Benign wolfi Download

mesa-dev 26.0.5-r0

“mesa dev”

Code explicitly mentions malware/backdoorSource comment mentions a backdoor
SHA-256934d68f5a3725de19d1cd4ac08f7648e79dd3eec1220fedf073ad83bc339b408
MaleculeO(Er)

Evidence

imports <stdbool.h> dri_interface.h · lines 40–49
40#ifndef DRI_INTERFACE_H
41#define DRI_INTERFACE_H
42
43#include <stdbool.h>
44#include <stdint.h>
45
46/**
47 * \name DRI interface structures
48 *
49 * The following structures define the interface betw …
Source comment mentions a backdoor dri_interface.h · lines 2004–2020
2004:20… ER_BACK = (1 << 0),
2005 __DRI_IMAGE_BUFFER_FRONT = (1 << 1),
2006
2007 /**
2008 * A buffer shared between application and compositor. The buffer may be
2009 * simultaneously accessed by each.
⋯11 lines
Contains frequent English function words xdg-shell-enum.h · lines 20–24
20 XDG_WM_BASE_ERROR_DEFUNCT_SURFACES = 1,
21 /**
22 * the client tried to map or destroy a non-topmost popup
23 */
24 XDG_WM_BASE_ERROR_NOT_THE_TOPMOST_POPUP = 2,
Melange-generated SPDX SBOM mesa-dev-26.0.5-r0.spdx.json · lines 9–11
9 "creators": [
10 "Tool: melange (v0.48.2)",
11 "Organization: Chainguard, Inc"
Wolfi APK SPDX SBOM mesa-dev-26.0.5-r0.spdx.json · lines 42–44
42 "referenceType": "purl",
43 "referenceLocator": "pkg:apk/wolfi/[email protected]?arch=x86_64\u0026distro=wolfi"
44 }

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.