{ "ml": { "v": "7", "eng": "2.3.1-beta.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.000024875006, "rte": "az", "prob": 0.000024875006 } ], "prob": 0.000027646622, "skip": [ { "rte": "az/whl", "why": "unavailable" }, { "rte": "az/whl", "why": "unavailable" } ], "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.000027646621674648486, "type": "whl" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000013172626495361328, "type": "python" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000027646621674648486, "type": "python" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.00002292791941727046, "type": "python" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.00001809994319046382, "type": "python" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000013252099051896948, "type": "python" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000015030304894025903, "type": "python" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000016868114471435547, "type": "python" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.00001519918441772461, "type": "python" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000013202428817749023, "type": "python" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.000014146168723527808, "type": "python" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.000015268722563632764, "type": "pkg_info" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.0000201265011128271, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-07-19T23:34:33Z" }, "path": "small_mcap-0.12.0-py3-none-any.whl", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak00000aPIGx0000000000000xb0047SvqG:!zdv0[fhLpz1qy?o00\u0026M803It+Q8{@i0@@rX3\u0026*ny0001uzddl%uU%pYA4+N9x(mTbuTCB8D5U\u003eHzSrR^ZuWiN{P+fK]8F%/KAE8Ami0m\u0026*67T].H@]ZTsj", "n": [ { "c": 2, "d": "Wheel archive contains Python source member", "i": "metadata/package/quality/source::wheel-contains-python-source", "o": 0, "z": 1, "cf": 0.9900000095367432 } ], "ln": 0 } ], "mol": "O(As)H(Db)", "sha": "a8d6e21de78301be78da510b383764b576de22883dfa2657776ff30e0cf53293", "path": "small_mcap-0.12.0-py3-none-any.whl", "risk": 2, "size": 44559, "type": "whl", "facts": { "metrics": { "whl": { "native_extension_count": 0.0 }, "file": { "size": 44559.0, "entropy": 7.97, "size_bytes": 44559.0 }, "binary": { "overall_entropy": 7.97, "peak_region_bytes": 43008.0, "peak_region_entropy": 7.82 }, "archive": { "file_count": 14.0, "member_count": 16.0, "script_count": 10.0, "zip_bomb_ratio": 4.7, "directory_count": 2.0, "executable_count": 0.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 42549.0, "compression.ratio": 0.24, "hidden_file_count": 0.0, "total_uncompressed": 177054.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 36.0, "rtlo_filename_count": 0.0, "format.regular_count": 14.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "format.directory_count": 2.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "timing.mtime_unique_count": 1.0, "timing.mtime_unique_ratio": 0.06, "misplaced_executable_count": 0.0, "timing.mtime_dominant_count": 16.0, "timing.mtime_spread_seconds": 0.0, "timing.sentinel_mtime_count": 0.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 1.0, "compression.method_counts.stored": 2.0, "compression.method_counts.deflate": 14.0 } } }, "ident": { "name": { "value": "small_mcap", "source": "whl.distribution", "verified": false }, "trust": "unsigned", "authors": [ { "name": "Marko Bausch", "role": "author", "source": "whl.author" } ], "version": { "value": "0.12.0", "source": "whl.version", "verified": false } }, "traits": [ { "id": "objectives/anti-static/obfuscation/encoding/layered::multi-layer-string", "atk": "T1027", "mbc": "E1014", "conf": 0.800000011920929, "crit": 3, "desc": "Layered bytes/string conversion", "from": [ { "file": 2 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-summary-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Declares Python package summary", "from": [ { "file": 11 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-core-metadata", "conf": 1.0, "crit": 1, "desc": "Declares Python Core Metadata version", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/data/serialize/json::json-loads-call", "conf": 0.8999999761581421, "crit": 3, "desc": "Python json.loads call", "from": [ { "file": 3 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-requires-python", "conf": 0.8999999761581421, "crit": 1, "desc": "Declares supported Python versions", "from": [ { "file": 11 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Declares Python package version", "from": [ { "file": 11 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-requires-dist", "conf": 0.8999999761581421, "crit": 1, "desc": "Declares Python runtime dependencies", "from": [ { "file": 11 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-name-field", "conf": 0.8999999761581421, "crit": 1, "desc": "Declares Python package name", "from": [ { "file": 11 } ] } ] }, { "ctx": [ { "b": "a%Fjfzddl%eP20aA5]acaz++8xMODfx\u003eIa3aw^u9xM4=hy?Wv0vrcSow]zYjA+eV\u0026x(mMavqYP#Cxdztx(mMao*.iyazbt7wPGE", "n": [ { "c": 2, "d": "Python file extension", "i": "metadata/file/extension/identity::py", "o": 0, "z": 11, "cf": 1.0 } ], "ln": 1, "addr": 0 }, { "b": "", "ln": 2, "addr": 80 }, { "b": "ra]#!aAg+0yHH\u003c!aAhvtC4\u003eF#B0a)lB7]Ggy?j.$zE:(3w[C:!x\u003eqg7azC.nwPzx\u003ev}u={z/M$Az/PSczF78ox([2ho*.iyazbt7wPGy", "ln": 3, "addr": 81 }, { "b": "", "ln": 6, "addr": 238 }, { "b": "boP(}v@Dx#aAR)FwPF#5zE:(1z/PziwmoN*aAITBBZ]JoA+fp", "ln": 7, "addr": 239 }, { "b": "w].*baAIydy\u00260D}v{%sewQ4Y@Acb/jzGu}mze:AlBrz$", "n": [ { "c": 1, "d": "Python except branch for crypto fallback cluster", "i": "objectives/command-and-control/dropper/staging/encrypted::dual-crypto-bcrypt-fallback--rx-4", "o": 295, "z": 6, "cf": 0.30000001192092896 } ], "ln": 8, "addr": 279 }, { "b": "arR^HlUG[CzE)SVz/!D!B-7.UA=M8sec", "ln": 9, "addr": 315 }, { "b": "arR^HlScoLvqGT*vruj4zBFO^z/Nx", "ln": 10, "addr": 341 }, { "b": "", "ln": 22, "addr": 624 }, { "b": "boP(}vpS}\u0026ay/j@B8$]layPd#azb+lv@#B6zGt", "ln": 23, "addr": 625 }, { "b": "w].*baAIydy\u00260D}v{%seyiarhuU0.Tz!9B1azCXiz/P}xn(FIXl$G\u003eDwmY^JvpKy$A^ohUn(FIXmq=QNwmY^JvpKy$A^m", "n": [ { "c": 1, "d": "Python import-from statement", "i": "micro-behaviors/data/source/language::python-import-from-statement", "o": 656, "z": 54, "cf": 0.800000011920929 } ], "ln": 24, "addr": 656 }, { "b": "w].*baAIydy\u00260D}v{%seA+eV\u0026wPw]cze:AlBrz$", "ln": 25, "addr": 731 }, { "b": "arR^HlUG[CzE)SLwN/T?wPymGv@#TfC#eK1Bz\u003eVcy+b", "ln": 26, "addr": 763 }, { "b": "arR^Hl$G\u003eDwmYpCwPI{3xjSQ", "ln": 27, "addr": 798 }, { "b": "arR^Hl$G\u003eDwmY^JvpKy$A^pG4z//]cz!{%", "ln": 28, "addr": 818 }, { "b": "arR^HvSD3*yJTP6v}Z15yB/", "n": [ { "c": 1, "d": "Contains the generic term chunk", "i": "metadata/file/string/identity::chunk-token", "o": 858, "z": 5, "cf": 0.949999988079071 } ], "ln": 29, "addr": 846 }, { "b": "arR^HxjVf(xK$Q.wPxs", "ln": 30, "addr": 865 }, { "b": "arR^HxjVf(B9htpvrcSA", "ln": 31, "addr": 881 } ], "depth": 1, "facts": { "imp": [ [ "", "Attachment" ], [ "", "AttachmentIndex" ], [ "", "CRCValidationError" ], [ "", "Channel" ], [ "", "ChannelDecoderFactoryProtocol" ], [ "", "ChannelNotFoundError" ], [ "", "Chunk" ], [ "", "ChunkIndex" ], [ "", "CompressionType" ], [ "", "DataEnd" ], [ "", "DecodedMessage" ], [ "", "DecoderFactoryProtocol" ], [ "", "EncoderFactoryProtocol" ], [ "", "EndOfFileError" ], [ "", "Footer" ], [ "", "Header" ], [ "", "IllegalOpcodeInChunkError" ], [ "", "IndexType" ], [ "", "InvalidHeaderError" ], [ "", "InvalidMagicError" ], [ "", "JSONDecoderFactory" ], [ "", "JSONEncoderFactory" ], [ "", "LazyChunk" ], [ "", "MAGIC" ], [ "", "MAGIC_SIZE" ], [ "", "McapError" ], [ "", "McapRecord" ], [ "", "McapWriter" ], [ "", "Message" ], [ "", "MessageEncoding" ], [ "", "MessageIndex" ], [ "", "Metadata" ], [ "", "MetadataIndex" ], [ "", "OPCODE_TO_RECORD" ], [ "", "Opcode" ], [ "", "PrebuiltChunk" ], [ "", "Profile" ], [ "", "RebuildInfo" ], [ "", "RecordLengthLimitExceededError" ], [ "", "Remapper" ], [ "", "Schema" ], [ "", "SchemaEncoding" ], [ "", "SchemaNotFoundError" ], [ "", "SeekRequiredError" ], [ "", "Statistics" ], [ "", "Summary" ], [ "", "SummaryOffset" ], [ "", "UnsupportedCompressionError" ], [ "", "WritableBuffer" ], [ "", "WriterNotStartedError" ], [ "", "breakup_chunk" ], [ "", "get_header" ], [ "", "get_summary" ], [ "", "include_topics" ], [ "", "read_attachment" ], [ "", "read_info_approximate" ], [ "", "read_message" ], [ "", "read_message_decoded" ], [ "", "read_metadata" ], [ "", "rebuild_summary" ], [ "", "small_mcap.exceptions" ], [ "", "small_mcap.json_decoder" ], [ "", "small_mcap.reader" ], [ "", "small_mcap.rebuild" ], [ "", "small_mcap.records" ], [ "", "small_mcap.remapper" ], [ "", "small_mcap.well_known" ], [ "", "small_mcap.writer" ], [ "", "stream_reader" ] ], "metrics": { "ast": { "max_depth": 5.0, "bind_count": 1.0, "call_count": 0.0, "node_count": 565.0, "identifier_count": 71.0, "string_literal_count": 62.0, "array_literal_max_length": 61.0 }, "file": { "size": 3128.0, "entropy": 4.74, "size_bytes": 3128.0 }, "text": { "space_count": 529.0, "total_lines": 141.0, "char_entropy": 4.74, "unique_chars": 62.0, "string_density": 0.44, "avg_line_length": 21.18, "max_line_length": 83.0, "empty_line_ratio": 0.04, "last_line_length": 1.0, "whitespace_ratio": 0.21, "most_common_ratio": 0.07, "identifier_density": 0.55, "line_length_stddev": 14.49, "encoded_string_ratio": 0.02, "normalized_string_count": 5.22, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.01, "normalized_unique_identifiers": 9.94 }, "binds": { "count": 1.0 }, "binary": { "overall_entropy": 4.74, "peak_region_bytes": 3072.0, "peak_region_entropy": 4.8 }, "imports": { "count": 69.0, "unique_modules": 69.0, "third_party_count": 69.0, "third_party_ratio": 1.0 }, "strings": { "total": 62.0, "avg_length": 17.16, "max_length": 235.0, "avg_entropy": 3.11, "total_bytes": 1064.0, "entropy_stddev": 0.49, "base64_candidates": 1.0 }, "comments": { "chars": 117.0, "lines": 4.0, "total": 4.0, "to_code_ratio": 0.03 }, "identifiers": { "count": 71.0, "total": 78.0, "avg_length": 12.85, "max_length": 30.0, "min_length": 5.0, "avg_entropy": 3.0, "reuse_ratio": 0.91, "unique_count": 71.0, "length_stddev": 5.82, "high_entropy_count": 14.0, "high_entropy_ratio": 0.2, "all_lowercase_ratio": 0.3, "all_uppercase_ratio": 0.04, "keyboard_pattern_names": 1.0, "double_underscore_count": 1.0, "underscore_prefix_count": 1.0 } } }, "id": 1, "path": "small_mcap-0.12.0-py3-none-any.whl!!small_mcap/__init__.py", "pid": 0, "risk": 1, "sha": "8e87417772d92c3101b258729b311e13da9b4e6de9831501c76650beddaf4450", "size": 3128, "traits": [ { "id": "metadata/file/extension/identity::python-artifact-extension", "conf": 1.0, "crit": 1, "desc": "Python source, stub, or bytecode extension", "spans": [ [ 0, 11 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Source file has low overall entropy", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/file/extension/identity::py", "conf": 1.0, "crit": 2, "desc": "Python file extension", "spans": [ [ 0, 11 ] ] } ], "type": "python" }, { "ctx": [ { "b": "x(d*cA=-Blz/fVdCYW+ovG", "n": [ { "c": 2, "d": "Python file extension", "i": "metadata/file/extension/identity::py", "o": 0, "z": 13, "cf": 1.0 } ], "ln": 1, "addr": 0 }, { "b": "w].*baAR)Fx(mMax(d*cA=-B6sX}K]lR6Tkog.(G", "n": [ { "c": 1, "d": "Python import-from statement", "i": "micro-behaviors/data/source/language::python-import-from-statement", "o": 18, "z": 32, "cf": 0.800000011920929 } ], "ln": 2, "addr": 18 }, { "b": "", "ln": 3, "addr": 51 }, { "b": "w].*baAIydy\u00260D}v{%seA+e:0A+6klx(d*cA=-B1Aar/%wD", "ln": 4, "addr": 52 }, { "b": "v@bN{B0a4(C42i3wkcGBx\u003e6OLA=k$Do\u003edQJmriA!AW:3", "ln": 14, "addr": 196 }, { "b": "arR^HwmYu}uTEI+x()Y?d05%ow?k6lvpS.Zvp%p:iV})SBy/IoD)0oqzeTDuC4\u003eJidiHiaawM\u0026)wJx", "ln": 15, "addr": 232 }, { "b": "arR^HarR^HB9hCkAWSv?uTEI+x()Y?c\u0026", "ln": 16, "addr": 295 }, { "b": "arR^HarR^HarR^Hw*hbhBrC0mC42i3wfsPlk#nXox(4uiazC.pvqGT*az\u003eL1x\u003e6gDDT.nxwPGnevpS.Zvp%p:dk2dxv@C)?c)%dVw?t$\u0026efDrXwPhD]v}v2pEiF", "n": [ { "c": 3, "d": "Layered bytes/string conversion", "i": "objectives/anti-static/obfuscation/encoding/layered::multi-layer-string", "o": 374, "z": 24, "cf": 0.800000011920929 } ], "ln": 17, "addr": 321 }, { "b": "arR^HarR^Hdf", "ln": 18, "addr": 420 }, { "b": "", "ln": 19, "addr": 430 }, { "b": "", "ln": 20, "addr": 431 }, { "b": "arR^HarR^HarR^Hz/xi8wmYa=vqPM#jS)Ktv@C)?c#T6mz!9Ade]C9mwD", "ln": 95, "addr": 2999 }, { "b": "arR^HarR^HB9hCkAWSv?uTEI+x()Y?c\u0026", "ln": 96, "addr": 3045 }, { "b": "arR^HarR^HarR^Hw*g@9y?ml/y-)Unv@C)?aBw3Cv@C)?uV6p?wQLXnzxJC5B-7$Rar*", "n": [ { "c": 1, "d": "Contains the generic term chunk", "i": "metadata/file/string/identity::chunk-token", "o": 3117, "z": 5, "cf": 0.949999988079071 } ], "ln": 97, "addr": 3071 }, { "b": "arR^HarR^HarR^Hw*g.#B-7#oaz\u003eLjaA8dlC{3QnzGGr3zxI\u003e/xK#3?efEq[vqY%]y+cYqzE:\u003e:wPI{3xjSiawN/U0woe{", "ln": 98, "addr": 3126 }, { "b": "arR^HarR^Hdf", "ln": 99, "addr": 3202 } ], "depth": 1, "facts": { "imp": [ [ "", "super().__init__" ], [ "", "super" ], [ "", "bytes(bad_magic).decode" ], [ "", "bytes" ], [ "", "super().__init__" ], [ "", "super" ], [ "", "type" ], [ "", "contextlib.suppress" ], [ "", "Opcode" ], [ "", "super().__init__" ], [ "", "super" ], [ "", "super().__init__" ], [ "", "super" ], [ "", "super().__init__" ], [ "", "super" ], [ "", "super().__init__" ], [ "", "super" ], [ "", "super().__init__" ], [ "", "super" ], [ "", "super().__init__" ], [ "", "super" ], [ "", "super().__init__" ], [ "", "super" ], [ "", "contextlib.suppress" ], [ "", "Opcode" ], [ "", "super().__init__" ], [ "", "super" ], [ "", "McapRecord" ], [ "", "Opcode" ], [ "", "TYPE_CHECKING" ], [ "", "contextlib" ], [ "", "small_mcap.records" ], [ "", "typing" ] ], "mbr": [ "Opcode().name", "bytes().decode", "contextlib.suppress", "super().__init__", "type().__name__" ], "tgt": [ "Opcode", "bytes", "bytes().decode", "contextlib.suppress", "super", "super().__init__", "type" ], "metrics": { "ast": { "op.bor": 4.0, "op.land": 1.0, "max_depth": 14.0, "bind_count": 8.0, "call_count": 27.0, "node_count": 848.0, "member_count": 5.0, "op_density.bor": 0.0, "op_density.land": 0.0, "identifier_count": 50.0, "member_depth_max": 2.0, "string_literal_count": 20.0 }, "file": { "size": 3212.0, "entropy": 4.63, "size_bytes": 3212.0 }, "text": { "digit_ratio": 0.0, "space_count": 710.0, "total_lines": 99.0, "char_entropy": 4.63, "unique_chars": 66.0, "string_density": 0.2, "avg_line_length": 31.44, "max_line_length": 98.0, "empty_line_ratio": 0.27, "last_line_length": 9.0, "whitespace_ratio": 0.25, "most_common_ratio": 0.07, "identifier_density": 1.57, "line_length_stddev": 27.9, "normalized_string_count": 2.01, "repeated_char_sequences": 18.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 7.54 }, "binds": { "count": 8.0 }, "calls": { "count": 27.0 }, "binary": { "overall_entropy": 4.63, "peak_region_bytes": 3072.0, "peak_region_entropy": 4.78 }, "source": { "class_count": 12.0, "function_count": 1.0 }, "imports": { "count": 6.0, "stdlib_count": 1.0, "stdlib_ratio": 0.17, "unique_modules": 6.0, "third_party_count": 5.0, "third_party_ratio": 0.83 }, "members": { "count": 5.0 }, "strings": { "total": 20.0, "avg_length": 47.1, "max_length": 83.0, "avg_entropy": 3.98, "total_bytes": 942.0, "entropy_stddev": 0.32 }, "functions": { "count": 13.0, "avg_params": 2.8, "max_params": 5.0, "length_stddev": 3.19, "avg_name_length": 8.0, "avg_length_lines": 5.2, "max_length_lines": 11.0, "min_length_lines": 2.0, "single_char_params": 2.0, "avg_param_name_length": 5.93, "density_per_100_lines": 10.1, "code_in_functions_ratio": 0.53 }, "identifiers": { "count": 50.0, "total": 155.0, "avg_length": 10.38, "max_length": 30.0, "min_length": 3.0, "avg_entropy": 2.75, "reuse_ratio": 0.32, "unique_count": 50.0, "length_stddev": 6.27, "high_entropy_count": 6.0, "high_entropy_ratio": 0.12, "all_lowercase_ratio": 0.64, "all_uppercase_ratio": 0.02, "keyboard_pattern_names": 1.0, "double_underscore_count": 2.0, "underscore_prefix_count": 2.0 } } }, "id": 2, "mol": "O(As)", "path": "small_mcap-0.12.0-py3-none-any.whl!!small_mcap/exceptions.py", "pid": 0, "risk": 1, "sha": "541ef4f25b6219fcf327ffb0b1520d3627b8623f1f13da83b8d721fab02f73a2", "size": 3212, "traits": [ { "id": "objectives/anti-static/obfuscation/encoding/layered::multi-layer-string", "atk": "T1027", "mbc": "E1014", "conf": 0.800000011920929, "crit": 3, "desc": "Layered bytes/string conversion", "spans": [ [ 374, 24 ] ] } ], "type": "python" }, { "ctx": [ { "b": "a%Fj6q+{dhwmYm?wmY^7w)]g\u003ez/QaCw]zYjB8tu4y+oHlvq)?ya%Ev3x(d*cA=-BsB8L}6w].*bay/tay?m9#x(v)ge[5j0azCXiz/P}xlT:!EvpB4:3tar%z6i}CAa%i5azCXiz/P}xl2H@P3jprPw/$C\u003ewN/T?wNxg[z/c$lvrt{sayYRrwPF#waz\u003eXbz/QbD", "ln": 0, "col": 1, "line": 1 }, { "b": "wO(vaD3i[kCoz0CayYRrwPF#az/M$nB8L}Gy\u0026r-)B0bNIAaHe4z/6D4Bzkh#y?X0p3lQDlaAz4nB-Ivxyiarhe]kDmwofefvrt{2x\u003ewG4B7]JkByx5%wHI7$ByuZyvTi6bB15kyy\u0026:egvTi6bB0$NcByuQE3jmbIy*?yaawbNdpdeV6z!9B1mQY!Gz/Qa:3lQDlar\u00260Nl$G\u003eDwmY^7w)]g\u003ez/QaCw]zYjn(FIXeOe*fz!9A\u0026az\u003eXhB75Y)B1N!barR^HnmuyDy?mVgzdN^fvp%d)aA}KwxDRe6B8$=5wNx1^v@C)(zF89Ryiarha%puuaAg+fB7]J8aARpdaAy[mayYRrwPF#5B0a7NpFJIHarR^Ha%Fir3lQDlay]4}ay]4[z!9B1uUjj%c\u003c?7tarR^HarU-py?tj9arR^HarR^HzdN^fvp%dUwO#0@wnb{]iV@G=AX4Lu", "ln": 237, "col": 16, "line": 10 }, { "b": "arR^Hx\u003ewG8wPI{3xjUBYzEWP}x(mMoy\u0026sJeAWSvVjV%]iyiarhb035NarR^HarR^HarR!EwPS6nzxJp%wN/T?wNxg[z/b[8arR^HarR!EwPS6nzxIX)zE\u003cdZ3s)ZWaywX$v@C)?uUTU2zyxvkB8$=5wJy@1zH0VNeJ$p^D30RsiTM#LarR\u003cLb1lxVz!9A4vixz#B8$=5wGV8kawbNdp9s1\u003eBy/ICa%FirarR^HA+funA=91mB8L}Gwoz:dB0$)pB8$=5wHPlyzEWP}wHF#m3jpoVvrlGjn(FIXmq=QNwmY^JvpKy$A^oXMarR^Ha%Fj1zEWP}wPw]9vpKy$A^n^tz/M%)q+{duwO#0@wmYo]zdN^fvp%d)e=", "ln": 784, "col": 5, "line": 26 } ], "depth": 1, "facts": { "imp": [ [ "", "json.loads" ], [ "", "isinstance" ], [ "", "bytes" ], [ "", "message_encoding.lower" ], [ "", "json.dumps(message).encode" ], [ "", "json.dumps" ], [ "", "Any" ], [ "", "Callable" ], [ "", "collections.abc" ], [ "", "json" ], [ "", "typing" ] ], "mbr": [ "json.dumps", "json.dumps().encode", "json.loads", "message_encoding.lower" ], "tgt": [ "bytes", "isinstance", "json.dumps", "json.dumps().encode", "json.loads", "message_encoding.lower" ], "funcs": [ [ "_decode_json", 118 ], [ "decoder_for", 538 ], [ "_encode_json", 881 ], [ "encoder_for", 1336 ] ], "metrics": { "ast": { "op.bor": 4, "max_depth": 12, "call_count": 6, "node_count": 296, "member_count": 4, "max_array_len": 1, "op_density.bor": 0.01, "member_depth_max": 3 }, "file": { "size": 1554, "entropy": 4.69 }, "text": { "lines": 52, "top_char": 101, "max_ws_run": 2, "digit_ratio": 0.01, "space_count": 311, "char_entropy": 4.69, "unique_chars": 58, "top_char_null": 0, "string_density": 0.21, "top_char_ratio": 0.09, "avg_line_length": 28.88, "max_line_length": 91, "empty_line_ratio": 0.27, "last_line_length": 27, "whitespace_ratio": 0.23, "identifier_density": 1.08, "line_length_stddev": 25.28, "normalized_string_count": 1.53, "repeated_char_sequences": 1, "suspicious_string_ratio": 0.09, "normalized_unique_identifiers": 4.74 }, "binds": { "count": 3 }, "binary": { "peak_region_bytes": 1554, "peak_region_entropy": 4.7 }, "source": { "class_count": 2, "function_count": 4 }, "imports": { "count": 5, "stdlib_count": 3, "stdlib_ratio": 0.6, "third_party_count": 2, "third_party_ratio": 0.4 }, "strings": { "sql": 1, "bytes": 612, "count": 11, "avg_length": 55.64, "max_length": 201, "avg_entropy": 3.73, "empty_count": 1, "entropy_stddev": 0.94 }, "comments": { "chars": 88, "count": 3, "lines": 3, "to_code_ratio": 0.06 }, "functions": { "count": 6, "density": 7.69, "avg_params": 2.25, "code_ratio": 0.42, "max_params": 4, "length_stddev": 2.29, "avg_name_length": 11.5, "avg_length_lines": 5.5, "max_length_lines": 9, "min_length_lines": 3, "avg_param_name_length": 8.33 }, "identifiers": { "count": 56, "unique": 27, "avg_length": 8.07, "max_length": 18, "min_length": 3, "avg_entropy": 2.51, "reuse_ratio": 0.48, "length_stddev": 4.32, "high_entropy_count": 2, "high_entropy_ratio": 0.07, "all_lowercase_ratio": 0.85, "underscore_prefix_count": 2 } } }, "id": 3, "mol": "H(Db)", "path": "small_mcap-0.12.0-py3-none-any.whl!!small_mcap/json_decoder.py", "pid": 0, "risk": 1, "sha": "6acaee32b7d7c83294e897a6270b39760e11c894ed088b1c124cc8f25fb953d3", "size": 1554, "traits": [ { "id": "micro-behaviors/data/serialize/json::json-loads-call", "conf": 0.9, "crit": 3, "desc": "Parses JSON data with Python", "spans": [ [ 301, 10 ] ] } ], "type": "python" }, { "ctx": [ { "b": "a%FjapF-fAwN/T?wPw]9vpKy$A^n^tz/M$wzddl%eP20aA4SsUa]", "n": [ { "c": 2, "d": "Python file extension", "i": "metadata/file/extension/identity::py", "o": 0, "z": 14, "cf": 1.0 } ], "ln": 1, "addr": 0 }, { "b": "", "ln": 2, "addr": 42 }, { "b": "w].*bay/tay?m9#x(v)ge[5j0azCXiz/P}xlT:!EvpB4:", "n": [ { "c": 1, "d": "Python import-from statement", "i": "micro-behaviors/data/source/language::python-import-from-statement", "o": 43, "z": 36, "cf": 0.800000011920929 } ], "ln": 3, "addr": 43 }, { "b": "w].*baAR)Fx(mMax(d*cA=-A\u0026zG#", "ln": 4, "addr": 80 }, { "b": "", "ln": 5, "addr": 103 } ], "depth": 1, "facts": { "imp": [ [ "", "RuntimeDecoderNotFoundError" ], [ "", "Any" ], [ "", "Callable" ], [ "", "collections.abc" ], [ "", "typing" ] ], "tgt": [ "RuntimeDecoderNotFoundError" ], "metrics": { "ast": { "op.bor": 3.0, "max_depth": 12.0, "call_count": 1.0, "node_count": 139.0, "op_density.bor": 0.02, "identifier_count": 17.0, "string_literal_count": 6.0, "array_literal_max_length": 1.0 }, "file": { "size": 957.0, "entropy": 4.68, "size_bytes": 957.0 }, "text": { "digit_ratio": 0.01, "space_count": 164.0, "total_lines": 28.0, "char_entropy": 4.68, "unique_chars": 52.0, "string_density": 0.21, "avg_line_length": 33.18, "max_line_length": 98.0, "empty_line_ratio": 0.32, "last_line_length": 27.0, "whitespace_ratio": 0.2, "most_common_ratio": 0.09, "identifier_density": 0.89, "line_length_stddev": 31.77, "normalized_string_count": 1.13, "suspicious_string_ratio": 0.17, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 2.0, "most_common_char_codepoint": 101.0, "normalized_unique_identifiers": 3.54 }, "calls": { "count": 1.0 }, "binary": { "overall_entropy": 4.68, "peak_region_bytes": 957.0, "peak_region_entropy": 4.68 }, "source": { "class_count": 2.0, "function_count": 2.0 }, "imports": { "count": 4.0, "stdlib_count": 2.0, "stdlib_ratio": 0.5, "unique_modules": 4.0, "third_party_count": 2.0, "third_party_ratio": 0.5 }, "strings": { "total": 6.0, "avg_length": 80.5, "max_length": 167.0, "avg_entropy": 4.17, "total_bytes": 483.0, "entropy_stddev": 0.14, "embedded_code_candidates": 1.0 }, "comments": { "chars": 26.0, "lines": 2.0, "total": 2.0, "to_code_ratio": 0.08 }, "functions": { "count": 4.0, "avg_params": 3.0, "max_params": 5.0, "length_stddev": 2.0, "avg_name_length": 11.5, "avg_length_lines": 5.0, "max_length_lines": 7.0, "min_length_lines": 3.0, "single_char_params": 1.0, "avg_param_name_length": 9.17, "density_per_100_lines": 7.14, "code_in_functions_ratio": 0.36 }, "identifiers": { "count": 17.0, "total": 25.0, "avg_length": 9.12, "max_length": 27.0, "min_length": 1.0, "avg_entropy": 2.45, "reuse_ratio": 0.68, "unique_count": 17.0, "length_stddev": 6.4, "single_char_count": 1.0, "single_char_ratio": 0.06, "high_entropy_count": 2.0, "high_entropy_ratio": 0.12, "all_lowercase_ratio": 0.71, "all_uppercase_ratio": 0.06, "underscore_prefix_count": 2.0 } } }, "id": 4, "path": "small_mcap-0.12.0-py3-none-any.whl!!small_mcap/nop_decoder.py", "pid": 0, "risk": 1, "sha": "002f823baad4edc5312e811c9d8793c2fd79b4a644f2b00b5bd92fe1d5acd8dc", "size": 957, "traits": [ { "id": "metadata/file/extension/identity::python-artifact-extension", "conf": 1.0, "crit": 1, "desc": "Python source, stub, or bytecode extension", "spans": [ [ 0, 14 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Source file has low overall entropy", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/file/extension/identity::py", "conf": 1.0, "crit": 2, "desc": "Python file extension", "spans": [ [ 0, 14 ] ] } ], "type": "python" }, { "ctx": [ { "b": "x(d*cA=-Bkx(^\u0026}Bn", "n": [ { "c": 2, "d": "Python file extension", "i": "metadata/file/extension/identity::py", "o": 0, "z": 9, "cf": 1.0 } ], "ln": 1, "addr": 0 }, { "b": "x(d*cA=-BqwNPK$", "ln": 2, "addr": 14 }, { "b": "x(d*cA=-BrzV", "ln": 3, "addr": 27 }, { "b": "x(d*cA=-BCxMvV)wnb{]", "ln": 6, "addr": 65 }, { "b": "x(d*cA=-BIy?Wt", "ln": 7, "addr": 82 }, { "b": "w].*bay/tay?m9#x(v)ge[5j0azCXiz/P}xlT:!EvpB4:efEJawPzi*y?i", "n": [ { "c": 1, "d": "Python import-from statement", "i": "micro-behaviors/data/source/language::python-import-from-statement", "o": 94, "z": 36, "cf": 0.800000011920929 } ], "ln": 8, "addr": 94 }, { "b": "w].*bay/tcv%8*jwO#Pxw{5irA+fqmx(d*cA=-A[B-.+DwH[%6xMvV)wkEh.y^\u0026OWv%8)iAS", "n": [ { "c": 2, "d": "References to worker pools", "i": "micro-behaviors/process/create/workers::worker-pool", "o": 180, "z": 10, "cf": 0.6000000238418579 } ], "ln": 9, "addr": 141 }, { "b": "w].*bay[]5vpKaZB8$]lazCXiz/P}xwmoN*v@bN{A@", "ln": 10, "addr": 199 }, { "b": "w].*baAR)Fx(mMax(d*cA=-A}pB)R/sX}K]lR6Tkog.(GefEk@C}p7ix(){bvqEFqp\u0026ZF@z!0Z4efFChB95@Qz*2Yjy\u0026r-)", "ln": 13, "addr": 315 }, { "b": "", "ln": 14, "addr": 392 }, { "b": "w].*baAIydy\u00260D}v{%sewQ4Y@Acb/jzGu}mze:AlBrz$", "n": [ { "c": 1, "d": "Python except branch for crypto fallback cluster", "i": "objectives/command-and-control/dropper/staging/encrypted::dual-crypto-bcrypt-fallback--rx-4", "o": 409, "z": 6, "cf": 0.30000001192092896 } ], "ln": 15, "addr": 393 }, { "b": "arR^HlUG[CzE)SVz/!D!B-7.UA=M8sec", "ln": 16, "addr": 429 }, { "b": "arR^HlScoLvqGT*vruj4zBFO^z/Nx", "ln": 17, "addr": 455 }, { "b": "arR^HBAhT/", "ln": 57, "addr": 1209 }, { "b": "arR^HarR^Hw].*baz=uXe[PcjzdK\u00267ze:AlBrCa9v@Dj6A+frkayPsly\u003cE{BwmYm?ze:JbB8}", "ln": 58, "addr": 1218 }, { "b": "arR^HwQ4Y@Ac9i]ze:AlBvyj\u003cz/N(", "n": [ { "c": 2, "d": "Error handling keywords", "i": "micro-behaviors/crypto/symmetric/fernet::error-handling-keywords", "o": 1281, "z": 18, "cf": 1.0 } ], "ln": 59, "addr": 1277 }, { "b": "arR^HarR^Hy\u003cE{BwmYm?ze:JbB8@D!awM\u0026)wD", "ln": 60, "addr": 1301 }, { "b": "", "ln": 61, "addr": 1331 }, { "b": "boRqNByVI6vpK7:zE:(2x(!l4ByO#b\u0026^^mop\u003cEd@z/cWNe?]g9B7/obB0a\u003e2z/6DlwPI{bz/dgNB97@2azCZoBzbkdB97@ex\u003c%d", "n": [ { "c": 2, "d": "Contains frequent English function words", "i": "metadata/file/profile/language::lang-english", "o": 1400, "z": 3, "cf": 0.800000011920929 } ], "ln": 62, "addr": 1332 }, { "b": "boQ]vwmY^7x(n37A=u5gBy/GlaA.:paARpdaARphA+3+vvrcEnayGIpByx5$vrb)^aAg+0yHH\u003c!e*9O%Bzblaaz\u003eLjayX)", "ln": 63, "addr": 1412 }, { "b": "arR^HarR^Hw].*bay/tbAb]JhB7]MgazCXiz/P}xDujgsayPsluVQs1y?Wu=Dujgs", "ln": 71, "addr": 1656 }, { "b": "", "ln": 72, "addr": 1709 }, { "b": "arR^HarR^HwmYu}uWu^nwm5\u003eUv@Dj6A+frkc$D+dvlbJuD30RsaBCqGwO(vaD3i[kCpT\u003ezwQ5f9v@#o)uVP}cwJy@FzGErIeJ$p^D30RsiS", "n": [ { "c": 1, "d": "HTTP request body field marker", "i": "objectives/exfiltration/http/hardcoded-key::request-body-marker", "o": 1739, "z": 5, "cf": 0.75 } ], "ln": 73, "addr": 1710 }, { "b": "arR^HarR^HarR^HA+funA=91bB97@ex\u003c$B}B97}BwmYm?ze:JbB8@:uvrt{b", "ln": 74, "addr": 1796 }, { "b": "arR^HwQ4Y@Ac9i]ze:AlBvyj\u003cz/N(", "ln": 75, "addr": 1845 }, { "b": "arR^HarR^HarR^HboP/]AXhxDA+eV\u0026ay]4[z/6DlwPI{hAV!\u003e2v}YA@\u0026^^mou%^CQv@Dj6A+frkuU0O!vpaa\u0026A+eV\u0026B75V(u)6GjzGu}szu", "ln": 79, "addr": 1934 }, { "b": "arR^HarR^HarR^HboQzqu@Q/WwNPaCz/oCXCX7xcBz(hcaA}:AyH}JeAbPVhefFwswftn-B97}XwN/T}Ab]JhB8M7EdpsojA@", "ln": 80, "addr": 2020 }, { "b": "arR^HarR^HarR^HboQMxAaJ{dx)a5gBz\u0026piz/fSrA=\u003e(laAz4fvrujbwGV8kayMylx(mN1wGUF@B-7$qwmYm?wmWv", "n": [ { "c": 1, "d": "Contains the generic term chunk", "i": "metadata/file/string/identity::chunk-token", "o": 2156, "z": 5, "cf": 0.949999988079071 } ], "ln": 81, "addr": 2098 }, { "b": "arR^HarR^HarR^HuWu^nwm6B{B09Q*BzbYavpT7\u0026xd!1sv{%g4df", "ln": 82, "addr": 2170 }, { "b": "", "ln": 83, "addr": 2212 }, { "b": "arR^HarR^HarR^HwmYu}uWu^nwm5\u003eUv@Dj6A+frkc$D+dvlbJuD30RsaBCqGwO(vaD3i[kCpT\u003eFCYmk7By!#\u0026B7]@iiV@cOBsws:j%jrWBy/IO", "ln": 84, "addr": 2213 }, { "b": "arR^HarR^HarR^HarR^HwmYm?ze:JbB8#nuauZ\u0026WwPRv5BAe^pDujgsuVZa9efDcEwN/T}Ab]JhB8M7yefEYazE\u003el", "n": [ { "c": 1, "d": "Python getattr dynamic attribute lookup", "i": "micro-behaviors/os/api-resolution/dynamic::python-getattr-call", "o": 2333, "z": 7, "cf": 0.75 } ], "ln": 85, "addr": 2302 }, { "b": "arR^HarR^HarR^HarR^Hx\u003ewF#wN/T}Ab]JhB8M7wx(+y(z/fbE", "ln": 86, "addr": 2374 }, { "b": "arR^HarR^HarR^HarR^HarR^HwmYm?ze:JbB8#nuauZ\u0026JB97}XwN/T}Ab]JhB8M7Edf", "ln": 87, "addr": 2415 }, { "b": "arR^HAbP!ujS(A", "ln": 167, "addr": 5197 }, { "b": "", "n": [ { "c": 2, "d": "Iteration or loop pattern", "i": "micro-behaviors/data/control-flow/analysis::iteration-loop-pattern", "o": 5209, "z": 27, "cf": 0.5 } ], "ln": 168, "addr": 5209 }, { "b": "arR^HCw7YbwGU@gB09N/y?mGjC4\u003eJidlm", "ln": 169, "addr": 5210 }, { "b": "arR^HarR^Hx\u003ewGaAar/%wGTc0awV@^z!9Aio*}#Vk$sv8", "ln": 174, "addr": 5382 }, { "b": "arR^HarR^HarR^HD1*\u0026awfsPTB8$=5wIe1mvpQ^fx\u003eqG)AbP!UA+e:0A+5J/vrt{+wO#3:df", "n": [ { "c": 2, "d": "Reads file content (Python)", "i": "micro-behaviors/fs/read/file::file-read-content", "o": 5444, "z": 6, "cf": 0.6000000238418579 } ], "ln": 175, "addr": 5419 }, { "b": "arR^HarR^HwO=6)aA8jez!9A4jV%]-Aar/%wIctvk#7fzoGA", "ln": 176, "addr": 5477 }, { "b": "arR^HarR^HarR^HD1*\u0026awfslMvqY%]y+x:tvpQ^fx\u003eqG)AbP!UA+e:0A+5J/vrt{+wO#3:df", "ln": 177, "addr": 5516 }, { "b": "arR^HarR^HwO=6)aA8jez!9A4jV%]-Aar/%wIc[GnjulsiS", "n": [ { "c": 1, "d": "SCHEMA identifier (config name)", "i": "objectives/anti-static/obfuscation/payload/config::api-named-byte-array-const--rx-4", "o": 5604, "z": 7, "cf": 0.9200000166893005 } ], "ln": 178, "addr": 5574 }, { "b": "arR^HarR^HarR^HD1*\u0026awfs/XxK#3?e]\u003eJiwghRnwP}u$z/W%WwN/U0wm5\u003eQBywJ/zE^34", "ln": 179, "addr": 5612 }, { "b": "arR^HarR^HwO=B0iS", "ln": 180, "addr": 5669 }, { "b": "arR^HarR^HarR^HarR^HarR^HDtdsDA+fA9A=U/5d0Nv^x(dB5Byx39B15T.A+fA9A=U/5d0Nv.w[D9}BAn(ZaAITBx\u003e8lFrc0a)df", "ln": 210, "addr": 6536 }, { "b": "arR^HarR^HarR^HarR^HarR^Hw]zYjCPZZraz\u003eXhB75Y)uUKy*wQ4^c", "n": [ { "c": 2, "d": "for loop (content)", "i": "micro-behaviors/data/control-flow/analysis::for-loop-content", "o": 6637, "z": 10, "cf": 0.30000001192092896 } ], "ln": 211, "addr": 6618 }, { "b": "arR^HarR^HarR^HarR^Hdj+", "ln": 212, "addr": 6663 }, { "b": "", "ln": 346, "addr": 11024 }, { "b": "arR^HCw7YbwGT@)B.9P", "n": [ { "c": 2, "d": "Python infinite while True loop", "i": "micro-behaviors/data/control-flow/loop::python-while-true", "o": 11029, "z": 11, "cf": 1.0 } ], "ln": 347, "addr": 11025 }, { "b": "arR^HarR^HBAhT/", "ln": 348, "addr": 11041 }, { "b": "wmYu}uU0.Tz/6DlwPI{1wmoN*uVY$4wNPa\u003cvp\u003c70v}Z15yDrO9xMXiddiHiaayYRrwPF#waz\u003eXbz/QbDx\u003eqGH", "ln": 588, "addr": 19695 }, { "b": "arR^Ha%Fj0wN/T}Ab]JhB0a$aB-7$qwmoN*aA.:tzF782aARpqwNPa3y\u0026r/(y-)n1v@Dj6A+frkz/M%GBzbYavpQ%hvp\u003c71e*qF-", "ln": 589, "addr": 19764 }, { "b": "arR^Hx\u003ewF$xMXide[n*pAb]JhB7]Mgau.\u003egb6[rLwfK5", "n": [ { "c": 1, "d": "String literal equality or membership check", "i": "micro-behaviors/data/control-flow/analysis::string-literal-equality-check", "o": 19870, "z": 9, "cf": 0.9200000166893005 } ], "ln": 590, "addr": 19845 }, { "b": "arR^HarR^Hx\u003ewF{DujgsuU0.Tz/6DlwPI]nx(+y(z/fbE", "ln": 591, "addr": 19881 }, { "b": "arR^HarR^HarR^HA:-W6wGT#\u003cB9hCvz/P@hwj7oLAb]JhB7]MgmriA!AWQ", "ln": 592, "addr": 19918 }, { "b": "arR^HarR^HarR^HboR2rv@Dx#x(mN8asH-uvrl9[wftt)w]zZ3aARpdaAIWxzddEgaA}mnaA}\u003cuBAz8idj#-fz!9M[B0bpkC4y", "ln": 831, "addr": 29056 }, { "b": "arR^HarR^HarR^HboQYrB7]e@aARpday/tbAb]JhB7F(8v}Z15yB*PHzY\u003cdnwPzu8x(+zmzY\u003c1gAXhctB8$=5wGV59wOSAgzV", "ln": 832, "addr": 29135 }, { "b": "arR^HarR^HarR^HboQMxAboDbBupQSx(4)5AV/7ly?W=#asHUvB7/05wN(]@wO#71vruBdaztt5AaK5jzdNc%B-H]1y\u003cu", "n": [ { "c": 1, "d": "Exploit marker indicators", "i": "objectives/privilege-escalation/exploit/vulnerabilities::tunables-exploit-marker", "o": 29227, "z": 7, "cf": 1.0 } ], "ln": 833, "addr": 29213 }, { "b": "arR^HarR^HarR^HboR5zz*cmBBzbxfaAg[jePLAjz/Pwhy\u0026slhdj$", "ln": 834, "addr": 29288 }, { "b": "arR^HarR^HarR^Hw]zYjA+e:0A+3qbzxJzewNPv%A9)9*B-7$ylUHQWyC6TsvpQ=}z!abxdlm", "ln": 835, "addr": 29331 } ], "depth": 1, "facts": { "imp": [ [ "", "stdlib_zstd.decompress" ], [ "", "threading.local" ], [ "", "getattr" ], [ "", "ZstdDecompressor" ], [ "", "decompressor.decompress" ], [ "", "max" ], [ "", "isinstance" ], [ "", "UnsupportedCompressionError" ], [ "", "type" ], [ "", "decompress_data_threadsafe" ], [ "", "zlib.crc32" ], [ "", "CRCValidationError" ], [ "", "get_chunk_data_stream" ], [ "", "memoryview" ], [ "", "len" ], [ "", "OPCODE_AND_LEN_STRUCT.unpack_from" ], [ "", "Message.read" ], [ "", "Channel.read" ], [ "", "Schema.read" ], [ "", "IllegalOpcodeInChunkError" ], [ "", "list" ], [ "", "get_chunk_data_stream" ], [ "", "memoryview" ], [ "", "len" ], [ "", "reversed" ], [ "", "heapq.merge" ], [ "", "zip" ], [ "", "reversed" ], [ "", "reversed" ], [ "", "itemgetter" ], [ "", "heapq.merge" ], [ "", "zip" ], [ "", "itemgetter" ], [ "", "OPCODE_AND_LEN_STRUCT.unpack_from" ], [ "", "Message.read" ], [ "", "IllegalOpcodeInChunkError" ], [ "", "memoryview" ], [ "", "OPCODE_AND_LEN_STRUCT.unpack_from" ], [ "", "Chunk.read" ], [ "", "len" ], [ "", "OPCODE_AND_LEN_STRUCT.unpack_from" ], [ "", "MessageIndex.read" ], [ "", "message_indexes.append" ], [ "", "stream.read" ], [ "", "len" ], [ "", "zlib.crc32" ], [ "", "memoryview" ], [ "", "stream.tell" ], [ "", "read" ], [ "", "InvalidMagicError" ], [ "", "OPCODE_AND_LEN_STRUCT.unpack" ], [ "", "read" ], [ "", "RecordLengthLimitExceededError" ], [ "", "LazyChunk.read_from_stream" ], [ "", "stream.tell" ], [ "", "read" ], [ "", "OPCODE_TO_RECORD.get" ], [ "", "record_cls.read" ], [ "", "cast" ], [ "", "CRCValidationError" ], [ "", "breakup_chunk" ], [ "", "cast" ], [ "", "read" ], [ "", "InvalidMagicError" ], [ "", "Summary" ], [ "", "isinstance" ], [ "", "summary.chunk_indexes.append" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "summary.attachment_indexes.append" ], [ "", "isinstance" ], [ "", "summary.metadata_indexes.append" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "stream.seekable" ], [ "", "stream.seek" ], [ "", "stream.read" ], [ "", "stream.seek" ], [ "", "next" ], [ "", "iter" ], [ "", "stream_reader" ], [ "", "isinstance" ], [ "", "stream.seek" ], [ "", "read_summary_from_iterable" ], [ "", "stream_reader" ], [ "", "stream.seekable" ], [ "", "stream.seek" ], [ "", "next" ], [ "", "iter" ], [ "", "stream_reader" ], [ "", "isinstance" ], [ "", "InvalidHeaderError" ], [ "", "type" ], [ "", "stream.seek" ], [ "", "Attachment.read_record" ], [ "", "stream.seek" ], [ "", "Metadata.read_record" ], [ "", "isinstance" ], [ "", "channels.get" ], [ "", "ChannelNotFoundError" ], [ "", "schemas.get" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "SchemaNotFoundError" ], [ "", "should_include" ], [ "", "schemas.get" ], [ "", "exclude_channels.add" ], [ "", "MessageIndex" ], [ "", "bisect.bisect_left" ], [ "", "bisect.bisect_left" ], [ "", "MessageIndex" ], [ "", "filter_message_index_by_time" ], [ "", "UnsupportedCompressionError" ], [ "", "zstd_decompress" ], [ "", "UnsupportedCompressionError" ], [ "", "lz4_decompress" ], [ "", "UnsupportedCompressionError" ], [ "", "filter_message_indices_by_time" ], [ "", "breakup_chunk_with_indexes" ], [ "", "breakup_chunk" ], [ "", "decompress_data_threadsafe" ], [ "", "zlib.crc32" ], [ "", "CRCValidationError" ], [ "", "Chunk" ], [ "", "bool" ], [ "", "exclude_channels.issuperset" ], [ "", "stream.seek" ], [ "", "stream.read" ], [ "", "read_chunk_and_indexes" ], [ "", "stream_reader" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "pending_indexes.append" ], [ "", "future.result" ], [ "", "cb" ], [ "", "ThreadPoolExecutor" ], [ "", "isinstance" ], [ "", "cast" ], [ "", "pending.append" ], [ "", "pool.submit" ], [ "", "len" ], [ "", "drain" ], [ "", "pending.pop" ], [ "", "enumerate" ], [ "", "len" ], [ "", "drain" ], [ "", "set" ], [ "", "read" ], [ "", "InvalidMagicError" ], [ "", "SchemaNotFoundError" ], [ "", "should_include" ], [ "", "schemas.get" ], [ "", "exclude_channels.add" ], [ "", "read" ], [ "", "len" ], [ "", "OPCODE_AND_LEN_STRUCT.unpack" ], [ "", "RecordLengthLimitExceededError" ], [ "", "read" ], [ "", "len" ], [ "", "msg_struct.unpack" ], [ "", "channels.get" ], [ "", "ChannelNotFoundError" ], [ "", "seek" ], [ "", "read" ], [ "", "len" ], [ "", "schemas.get" ], [ "", "Message" ], [ "", "read" ], [ "", "len" ], [ "", "register_channel" ], [ "", "Channel.read" ], [ "", "read" ], [ "", "len" ], [ "", "Schema.read" ], [ "", "read" ], [ "", "len" ], [ "", "breakup_chunk" ], [ "", "Chunk.read" ], [ "", "isinstance" ], [ "", "channels.get" ], [ "", "ChannelNotFoundError" ], [ "", "schemas.get" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "register_channel" ], [ "", "seek" ], [ "", "get_summary" ], [ "", "stream.seek" ], [ "", "read_message_seeking_unchunked" ], [ "", "read_message_non_seeking" ], [ "", "summary.channels.values" ], [ "", "should_include" ], [ "", "summary.schemas.get" ], [ "", "chunk_fully_excluded" ], [ "", "stream.seek" ], [ "", "stream.read" ], [ "", "read_chunk_and_indexes" ], [ "", "yield_chunk_messages" ], [ "", "sorted" ], [ "", "chunk_fully_excluded" ], [ "", "in_time_range" ], [ "", "attrgetter" ], [ "", "attrgetter" ], [ "", "all" ], [ "", "itertools.pairwise" ], [ "", "all" ], [ "", "itertools.pairwise" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "prefetch_chunks" ], [ "", "iter_seek_chunks" ], [ "", "yield_chunk_messages" ], [ "", "lazy_yield" ], [ "", "itertools.chain.from_iterable" ], [ "", "lazy_yield" ], [ "", "heapq.merge" ], [ "", "read_inner" ], [ "", "SeekRequiredError" ], [ "", "set" ], [ "", "set" ], [ "", "in_time_range" ], [ "", "breakup_chunk" ], [ "", "bool" ], [ "", "breakup_chunk" ], [ "", "channel_ids.issubset" ], [ "", "filter_message_indices_by_time" ], [ "", "breakup_chunk_with_indexes" ], [ "", "stream_reader" ], [ "", "isinstance" ], [ "", "flush_pending_chunk" ], [ "", "pending_message_indexes.clear" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "pending_message_indexes.append" ], [ "", "flush_pending_chunk" ], [ "", "prefetch_chunks" ], [ "", "iter_stream_chunks" ], [ "", "flush_pending_chunk" ], [ "", "seen_channels.add" ], [ "", "should_include" ], [ "", "read_inner" ], [ "", "inner" ], [ "", "isinstance" ], [ "", "set" ], [ "", "isinstance" ], [ "", "cast" ], [ "", "stream.seekable" ], [ "", "read_message_seeking" ], [ "", "read_message_non_seeking" ], [ "", "isinstance" ], [ "", "cast" ], [ "", "Remapper" ], [ "", "remapper.remap_schema" ], [ "", "remapper.remap_channel" ], [ "", "remapper.remap_message" ], [ "", "heapq.merge" ], [ "", "remap_schema_channel" ], [ "", "read_message" ], [ "", "cast" ], [ "", "isinstance" ], [ "", "cast" ], [ "", "enumerate" ], [ "", "TypeError" ], [ "", "type" ], [ "", "dataclass" ], [ "", "self.decoder_function" ], [ "", "getattr" ], [ "", "channel_factories.append" ], [ "", "schema_factories.append" ], [ "", "factory.decoder_for" ], [ "", "factory.decoder_for" ], [ "", "decoders.get" ], [ "", "decoder" ], [ "", "resolve" ], [ "", "decoder" ], [ "", "ValueError" ], [ "", "read_message" ], [ "", "DecodedMessage" ], [ "", "Any" ], [ "", "Attachment" ], [ "", "AttachmentIndex" ], [ "", "CRCValidationError" ], [ "", "Callable" ], [ "", "Channel" ], [ "", "ChannelNotFoundError" ], [ "", "Chunk" ], [ "", "ChunkIndex" ], [ "", "DataEnd" ], [ "", "EndOfFileError" ], [ "", "Footer" ], [ "", "Future" ], [ "", "Header" ], [ "", "IO" ], [ "", "IllegalOpcodeInChunkError" ], [ "", "InvalidHeaderError" ], [ "", "InvalidMagicError" ], [ "", "Iterable" ], [ "", "LazyChunk" ], [ "", "Literal" ], [ "", "MAGIC" ], [ "", "MAGIC_SIZE" ], [ "", "McapRecord" ], [ "", "Message" ], [ "", "MessageIndex" ], [ "", "Metadata" ], [ "", "MetadataIndex" ], [ "", "OPCODE_AND_LEN_STRUCT" ], [ "", "OPCODE_TO_RECORD" ], [ "", "Opcode" ], [ "", "Protocol" ], [ "", "RecordLengthLimitExceededError" ], [ "", "Remapper" ], [ "", "Schema" ], [ "", "SchemaNotFoundError" ], [ "", "SeekRequiredError" ], [ "", "Statistics" ], [ "", "Summary" ], [ "", "SummaryOffset" ], [ "", "TYPE_CHECKING" ], [ "", "ThreadPoolExecutor" ], [ "", "UnsupportedCompressionError" ], [ "", "ZstdDecompressor" ], [ "", "attrgetter" ], [ "", "bisect" ], [ "", "cached_property" ], [ "", "cast" ], [ "", "collections.abc" ], [ "", "compression" ], [ "", "concurrent.futures" ], [ "", "dataclass" ], [ "", "dataclasses" ], [ "", "decompress" ], [ "", "functools" ], [ "", "heapq" ], [ "", "io" ], [ "", "itemgetter" ], [ "", "itertools" ], [ "", "lz4.frame" ], [ "", "operator" ], [ "", "overload" ], [ "", "small_mcap.exceptions" ], [ "", "small_mcap.records" ], [ "", "small_mcap.remapper" ], [ "", "sys" ], [ "", "threading" ], [ "", "typing" ], [ "", "zlib" ], [ "", "zstandard" ], [ "", "zstd" ] ], "mbr": [ "Attachment.read_record", "Channel.read", "Chunk.read", "LazyChunk.read_from_stream", "Message._STRUCT", "Message.read", "MessageIndex.read", "Metadata.read_record", "OPCODE_AND_LEN_STRUCT.unpack", "OPCODE_AND_LEN_STRUCT.unpack_from", "OPCODE_TO_RECORD.get", "Opcode.CHANNEL", "Opcode.CHUNK", "Opcode.DATA_END", "Opcode.FOOTER", "Opcode.MESSAGE", "Opcode.MESSAGE_INDEX", "Opcode.SCHEMA", "Schema.read", "_MESSAGE_STRUCT.size", "_channels.get", "_schemas.get", "_stdlib_zstd.decompress", "_zstd_tls.decompressor", "bisect.bisect_left", "channel.id", "channel.message_encoding", "channel.schema_id", "channel.topic", "channel_factories.append", "channel_ids.issubset", "channels.get", "chunk.compression", "chunk.data", "chunk.message_end_time", "chunk.message_start_time", "chunk.uncompressed_crc", "chunk.uncompressed_size", "chunk_index.message_index_offsets", "cidx.chunk_length", "cidx.chunk_start_offset", "cidx.message_end_time", "cidx.message_index_length", "cidx.message_start_time", "current.message_end_time", "current.message_start_time", "data_end.data_section_crc", "decoders.get", "decompressor.decompress", "exclude_channels.add", "exclude_channels.issuperset", "factory.decoder_for", "filtered_mi.timestamps", "footer.summary_start", "future.result", "heapq.merge", "idx.offsets", "index.chunk_length", "index.chunk_start_offset", "index.message_index_length", "index.offset", "io.IOBase", "io.SEEK_CUR", "io.SEEK_END", "io.SEEK_SET", "item.log_time", "item.message_end_time", "item.message_start_time", "itertools.chain", "itertools.chain.from_iterable", "itertools.pairwise", "message.data", "message_index.channel_id", "message_index.offsets", "message_index.timestamps", "message_indexes.append", "mi.channel_id", "msg_struct.unpack", "pending.append", "pending.pop", "pending_indexes.append", "pending_message_indexes.append", "pending_message_indexes.clear", "pool.submit", "prev.message_end_time", "prev.message_start_time", "record.channel_id", "record.id", "record.log_time", "record.schema_id", "record.summary_start", "record.timestamps", "record_cls.read", "remapper.remap_channel", "remapper.remap_message", "remapper.remap_schema", "schema.id", "schema_factories.append", "schemas.get", "seen_channels.add", "self.channel", "self.decoder_function", "self.message", "self.schema", "stream.read", "stream.seek", "stream.seekable", "stream.tell", "summary.attachment_indexes", "summary.attachment_indexes.append", "summary.channels", "summary.channels.values", "summary.chunk_indexes", "summary.chunk_indexes.append", "summary.metadata_indexes", "summary.metadata_indexes.append", "summary.schemas", "summary.schemas.get", "summary.statistics", "sys.maxsize", "threading.local", "type().__name__", "x.offsets", "x.timestamps", "zlib.crc32" ], "tgt": [ "Attachment.read_record", "CRCValidationError", "Channel.read", "ChannelNotFoundError", "Chunk", "Chunk.read", "DecodedMessage", "IllegalOpcodeInChunkError", "InvalidHeaderError", "InvalidMagicError", "LazyChunk.read_from_stream", "Message", "Message.read", "MessageIndex", "MessageIndex.read", "Metadata.read_record", "OPCODE_AND_LEN_STRUCT.unpack", "OPCODE_AND_LEN_STRUCT.unpack_from", "OPCODE_TO_RECORD.get", "RecordLengthLimitExceededError", "Remapper", "Schema.read", "SchemaNotFoundError", "SeekRequiredError", "Summary", "ThreadPoolExecutor", "TypeError", "UnsupportedCompressionError", "ValueError", "ZstdDecompressor", "_breakup_chunk_with_indexes", "_channels.get", "_chunk_fully_excluded", "_decompress_data_threadsafe", "_drain", "_filter_message_index_by_time", "_filter_message_indices_by_time", "_flush_pending_chunk", "_get_chunk_data_stream", "_iter_seek_chunks", "_iter_stream_chunks", "_lazy_yield", "_prefetch_chunks", "_read_chunk_and_indexes", "_read_inner", "_read_message_non_seeking", "_read_message_seeking", "_read_message_seeking_unchunked", "_read_summary_from_iterable", "_register_channel", "_resolve", "_schemas.get", "_stdlib_zstd.decompress", "_yield_chunk_messages", "_zstd_decompress", "all", "attrgetter", "bisect.bisect_left", "bool", "breakup_chunk", "cast", "cb", "channel_factories.append", "channel_ids.issubset", "channels.get", "dataclass", "decoder", "decoders.get", "decompressor.decompress", "enumerate", "exclude_channels.add", "exclude_channels.issuperset", "factory.decoder_for", "future.result", "get_summary", "getattr", "heapq.merge", "in_time_range", "inner", "isinstance", "itemgetter", "iter", "itertools.chain.from_iterable", "itertools.pairwise", "len", "list", "lz4_decompress", "max", "memoryview", "message_indexes.append", "msg_struct.unpack", "next", "pending.append", "pending.pop", "pending_indexes.append", "pending_message_indexes.append", "pending_message_indexes.clear", "pool.submit", "read", "read_message", "record_cls.read", "remap_schema_channel", "remapper.remap_channel", "remapper.remap_message", "remapper.remap_schema", "reversed", "schema_factories.append", "schemas.get", "seek", "seen_channels.add", "self.decoder_function", "set", "should_include", "sorted", "stream.read", "stream.seek", "stream.seekable", "stream.tell", "stream_reader", "summary.attachment_indexes.append", "summary.channels.values", "summary.chunk_indexes.append", "summary.metadata_indexes.append", "summary.schemas.get", "threading.local", "type", "zip", "zlib.crc32" ], "metrics": { "ast": { "op.add": 18.0, "op.bor": 48.0, "op.lor": 11.0, "op.mul": 1.0, "op.pow": 1.0, "op.sub": 6.0, "op.land": 24.0, "max_depth": 19.0, "bind_count": 141.0, "call_count": 280.0, "node_count": 9019.0, "member_count": 125.0, "op_density.add": 0.0, "op_density.bor": 0.01, "op_density.lor": 0.0, "op_density.mul": 0.0, "op_density.pow": 0.0, "op_density.sub": 0.0, "op_density.land": 0.0, "identifier_count": 355.0, "member_depth_max": 3.0, "infinite_loop_count": 2.0, "string_literal_count": 42.0, "array_literal_max_length": 4.0, "string_concat_chain_max_length": 4.0 }, "file": { "size": 46937.0, "entropy": 4.54, "size_bytes": 46937.0 }, "text": { "digit_ratio": 0.0, "space_count": 12080.0, "total_lines": 1315.0, "char_entropy": 4.54, "unique_chars": 87.0, "string_density": 0.03, "avg_line_length": 34.69, "high_byte_ratio": 0.0, "max_line_length": 100.0, "non_ascii_ratio": 0.0, "empty_line_ratio": 0.14, "last_line_length": 71.0, "whitespace_ratio": 0.29, "most_common_ratio": 0.09, "identifier_density": 1.71, "line_length_stddev": 25.2, "normalized_string_count": 1.16, "repeated_char_sequences": 353.0, "suspicious_string_ratio": 0.4, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 0.01, "max_inline_whitespace_run": 2.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 34.26 }, "binds": { "count": 141.0 }, "calls": { "count": 280.0 }, "binary": { "overall_entropy": 4.54, "peak_region_bytes": 28672.0, "peak_region_entropy": 4.84 }, "source": { "class_count": 4.0, "function_count": 42.0 }, "imports": { "count": 71.0, "stdlib_count": 11.0, "stdlib_ratio": 0.15, "unique_modules": 71.0, "aliased_imports": 2.0, "third_party_count": 60.0, "third_party_ratio": 0.85 }, "members": { "count": 125.0 }, "strings": { "total": 42.0, "avg_length": 158.86, "max_length": 1106.0, "avg_entropy": 3.76, "empty_count": 2.0, "sql_strings": 9.0, "total_bytes": 6672.0, "entropy_stddev": 0.77, "very_long_strings": 1.0, "shell_command_strings": 5.0, "embedded_code_candidates": 3.0 }, "comments": { "chars": 3691.0, "lines": 71.0, "total": 71.0, "to_code_ratio": 0.06, "base64_in_comments": 1.0 }, "functions": { "count": 46.0, "avg_params": 3.14, "max_params": 8.0, "length_stddev": 31.19, "over_100_lines": 4.0, "avg_name_length": 16.67, "no_params_count": 2.0, "avg_length_lines": 25.88, "max_length_lines": 125.0, "min_length_lines": 2.0, "nested_functions": 7.0, "avg_nesting_depth": 0.29, "many_params_count": 1.0, "max_nesting_depth": 1.0, "high_entropy_names": 12.0, "single_char_params": 8.0, "avg_param_name_length": 9.28, "density_per_100_lines": 3.73, "code_in_functions_ratio": 0.96 }, "identifiers": { "count": 355.0, "total": 2251.0, "avg_length": 10.35, "max_length": 31.0, "min_length": 1.0, "avg_entropy": 2.68, "reuse_ratio": 0.16, "unique_count": 355.0, "length_stddev": 5.94, "has_digit_ratio": 0.01, "sequential_names": 7.0, "single_char_count": 8.0, "single_char_ratio": 0.02, "high_entropy_count": 33.0, "high_entropy_ratio": 0.09, "all_lowercase_ratio": 0.77, "all_uppercase_ratio": 0.07, "numeric_suffix_count": 2.0, "keyboard_pattern_names": 1.0, "double_underscore_count": 1.0, "underscore_prefix_count": 49.0 } } }, "id": 5, "path": "small_mcap-0.12.0-py3-none-any.whl!!small_mcap/reader.py", "pid": 0, "risk": 1, "sha": "59824148bb030f8407142f3fead2d7e04c9d3d15165361fb91c739cf6ecb763a", "size": 46937, "traits": [ { "id": "micro-behaviors/data/control-flow/loop::python-while-true", "conf": 1.0, "crit": 2, "desc": "Python infinite while True loop", "spans": [ [ 11029, 11 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Source file has low overall entropy", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/file/extension/identity::py", "conf": 1.0, "crit": 2, "desc": "Python file extension", "spans": [ [ 0, 9 ] ] } ], "type": "python" }, { "id": 6, "sha": "e8ecb4c09bf3f8624ec8f7b700cbebf0850a4e8c214b13eb92a09a524cf4893c", "path": "small_mcap-0.12.0-py3-none-any.whl!!small_mcap/rebuild.py", "risk": 1, "size": 20205, "type": "python", "depth": 1 }, { "id": 7, "sha": "bb321de66faeebec52ba431cd20e067a4d69c5af0341e01dbb1c0f292daf83bd", "path": "small_mcap-0.12.0-py3-none-any.whl!!small_mcap/records.py", "risk": 1, "size": 42525, "type": "python", "depth": 1 }, { "id": 8, "sha": "ed165aacb34822a704d635efc9fde580ced4efe7ee95188fcae98519ee883bfb", "path": "small_mcap-0.12.0-py3-none-any.whl!!small_mcap/remapper.py", "risk": 1, "size": 8748, "type": "python", "depth": 1 }, { "id": 9, "sha": "78fcbfd03756a6fa03b30e1694b4e33896fc8be044b4d99e902dc9591c0979b0", "path": "small_mcap-0.12.0-py3-none-any.whl!!small_mcap/well_known.py", "risk": 1, "size": 612, "type": "python", "depth": 1 }, { "id": 10, "sha": "da109b13bb77ce4fd884b87c31f334e188bb6acad9f066d20cb94e6e7566dbbe", "path": "small_mcap-0.12.0-py3-none-any.whl!!small_mcap/writer.py", "risk": 1, "size": 38461, "type": "python", "depth": 1 }, { "id": 11, "sha": "b7981fee1dd40212a8adf600c25e6d8b8f03d8716efe475c9add1d42e101f4cb", "path": "small_mcap-0.12.0-py3-none-any.whl!!small_mcap-0.12.0.dist-info/METADATA", "risk": 1, "size": 9548, "type": "pkg_info", "depth": 1 }, { "id": 12, "mol": "Md", "sha": "79d104a82125926391ffb905f9e97097e702482efae7d85e24811e9295a7557c", "path": "small-mcap@0.12.0.registry.json", "risk": 1, "size": 821, "type": "registry", "depth": 1 } ], "omitted_files": 7, "v": "8" } }