{
  "llm": {
    "conf": 0.99985313,
    "grade": "hostile",
    "model": "Qwen/Qwen3.8-27B",
    "before": {
      "lvl": 0,
      "prob": 0.99978083,
      "class": "hostile"
    },
    "outcome": "hostile",
    "interpretation": "Exfiltrates credentials during build"
  },
  "ml": {
    "v": "7",
    "eng": "2.12.0-beta.2",
    "lvl": 0,
    "conf": 100,
    "mods": [
      {
        "cls": 2,
        "raw": 0.9944894,
        "rte": "az",
        "prob": 0.9944894
      },
      {
        "cls": 2,
        "raw": 0.99978083,
        "rte": "az/python_sdist",
        "prob": 0.99978083
      }
    ],
    "prob": 0.99978083,
    "files": [
      {
        "id": 0,
        "lvl": 0,
        "conf": 100,
        "prob": 0.9997808337211609,
        "type": "python_sdist"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012099742889404297,
        "type": "pkg_info"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012099742889404297,
        "type": "pkg_info"
      },
      {
        "id": 7,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000008443991646345239,
        "type": "python"
      },
      {
        "id": 9,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0025584797840565443,
        "type": "python"
      },
      {
        "id": 10,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013520319953386206,
        "type": "registry"
      },
      {
        "id": 11,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000013232231140136719,
        "type": "registry"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-26T09:17:59Z"
  },
  "path": "bfox_build_utils-1.0.0.tar.gz",
  "raw": {
    "files": [
      {
        "id": 0,
        "mol": "O(S₂)H₃(DbOsPo)Md₄(BkInPa₃)",
        "sha": "9db716005841510623f322cefea2b1769979e85ba80d334768dfe0b9a0e40c4b",
        "path": "/tmp/cyclotron-2ff6136f/samples/9db716005841/bfox_build_utils-1.0.0.tar.gz",
        "risk": 243,
        "size": 1266,
        "type": "python_sdist",
        "facts": {
          "metrics": {
            "file": {
              "size": 1266,
              "entropy": 7.65
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 1266,
              "peak_region_entropy": 7.57
            },
            "consistency": {
              "cloned_summary": 0,
              "name_typosquat": 0,
              "metadata_identity_mismatch": 0
            }
          }
        },
        "ident": {
          "name": {
            "value": "bfox-build-utils",
            "source": "python.name",
            "verified": false
          },
          "trust": "unsigned",
          "version": {
            "value": "1.0.0",
            "source": "python.version",
            "verified": false
          },
          "identifier": {
            "value": "bfox-build-utils",
            "source": "python.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "micro-behaviors/process/info/current::python-sys-executable-text",
            "conf": 0.75,
            "crit": 3,
            "desc": "Python sys.executable reference text",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/build/pip::packaging-setup-api-import",
            "conf": 0.95,
            "crit": 3,
            "desc": "Packaging setup API import or call",
            "from": [
              {
                "off": 323,
                "file": 9,
                "line": 13
              }
            ],
            "uses": [
              2,
              3
            ]
          },
          {
            "id": "metadata/build/pip::packaging-setuptools-import",
            "conf": 0.95,
            "crit": 3,
            "desc": "setuptools packaging import",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/build/pip::packaging-setuptools-setup-call",
            "conf": 0.95,
            "crit": 3,
            "desc": "setuptools.setup call",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "objectives/supply-chain/credential-theft/env::pypi-setup-credential-env-harvest",
            "atk": "T1195.002,T1552.001",
            "mbc": "E1552",
            "conf": 0.98,
            "crit": 5,
            "desc": "PyPI setup.py harvests credential-named environment entries",
            "from": [
              {
                "file": 9
              }
            ],
            "uses": [
              18,
              22
            ]
          },
          {
            "id": "micro-behaviors/os/env/enumeration::python-environ-iteration",
            "conf": 0.85,
            "crit": 2,
            "desc": "Python environ iteration helpers",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/package/ecosystem::pkginfo-version-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "Declares Python package version",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/ecosystem::pkginfo-summary-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "Declares Python package summary",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/ecosystem::pkginfo-requires-python",
            "conf": 0.9,
            "crit": 3,
            "desc": "Declares supported Python versions",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/os/env/secret-name::python-environ-loop-credential-filter",
            "conf": 0.92,
            "crit": 3,
            "desc": "Python environment loop filters for credentials",
            "from": [
              {
                "file": 9
              }
            ],
            "uses": [
              5,
              16
            ]
          },
          {
            "id": "metadata/package/ecosystem::pkginfo-name-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "Declares Python package name",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/files/included::setup-py-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is setup.py",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/build/pip::root-setup-py-path",
            "conf": 0.98,
            "crit": 3,
            "desc": "setup.py at or near the source root",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "objectives/supply-chain/install-hook/credential::python-install-hook-env-credential-harvest",
            "atk": "T1195.002,T1552.001",
            "mbc": "E1552",
            "conf": 0.98,
            "crit": 5,
            "desc": "Python install hook harvests environment credentials",
            "from": [
              {
                "file": 9
              }
            ],
            "uses": [
              11,
              18
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/module-exec::module-level-side-effect-call",
            "conf": 0.82,
            "crit": 3,
            "desc": "Python module-level function call"
          },
          {
            "id": "metadata/file/size::small-no-imports",
            "conf": 0.75,
            "crit": 3,
            "desc": "Small Python source file with no imports",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "micro-behaviors/os/env/secret-name::python-environ-items-secret-marker",
            "conf": 0.92,
            "crit": 1,
            "desc": "Credential marker string literal",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/python/os::os",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports os",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "micro-behaviors/os/env/secret-name::python-environ-credential-name-filter",
            "conf": 0.92,
            "crit": 3,
            "desc": "Python accesses credential-named environment entries",
            "from": [
              {
                "file": 9
              }
            ],
            "uses": [
              9
            ]
          },
          {
            "id": "metadata/import/python/setuptools::setuptools",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports setuptools",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/package/files/wheel-sdist::import-setuptools",
            "conf": 0.7,
            "crit": 3,
            "desc": "import setuptools statement",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/package/ecosystem::pkginfo-core-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": "Declares Python Core Metadata version",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/build/pip::setup-py",
            "conf": 1.0,
            "crit": 2,
            "desc": "Python setup.py or setup.cfg file",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/import/python/sys::sys",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports sys",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/build/pip::root-setup-py",
            "conf": 0.98,
            "crit": 3,
            "desc": "Root Python setup.py packaging file",
            "from": [
              {
                "file": 9
              }
            ],
            "uses": [
              1,
              12
            ]
          },
          {
            "id": "metadata/package/files/wheel-sdist::pypi-egg-info-dependency-links",
            "conf": 0.86,
            "crit": 3,
            "desc": "PyPI sdist includes dependency_links metadata"
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "o\u003ewAPwmoN*eMMC6B7]MgiV{gggZV#^zdL:JvRfL6eN\u0026\u003cpy?bbuBzkMj3ry.UB7]MgiV{dffFk3^q/#}]vrcSOavpi+y?aVhBzkM9Bzkrc3q$CPB.L(cB1HjlBzbPgiV{QHgCgV{m0SVUze0GvaAz4kB.L(cB1IuRBzbPg3pGeSvqPZ*iV@G^zeAZ4C)T",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 150,
              "entropy": 4.89
            },
            "binary": {
              "peak_region_bytes": 150,
              "peak_region_entropy": 4.89
            }
          }
        },
        "id": 1,
        "mol": "Md(Pa)",
        "path": "/tmp/cyclotron-2ff6136f/samples/9db716005841/bfox_build_utils-1.0.0.tar.gz!!bfox_build_utils-1.0.0/PKG-INFO",
        "pid": 0,
        "risk": 1,
        "sha": "147916ea860b9f293cf87997c16500545f62c0073d0cd5d44242d9476fe05384",
        "size": 150,
        "traits": [
          {
            "id": "metadata/package/ecosystem::pkginfo-core-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": "Declares Python Core Metadata version",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/ecosystem::pkginfo-name-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "Declares Python package name",
            "spans": [
              [
                22,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/ecosystem::pkginfo-requires-python",
            "conf": 0.9,
            "crit": 3,
            "desc": "Declares supported Python versions",
            "spans": [
              [
                85,
                22
              ]
            ]
          },
          {
            "id": "metadata/package/ecosystem::pkginfo-summary-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "Declares Python package summary",
            "spans": [
              [
                60,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/ecosystem::pkginfo-version-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "Declares Python package version",
            "spans": [
              [
                45,
                0
              ]
            ]
          }
        ],
        "type": "pkg_info"
      },
      {
        "ctx": [
          {
            "b": "o\u003ewAPwmoN*eMMC6B7]MgiV{gggZV#^zdL:JvRfL6eN\u0026\u003cpy?bbuBzkMj3ry.UB7]MgiV{dffFk3^q/#}]vrcSOavpi+y?aVhBzkM9Bzkrc3q$CPB.L(cB1HjlBzbPgiV{QHgCgV{m0SVUze0GvaAz4kB.L(cB1IuRBzbPg3pGeSvqPZ*iV@G^zeAZ4C)T",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 150,
              "entropy": 4.89
            },
            "binary": {
              "peak_region_bytes": 150,
              "peak_region_entropy": 4.89
            }
          }
        },
        "id": 3,
        "mol": "Md(Pa)",
        "path": "/tmp/cyclotron-2ff6136f/samples/9db716005841/bfox_build_utils-1.0.0.tar.gz!!bfox_build_utils-1.0.0/bfox_build_utils.egg-info/PKG-INFO",
        "pid": 0,
        "risk": 1,
        "sha": "147916ea860b9f293cf87997c16500545f62c0073d0cd5d44242d9476fe05384",
        "size": 150,
        "traits": [
          {
            "id": "metadata/package/ecosystem::pkginfo-core-metadata",
            "conf": 1.0,
            "crit": 2,
            "desc": "Declares Python Core Metadata version",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/ecosystem::pkginfo-name-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "Declares Python package name",
            "spans": [
              [
                22,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/ecosystem::pkginfo-requires-python",
            "conf": 0.9,
            "crit": 3,
            "desc": "Declares supported Python versions",
            "spans": [
              [
                85,
                22
              ]
            ]
          },
          {
            "id": "metadata/package/ecosystem::pkginfo-summary-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "Declares Python package summary",
            "spans": [
              [
                60,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/ecosystem::pkginfo-version-field",
            "conf": 0.9,
            "crit": 2,
            "desc": "Declares Python package version",
            "spans": [
              [
                45,
                0
              ]
            ]
          }
        ],
        "type": "pkg_info"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "ast": {
              "max_depth": 4,
              "call_count": 0,
              "node_count": 22
            },
            "file": {
              "size": 58,
              "entropy": 4.35
            },
            "text": {
              "lines": 4,
              "top_char": 34,
              "max_ws_run": 1,
              "digit_ratio": 0.09,
              "space_count": 5,
              "char_entropy": 4.35,
              "unique_chars": 26,
              "top_char_null": 0,
              "string_density": 0.75,
              "top_char_ratio": 0.17,
              "avg_line_length": 13.5,
              "max_line_length": 22,
              "empty_line_ratio": 0.25,
              "last_line_length": 15,
              "whitespace_ratio": 0.16,
              "identifier_density": 0.5,
              "line_length_stddev": 8.2,
              "normalized_string_count": 1.5,
              "normalized_unique_identifiers": 1
            },
            "binds": {
              "count": 2
            },
            "binary": {
              "peak_region_bytes": 58,
              "peak_region_entropy": 4.35
            },
            "strings": {
              "bytes": 29,
              "count": 3,
              "avg_length": 9.67,
              "max_length": 20,
              "avg_entropy": 2.08,
              "entropy_stddev": 0.81
            },
            "identifiers": {
              "count": 2,
              "unique": 2,
              "avg_length": 6.5,
              "max_length": 7,
              "min_length": 6,
              "avg_entropy": 2.7,
              "reuse_ratio": 1,
              "length_stddev": 0.5,
              "all_uppercase_ratio": 1
            }
          }
        },
        "id": 7,
        "mol": "Md",
        "path": "/tmp/cyclotron-2ff6136f/samples/9db716005841/bfox_build_utils-1.0.0.tar.gz!!bfox_build_utils-1.0.0/bfox_build_utils.py",
        "pid": 0,
        "risk": 1,
        "sha": "3f00f63c527fa18252cfc1e0cb10ae1d283919ce1cae735c340a787e54aae024",
        "size": 58,
        "traits": [
          {
            "id": "metadata/file/size::small-no-imports",
            "conf": 0.75,
            "crit": 3,
            "desc": "Small Python source file with no imports"
          }
        ],
        "type": "python"
      },
      {
        "ctx": [
          {
            "b": "x(d*cA=-BBwPS6lBz(8lA%=R#AbP=saA8rdx(d*cA=-BBD2\u003cr1boPV#xcpVax(4r5wO#W9A=k\u0026jwO#Pjw]zYjwnbE+zF%Prx\u003e8ip3ug31zGEpsb4te5CR9xEx(4riB-.tlB09g\u0026fFk44B7GDoA3u.rAb]VgBsp-BAcVLsz/dPUDVKENe[Gosv%8)4vR/R7a$i\u003erA+PAkc$TVxx\u003efmEDV9%TxjVg7x\u003eeRvEiH9Ew]zYjyH}=lx(k5mz/P@hwghwqe[F{zx(Xcfdlm!UarR!vw/@o-s5Qp=x(k5ewQbzpAV=M9pFjbKa%pPqazULlaA8oyb2RAopdn58azCZoyH}=L3lQDlarR^HaAhvnzGEpsa%n1PyH}^tj:R9*e[F{zx(XcftwE!}u0xuDfKo8JdgcA6wPS6lBz(8lB1RJBBAIKJ3lQDlaz$R8wJ.kDw]z]CvS=y3wg.}Cx(4\u0026med9HxarU\u0026sA=U@kzAPf#e?![ia$K6zarR!qwPIv4x(Ffdz/dYZluN0Uwfu2px(4H9x\u003equfed9HxarUSGuU%Z(B.\u003eSgjZfatw]z{3vS=y3wm6F3x(4\u0026mt}us9arR!CD30.rzEmA}ADL#owPH0Uk0pXOiu*0Ydgc",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "print"
            ],
            [
              "",
              "print"
            ],
            [
              "",
              "print"
            ],
            [
              "",
              "os.getpid"
            ],
            [
              "",
              "sorted"
            ],
            [
              "",
              "print"
            ],
            [
              "",
              "setuptools.setup"
            ],
            [
              "",
              "os"
            ],
            [
              "",
              "setuptools"
            ],
            [
              "",
              "sys"
            ]
          ],
          "mbr": [
            "os.environ",
            "os.getpid",
            "setuptools.setup",
            "sys.executable"
          ],
          "tgt": [
            "os.getpid",
            "print",
            "setuptools.setup",
            "sorted"
          ],
          "metrics": {
            "ast": {
              "op.lor": 2,
              "max_depth": 13,
              "call_count": 7,
              "node_count": 190,
              "member_count": 4,
              "max_array_len": 1,
              "op_density.lor": 0.01,
              "member_depth_max": 2
            },
            "file": {
              "size": 494,
              "entropy": 4.98
            },
            "text": {
              "lines": 19,
              "top_char": 105,
              "max_ws_run": 2,
              "digit_ratio": 0.03,
              "space_count": 61,
              "char_entropy": 4.98,
              "unique_chars": 57,
              "top_char_null": 0,
              "string_density": 0.63,
              "top_char_ratio": 0.07,
              "avg_line_length": 25,
              "max_line_length": 57,
              "empty_line_ratio": 0.11,
              "last_line_length": 1,
              "whitespace_ratio": 0.16,
              "identifier_density": 1.53,
              "line_length_stddev": 15.8,
              "normalized_string_count": 2.75,
              "normalized_unique_identifiers": 3.53
            },
            "binary": {
              "peak_region_bytes": 494,
              "peak_region_entropy": 4.98
            },
            "imports": {
              "count": 3,
              "stdlib_count": 2,
              "stdlib_ratio": 0.67,
              "third_party_count": 1,
              "third_party_ratio": 0.33
            },
            "strings": {
              "bytes": 171,
              "count": 12,
              "avg_length": 14.25,
              "max_length": 30,
              "avg_entropy": 2.96,
              "entropy_stddev": 0.95
            },
            "comments": {
              "chars": 39,
              "count": 1,
              "lines": 1,
              "to_code_ratio": 0.06
            },
            "identifiers": {
              "count": 29,
              "unique": 15,
              "avg_length": 6.93,
              "max_length": 15,
              "min_length": 2,
              "avg_entropy": 2.43,
              "reuse_ratio": 0.52,
              "length_stddev": 3.49,
              "high_entropy_count": 1,
              "high_entropy_ratio": 0.07,
              "all_lowercase_ratio": 1
            }
          }
        },
        "id": 9,
        "mol": "O(S₂)H₃(DbOsPo)Md₃(BkInPa₂)",
        "path": "/tmp/cyclotron-2ff6136f/samples/9db716005841/bfox_build_utils-1.0.0.tar.gz!!bfox_build_utils-1.0.0/setup.py",
        "pid": 0,
        "risk": 241,
        "sha": "cd5b2a7ff602a2da40716ed4fa419306e879be3182ebf674394de57c0ae02fd4",
        "size": 494,
        "traits": [
          {
            "id": "metadata/import/python/os::os",
            "conf": 0.95,
            "crit": 3,
            "desc": "imports os",
            "spans": [
              [
                25,
                2
              ]
            ]
          },
          {
            "id": "metadata/import/python/setuptools::setuptools",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports setuptools",
            "spans": [
              [
                7,
                0
              ]
            ]
          },
          {
            "id": "metadata/import/python/sys::sys",
            "conf": 0.95,
            "crit": 2,
            "desc": "imports sys",
            "spans": [
              [
                35,
                0
              ]
            ]
          },
          {
            "id": "metadata/build/pip::packaging-setuptools-import",
            "conf": 0.95,
            "crit": 3,
            "desc": "setuptools packaging import",
            "spans": [
              [
                0,
                17
              ]
            ]
          },
          {
            "id": "metadata/build/pip::packaging-setuptools-setup-call",
            "conf": 0.95,
            "crit": 3,
            "desc": "setuptools.setup call",
            "spans": [
              [
                323,
                17
              ]
            ]
          },
          {
            "id": "metadata/build/pip::root-setup-py-path",
            "conf": 0.98,
            "crit": 3,
            "desc": "setup.py at or near the source root"
          },
          {
            "id": "metadata/build/pip::setup-py",
            "conf": 1.0,
            "crit": 2,
            "desc": "Python setup.py or setup.cfg file"
          },
          {
            "id": "metadata/package/files/included::setup-py-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is setup.py"
          },
          {
            "id": "metadata/package/files/wheel-sdist::import-setuptools",
            "conf": 0.7,
            "crit": 3,
            "desc": "import setuptools statement",
            "spans": [
              [
                0,
                17
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/env/enumeration::python-environ-iteration",
            "conf": 0.85,
            "crit": 2,
            "desc": "Python environ iteration helpers",
            "spans": [
              [
                184,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/env/secret-name::python-environ-items-secret-marker",
            "conf": 0.92,
            "crit": 1,
            "desc": "Credential marker string literal",
            "spans": [
              [
                239,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/info/current::python-sys-executable-text",
            "conf": 0.75,
            "crit": 3,
            "desc": "Python sys.executable reference text",
            "spans": [
              [
                137,
                14
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/module-exec::module-level-side-effect-call",
            "conf": 0.82,
            "crit": 3,
            "desc": "Python module-level function call",
            "spans": [
              [
                81,
                38
              ],
              [
                120,
                34
              ],
              [
                155,
                28
              ]
            ]
          },
          {
            "id": "metadata/build/pip::packaging-setup-api-import",
            "conf": 0.95,
            "crit": 3,
            "desc": "Packaging setup API import or call",
            "uses": [
              3,
              4
            ],
            "spans": [
              [
                0,
                17
              ],
              [
                323,
                17
              ]
            ]
          },
          {
            "id": "metadata/build/pip::root-setup-py",
            "conf": 0.98,
            "crit": 3,
            "desc": "Root Python setup.py packaging file",
            "uses": [
              5,
              13
            ],
            "spans": [
              [
                0,
                17
              ],
              [
                323,
                17
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/env/secret-name::python-environ-loop-credential-filter",
            "conf": 0.92,
            "crit": 3,
            "desc": "Python environment loop filters for credentials",
            "uses": [
              9,
              10
            ],
            "spans": [
              [
                184,
                28
              ],
              [
                239,
                5
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/env/secret-name::python-environ-credential-name-filter",
            "conf": 0.92,
            "crit": 3,
            "desc": "Python accesses credential-named environment entries",
            "uses": [
              15
            ],
            "spans": [
              [
                184,
                28
              ],
              [
                239,
                5
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/credential-theft/env::pypi-setup-credential-env-harvest",
            "atk": "T1195.002,T1552.001",
            "mbc": "E1552",
            "conf": 0.98,
            "crit": 5,
            "desc": "PyPI setup.py harvests credential-named environment entries",
            "uses": [
              6,
              16
            ],
            "spans": [
              [
                184,
                28
              ],
              [
                239,
                5
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/install-hook/credential::python-install-hook-env-credential-harvest",
            "atk": "T1195.002,T1552.001",
            "mbc": "E1552",
            "conf": 0.98,
            "crit": 5,
            "desc": "Python install hook harvests environment credentials",
            "uses": [
              7,
              16
            ],
            "spans": [
              [
                184,
                28
              ],
              [
                239,
                5
              ]
            ]
          }
        ],
        "type": "python"
      },
      {
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 833,
              "entropy": 4.75
            },
            "binary": {
              "peak_region_bytes": 833,
              "peak_region_entropy": 4.75
            },
            "registry": {
              "age_days": 48,
              "published_at": 1786213676,
              "releases_24h": 0,
              "releases_48h": 0,
              "is_deprecated": 0,
              "release_count": 624,
              "package_age_days": 7441,
              "first_published_at": 1147473741,
              "vulnerability_count": 0,
              "previous_published_at": 1783179080,
              "days_since_previous_release": 35
            }
          }
        },
        "id": 10,
        "mol": "Md(Re)",
        "path": "setuptools@84.0.0.registry.json",
        "pid": 1,
        "rel": "registry",
        "risk": 1,
        "role": "sidecar",
        "sha": "3c5d373139e372a75bb784dac41f98c10a52598967f68a2e45999d99cdd3b451",
        "size": 833,
        "traits": [
          {
            "id": "metadata/registry::established-package",
            "conf": 1.0,
            "crit": 3,
            "desc": "Package is at least one year old"
          },
          {
            "id": "metadata/registry::many-releases",
            "conf": 1.0,
            "crit": 3,
            "desc": "Twenty or more releases"
          }
        ],
        "type": "registry"
      },
      {
        "id": 11,
        "mol": "Md(Re)",
        "sha": "18c1cd10f2bcccbc83fcab21adb704e3887cb30644c5b180bdd8113aa1b1899a",
        "path": "bfox-build-utils@1.0.0.registry.json",
        "risk": 1,
        "size": 758,
        "type": "registry",
        "depth": 1
      }
    ],
    "omitted_files": 1,
    "rev": "d6e0b",
    "v": "8"
  }
}