{ "ml": { "v": "7", "eng": "2.12.0-beta.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.035266887, "rte": "az", "prob": 0.035266887 }, { "cls": 0, "raw": 0.0062078736, "rte": "az/tar", "prob": 0.0062078736 } ], "prob": 0.035266887, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.03526688739657402, "type": "tar.gz" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.00001473228167014895, "type": "shell" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000013232231140136719, "type": "registry" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000012586514458234888, "type": "registry" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000013520319953386206, "type": "registry" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000013520319953386206, "type": "registry" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000013520319953386206, "type": "registry" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.000012586514458234888, "type": "registry" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000013520319953386206, "type": "registry" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.000012586514458234888, "type": "registry" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.000013520319953386206, "type": "registry" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.000012586514458234888, "type": "registry" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.000014543533325195312, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-09-19T22:46:25Z" }, "path": "proton-cachyos-rtsp-bin-11.0_20260703-2.src.tar.gz", "raw": { "fetched": [ { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/lib32-vkd3d", "outcome": "unresolved", "fetched_at": 0, "source_offset": 395, "source_sha256": "21143b25549ae254784e680f41c4899ad51cd7b3c1cafdafc17cfc57a5120748" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/lib32-libtheora", "outcome": "unresolved", "fetched_at": 0, "source_offset": 441, "source_sha256": "21143b25549ae254784e680f41c4899ad51cd7b3c1cafdafc17cfc57a5120748" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/lib32-libvdpau", "outcome": "unresolved", "fetched_at": 0, "source_offset": 468, "source_sha256": "21143b25549ae254784e680f41c4899ad51cd7b3c1cafdafc17cfc57a5120748" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/graphene", "outcome": "unresolved", "fetched_at": 0, "source_offset": 551, "source_sha256": "21143b25549ae254784e680f41c4899ad51cd7b3c1cafdafc17cfc57a5120748" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/lib32-libjpeg-turbo", "outcome": "unresolved", "fetched_at": 0, "source_offset": 571, "source_sha256": "21143b25549ae254784e680f41c4899ad51cd7b3c1cafdafc17cfc57a5120748" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/lib32-libgudev", "outcome": "unresolved", "fetched_at": 0, "source_offset": 602, "source_sha256": "21143b25549ae254784e680f41c4899ad51cd7b3c1cafdafc17cfc57a5120748" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/lib32-openssl", "outcome": "unresolved", "fetched_at": 0, "source_offset": 628, "source_sha256": "21143b25549ae254784e680f41c4899ad51cd7b3c1cafdafc17cfc57a5120748" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/lib32-libusb", "outcome": "unresolved", "fetched_at": 0, "source_offset": 653, "source_sha256": "21143b25549ae254784e680f41c4899ad51cd7b3c1cafdafc17cfc57a5120748" }, { "kind": "dependency", "cached": false, "locator": "https://github.com/wundervrc/proton-cachyos-rtsp/releases/download/proton-cachyos-rtsp-11.0-20260703-2/proton-cachyos-rtsp-11.0-20260703-2.tar.xz", "outcome": { "failed": "response too large" }, "fetched_at": 1789857985, "resolved_url": "https://github.com/wundervrc/proton-cachyos-rtsp/releases/download/proton-cachyos-rtsp-11.0-20260703-2/proton-cachyos-rtsp-11.0-20260703-2.tar.xz", "source_offset": 1212, "source_sha256": "21143b25549ae254784e680f41c4899ad51cd7b3c1cafdafc17cfc57a5120748" } ], "files": [ { "id": 0, "ctx": [ { "b": "abZy80000000zQ\u003c(U+Dn6WCR1dy=:nLCkGr/2vvBvo]rq-NlP0V*K.SIl%x/76P\u003ew\u0026UzN*5pqnS:QP=MMtYHaw:I9lFgV)C7HCxEiV*e9*Ad:[-7tCDf}[K6[Yp\u003e6Ep2i\u0026", "ln": 0 } ], "mol": "H₂(Cm₂Os)Md(Pa)", "sha": "9923872b7fa3ea0b014bb64edc9e61526cd675686b2e26b277edff95ddf99c73", "path": "/data/samples/incoming/forager/arch/archlinux.org/aur.archlinux.org/proton-cachyos-rtsp-bin/proton-cachyos-rtsp-bin-11.0_20260703-2.src.tar.gz", "risk": 4, "size": 1798, "type": "tar.gz", "facts": { "metrics": { "file": { "size": 1798, "entropy": 7.88 }, "parse": { "error_count": 1 }, "binary": { "peak_region_bytes": 1798, "peak_region_entropy": 7.79 } } }, "ident": { "name": { "value": "proton-cachyos-rtsp-bin", "source": "file.basename", "verified": false }, "trust": "unsigned", "version": { "value": "11.0_20260703-2.src", "source": "file.basename", "verified": false } }, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "from": [ { "file": 2 } ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "from": [ { "file": 2 } ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/download/release::forge-release-download-url", "conf": 0.95, "crit": 3, "desc": "References a release download URL path", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/communications/email/address::google-consumer-email-domain-suffix", "conf": 0.55, "crit": 3, "desc": "Gmail consumer email domain suffix", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-amd64", "conf": 0.94, "crit": 3, "desc": "x86 or AMD64 architecture reference", "from": [ { "file": 2 } ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "from": [ { "file": 2 } ] }, { "id": "metadata/package/repository::pkgbuild-binary-package-name", "conf": 0.9, "crit": 3, "desc": "PKGBUILD names a binary package" }, { "id": "objectives/supply-chain/impersonation/package/pkgbuild::srcinfo-pkgver-match", "atk": "T1195.002", "conf": 0.6, "crit": 3, "desc": "PKGBUILD pkgver matches .SRCINFO" } ] }, { "ctx": [ { "b": "boPY?x(n33x(mH5iV@S?zE^s0C5?7njA\u003e{=wmY^\u003cB-ILBkXB}xx(2ziz/4VB3l{=rlVM:Gx([zs\u0026^^moBzbxfaAg+0yHH\u003c!aAIjgAc0duBzblaaAg[gAbo8kB0bWBA+^Yybo[rNavxNExN9xLaw^8%Bz(4tarUutBz#pZfe3%LBzb/ae[n*pfgfeTxN9xLfk$@IBz(4Gv{@\u003eXD2E:hbo[rNaw^8%Bz(4GqDcN\u003earR^HarUutBz#pZfe3%LBzb/ae[n*pfh(?dz!\u003cR%yH}r[Bz(5rfk$@IBz(4GA==ww3l{=rarTMYq=1PQvru0)B7GCoarR!az/PG4atj\u003cnwQe61ao", "ln": 0, "col": 1, "line": 1 }, { "b": "A+eV{dgdpAarR!6A=l5rzxHOPs7#L-arR^Hr:///wH[@\u003ez!9AXwNP:[A=S=OBzbkds7#L-aAhvtygQ)%3jp-/xjLN{v)8hbvpJ$@pG5xjA=l5rzxKdqBz8!sxK@q.A=l5rzy[:=q=1PQvru0)B7GCAazbLjaxzxcxKM09y?X67B98ClvqNbnqDcN\u003efig$rl@2fNAbn%dvQS+ZcKKj1yIdJ[zdL\u003eHA=l5rzy]vbv}ZdaB1IAOB8RF9yIdJ[zdL\u003cQDTy-cxkRc{wQMdtx(jn%yId*4AY(cie?*S/fFUKuh.W2{Abf9bwO:H+3sN%+xGW:\u003eCSmP*hz=^g3uZx9jTT]+Bz#pZfe3%LBzb/ae[n*pfl.LRwmY!8A:{+wA=l5rzy]vbv}ZdaB1IAOB8SGly?Wx\u003czGxwLc)}tWl)\u003c98oH?]McM\u003c^.y?Wuaasx(Pr3@!oo\u0026aIhasyVwB98tqcN/ywA=lbnwmY*Bc)@$Oz//]ncM\u003cPUDTy-cxkRc{wQMY!DVi+kC4CXEuOs3Wa$i\u003eez/ff6x\u003e8majP", "ln": 290, "col": 54, "line": 6 }, { "b": "z6iqdwNPv}aARpdayYFcy?bd9z/x/jz/fRVc)rUNA+PFnwO(ydD1pSfB14C6uVQl$wnc6EbZS)qyIdJ[zdObEbZTGCxlE\u003cbfe3V=eQYh@DVi+kA+f6n3sv:)z//]nwnc6EB-RNRB7/05wInaDwNPBev@Dj6vrui)x(4H9D30$yy\u0026.jtfc\u003e)KAbf97vqPO73svQ-v}xL0wN]H}j-$*^flp/nA+c[ux\u003e7Z(B7GzCbZTGCxkRc{wQK))B8Mhwv}v!Ka%.IxB8\u003e=3x(XROByxhxCZqzibZTVOy\u003c^%SwO+{^B7GzCwn=Wfy\u0026r-)fc\u003e)KB8\u003e=3x(XRPbZS)tA:@S]A^YMZvr9#BDlK^BB7!#tf/0/)zf4\u0026*cPK7yfG0q{wINZGvLPX)hA0K9hA2e9fG7*Ag?nQavkG(4hz!(Lwhu55wNPdewNWVdh8!#8f/9w$wh(L6fL1YMg=NGHvpp%5h-irGfFN8]h!s)3vkhq3i5ChTwJj9Rf\u003eA6#v(v^IwJsuUh^{qNiC7ogf/.9HwJ13Sf^!yS3ufA-yHH\u003c!c[co=3lQE9zGx]dy?$jCwfr6wDVi+kwnc7jfc\u003e)KAb](sz/f91A^YbsarUxoB97\u0026by-\u003eruar\u00267TAbf8%x(XRPbZS)mx\u003e7Z(B7F(@A^Ybs3lQDoboQ/pv}xL0wPE", "ln": 1599, "col": 56, "line": 47 } ], "depth": 1, "facts": { "imp": [ [ "", "install" ], [ "", "install" ], [ "", "mv" ], [ "", "mv" ], [ "", "mv" ], [ "", "mv" ] ], "tgt": [ "install", "mv" ], "funcs": [ [ "package", 2024 ] ], "metrics": { "ast": { "op.div": 1, "max_depth": 7, "call_count": 6, "node_count": 351, "op.floordiv": 1, "max_array_len": 16, "op_density.div": 0, "op_density.floordiv": 0 }, "file": { "size": 2408, "entropy": 5.38 }, "text": { "lines": 68, "top_char": 101, "max_ws_run": 6, "digit_ratio": 0.08, "space_count": 226, "char_entropy": 5.38, "unique_chars": 81, "top_char_null": 0, "string_density": 0.65, "top_char_ratio": 0.06, "avg_line_length": 34.41, "max_line_length": 143, "non_ascii_ratio": 0, "empty_line_ratio": 0.15, "last_line_length": 1, "long_token_count": 1, "whitespace_ratio": 0.12, "identifier_density": 1.09, "line_length_stddev": 28.67, "encoded_string_ratio": 0.02, "normalized_string_count": 5.34, "suspicious_comment_ratio": 0.14, "normalized_unique_identifiers": 5.42 }, "binds": { "count": 18 }, "binary": { "peak_region_bytes": 2408, "peak_region_entropy": 5.28 }, "source": { "function_count": 1 }, "strings": { "hex": 1, "bytes": 1122, "count": 44, "url_count": 1, "avg_length": 25.5, "max_length": 128, "avg_entropy": 3.4, "entropy_stddev": 0.84 }, "comments": { "chars": 647, "count": 14, "lines": 14, "base64": 2, "to_code_ratio": 0.26, "url_in_comments": 2 }, "functions": { "count": 1, "density": 1.47, "avg_params": 8, "code_ratio": 0.18, "max_params": 8, "avg_name_length": 7, "avg_length_lines": 12, "max_length_lines": 12, "min_length_lines": 12, "many_params_count": 1, "avg_param_name_length": 6.5 }, "identifiers": { "count": 74, "unique": 33, "avg_length": 8.12, "max_length": 37, "min_length": 1, "avg_entropy": 2.39, "reuse_ratio": 0.45, "length_stddev": 6.56, "has_digit_ratio": 0.06, "single_char_count": 2, "single_char_ratio": 0.06, "high_entropy_count": 1, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.67, "underscore_prefix_count": 4 } } }, "id": 2, "mol": "H₂(Cm₂Os)Md(Pa)", "path": "/data/samples/incoming/forager/arch/archlinux.org/aur.archlinux.org/proton-cachyos-rtsp-bin/proton-cachyos-rtsp-bin-11.0_20260703-2.src.tar.gz!!proton-cachyos-rtsp-bin/PKGBUILD", "pid": 0, "risk": 4, "sha": "c6ad586369936526a8e521dbc653249748f447dc8e91d6c80df7779fb2aa5be1", "size": 2408, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 338, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 411, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 380, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 64, 0 ] ] }, { "id": "metadata/package/repository::pkgbuild-binary-package-name", "conf": 0.9, "crit": 3, "desc": "PKGBUILD names a binary package" }, { "id": "micro-behaviors/communications/email/address::google-consumer-email-domain-suffix", "conf": 0.55, "crit": 3, "desc": "Gmail consumer email domain suffix", "spans": [ [ 36, 10 ] ] }, { "id": "micro-behaviors/communications/http/download/release::forge-release-download-url", "conf": 0.95, "crit": 3, "desc": "References a release download URL path", "spans": [ [ 1830, 17 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 126, 19 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-amd64", "conf": 0.94, "crit": 3, "desc": "x86 or AMD64 architecture reference", "spans": [ [ 546, 6 ] ] } ], "type": "shell" }, { "depth": 2, "facts": { "metrics": { "file": { "size": 793, "entropy": 4.63 }, "binary": { "peak_region_bytes": 793, "peak_region_entropy": 4.63 }, "registry": { "age_days": 38, "maintainers": 1, "published_at": 1786533573, "is_deprecated": 0 } } }, "id": 3, "mol": "Md(Re)", "path": "python@3.14.7-1.registry.json", "pid": 1, "rel": "registry", "risk": 1, "role": "sidecar", "sha": "1b7b0b11fdef7db34a294abf363c82f2e335863676bac78459c35127415eddb8", "size": 793, "traits": [ { "id": "metadata/registry::single-maintainer", "conf": 1.0, "crit": 3, "desc": "Registry package lists one maintainer" } ], "type": "registry" }, { "id": 4, "sha": "dfb2c7b4360c07499f8d41701f1102c37984463b2fc65d2d03f219b78c74bd05", "path": "vulkan-icd-loader@1.4.357.0-1.registry.json", "size": 824, "type": "registry", "depth": 2 }, { "depth": 2, "facts": { "metrics": { "file": { "size": 843, "entropy": 4.73 }, "binary": { "peak_region_bytes": 843, "peak_region_entropy": 4.73 }, "registry": { "age_days": 195, "maintainers": 0, "published_at": 1772995301, "is_deprecated": 1 } } }, "id": 5, "mol": "Md(Re)", "path": "lib32-vkd3d@1.19-1.registry.json", "pid": 1, "rel": "registry", "risk": 1, "role": "sidecar", "sha": "df84f0ba3908b486995e2a00dc15e76f47f895ddff7eb170a914ace3d57eaa58", "size": 843, "traits": [ { "id": "metadata/registry::deprecated", "conf": 1.0, "crit": 3, "desc": "Registry marks release deprecated or withdrawn" }, { "id": "metadata/registry::no-maintainers", "conf": 1.0, "crit": 3, "desc": "Package lists no maintainers" } ], "type": "registry" }, { "depth": 2, "facts": { "metrics": { "file": { "size": 819, "entropy": 4.7 }, "binary": { "peak_region_bytes": 819, "peak_region_entropy": 4.7 }, "registry": { "age_days": 60, "maintainers": 1, "published_at": 1784660964, "is_deprecated": 0 } } }, "id": 6, "mol": "Md(Re)", "path": "lib32-libva@2.24.1-1.registry.json", "pid": 1, "rel": "registry", "risk": 1, "role": "sidecar", "sha": "809e8b12d7ded6b9338699b15fc222116e1e603df676d0158f5c152345448590", "size": 819, "traits": [ { "id": "metadata/registry::single-maintainer", "conf": 1.0, "crit": 3, "desc": "Registry package lists one maintainer" } ], "type": "registry" }, { "depth": 2, "facts": { "metrics": { "file": { "size": 830, "entropy": 4.64 }, "binary": { "peak_region_bytes": 830, "peak_region_entropy": 4.64 }, "registry": { "age_days": 11, "maintainers": 1, "published_at": 1788825205, "is_deprecated": 0 } } }, "id": 7, "mol": "Md(Re)", "path": "gst-plugins-bad-libs@1.28.7-1.registry.json", "pid": 1, "rel": "registry", "risk": 1, "role": "sidecar", "sha": "7d5a8eed450c04f4b13ad7104f0f5ed223708dc653f82c54060ff13e1cc7a7d3", "size": 830, "traits": [ { "id": "metadata/registry::single-maintainer", "conf": 1.0, "crit": 3, "desc": "Registry package lists one maintainer" } ], "type": "registry" }, { "id": 8, "sha": "33ad09acdd80bc67a79c5d9a6d84b63fd40f10be8588d55cdaf6b612580d37f1", "path": "libjpeg-turbo@3.2.0-2.registry.json", "size": 848, "type": "registry", "depth": 2 }, { "id": 9, "mol": "Md(Re)", "sha": "c8faa4ba4d8a1af888b242e60f8e56e475bce330f643a61e76a58520eda71adb", "path": "graphene@1.10.8-2.registry.json", "risk": 1, "size": 805, "type": "registry", "depth": 2 }, { "id": 10, "sha": "05866a9def836995a681308d903c023b8d0a602f3a59293b49eb04dfe21f1b5a", "path": "lib32-libjpeg-turbo@3.2.0-1.registry.json", "size": 854, "type": "registry", "depth": 2 }, { "id": 11, "mol": "Md(Re)", "sha": "f93b97a77450cd246ee106f3d62819788e92279b24b47ff7458876d6d5bd5b68", "path": "lib32-openssl@3.6.4-1.registry.json", "risk": 1, "size": 871, "type": "registry", "depth": 2 }, { "id": 12, "sha": "7310c18838e29d8bf5144d5498c9eae2a9bb38572c06e1ccafa4e6d2aa9669d3", "path": "lib32-libusb@1.0.30-1.registry.json", "size": 835, "type": "registry", "depth": 2 }, { "id": 13, "mol": "Md(Re)", "sha": "73269be85fd09188f2970d0281c349044cf83376cbdb9e945124eb59ee55da04", "path": "proton-cachyos-rtsp-bin@11.0_20260703-2.registry.json", "risk": 1, "size": 944, "type": "registry", "depth": 1 } ], "omitted_files": 7, "rev": "e86a6", "v": "8" } }