desc": "References a release download URL path", "spans": [ [ 426, 17 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 245, 19 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-amd64", "conf": 0.94, "crit": 3, "desc": "x86 or AMD64 architecture reference", "spans": [ [ 231, 6 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/string::multi-arch-runtime-wordlist--x86-or-mips", "atk": "T1082", "mbc": "E1082", "conf": 0.85, "crit": 1, "desc": "Shell x86 or MIPS architecture selector", "spans": [ [ 471, 0 ] ] }, { "id": "micro-behaviors/communications/url/external/github::github-release-download", "atk": "T1105", "conf": 0.85, "crit": 3, "desc": "GitHub release asset URL template", "spans": [ [ 395, 49 ] ] }, { "id": "micro-behaviors/fs/directory/chdir::shell-change-directory", "conf": 0.95, "crit": 2, "desc": "Shell changes working directory", "spans": [ [ 936, 0 ] ] }, { "id": "micro-behaviors/fs/write/copy::coreutils-install-executable", "conf": 0.8, "crit": 3, "desc": "coreutils install stages an executable file", "spans": [ [ 960, 15 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/string::multi-arch-runtime-wordlist", "atk": "T1082", "mbc": "E1082", "conf": 0.85, "crit": 3, "desc": "Shell lists architecture selector names", "uses": [ 9 ], "spans": [ [ 471, 7 ] ] } ], "type": "shell" }, { "depth": 1, "facts": { "metrics": { "file": { "size": 878, "entropy": 4.82 }, "binary": { "peak_region_bytes": 878, "peak_region_entropy": 4.82 }, "registry": { "age_days": 0, "maintainers": 1, "published_at": 1789854931, "rating_count": 0, "releases_24h": 0, "releases_48h": 0, "is_deprecated": 0, "package_age_days": 136, "first_published_at": 1778098374, "previous_published_at": 1778098374, "publisher_in_maintainers": 1, "days_since_previous_release": 136 } } }, "id": 3, "mol": "Md(Re)", "path": "hyprpilot-bin@3.20.0-1.registry.json", "pid": 0, "rel": "registry", "risk": 1, "role": "sidecar", "sha": "8aeee8920a82f5993c02f9f8b32f8fc2ccc232f7570284549aec5eda53c38ef6", "size": 878, "traits": [ { "id": "metadata/registry::aur-package", "conf": 1.0, "crit": 1, "desc": "Arch User Repository package listing" }, { "id": "metadata/registry::single-maintainer", "conf": 1.0, "crit": 3, "desc": "Registry package lists one maintainer" }, { "id": "metadata/registry::freshly-published", "conf": 1.0, "crit": 3, "desc": "Release published within seven days" }, { "id": "metadata/registry::aur-recently-modified", "conf": 0.9, "crit": 3, "desc": "AUR package metadata changed within seven days", "uses": [ 0, 2 ] } ], "type": "registry" } ], "rev": "e86a6", "v": "8" } }