{ "ml": { "v": "7", "eng": "2.2.0-rc.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.0014538467, "rte": "az", "prob": 0.0014538467 }, { "cls": 0, "raw": 0.017363966, "rte": "az/zip", "prob": 0.017363966 } ], "prob": 0.0036360621, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "conda" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "pkg_info" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "tar.zst" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000011920928955078125, "type": "python" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.00006360808765748516, "type": "python" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "python" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000012576580047607422, "type": "python" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000018248954802402295, "type": "python" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.000021576881408691406, "type": "python" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "text" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "json" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.000012358029380266089, "type": "pkg_info" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.000012218952178955078, "type": "python" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "python" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "python" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "python" }, { "id": 16, "lvl": -1, "conf": 0, "prob": 0.000013122956261213403, "type": "python" }, { "id": 17, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "python" }, { "id": 18, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "text" }, { "id": 19, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "tar.zst" }, { "id": 20, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "text" }, { "id": 21, "lvl": -1, "conf": 0, "prob": 0.000011752049431379419, "type": "json" }, { "id": 22, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "json" }, { "id": 23, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "text" }, { "id": 24, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "json" }, { "id": 25, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "json" }, { "id": 26, "lvl": -1, "conf": 0, "prob": 0.0036360621452331543, "type": "json" } ], "version": "v18.18", "analyzed_at": "2026-06-27T22:14:43Z" }, "path": "validatedata-0.6.5-pyhcf101f3_0.conda", "raw": { "fetched": [ { "cached": false, "locator": "pkg:pypi/fnmatch", "outcome": "unresolved", "fetched_at": 0, "source_offset": 710, "source_sha256": "3391848fdee6ea90051143cc9024efcbdc9d9e13250897f45155bad73c1bffbe" } ], "files": [ { "id": 0, "ctx": [ { "b": "p!H([eDt+J006xM*G.]4wIj2.%nSc0%nJJd6Az#YBywY*Byu!pB8L{%01YbK000000000u000000001Cb4CJ", "n": [ { "c": 2, "d": "Archive contains multiple nested APKs", "i": "metadata/package/files/mobile-package::archive-nested-apk-count", "o": 0, "z": 35, "cf": 0.8999999761581421 } ], "ln": 0 } ], "mol": "O₂(CEr)H(Po₂)", "sha": "ce05d329e9b15a5e6dc25b6e7cdc0fcd95c14e6a264d2534110553eb2ab8aedd", "path": "validatedata-0.6.5-pyhcf101f3_0.conda", "risk": 4, "size": 78038, "type": "conda", "facts": { "metrics": { "file": { "size": 78038.0, "entropy": 7.99, "size_bytes": 78038.0 }, "binary": { "overall_entropy": 7.99, "peak_region_bytes": 77824.0, "peak_region_entropy": 7.84 }, "archive": { "file_count": 3.0, "member_count": 3.0, "script_count": 0.0, "zip_bomb_ratio": 1.0, "directory_count": 0.0, "executable_count": 0.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 77468.0, "compression.ratio": 1.0, "hidden_file_count": 0.0, "total_uncompressed": 77468.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 44.0, "rtlo_filename_count": 0.0, "format.regular_count": 3.0, "nested_archive_count": 2.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "timing.mtime_unique_count": 1.0, "timing.mtime_unique_ratio": 0.33, "misplaced_executable_count": 0.0, "timing.mtime_dominant_count": 3.0, "timing.mtime_spread_seconds": 0.0, "timing.sentinel_mtime_count": 0.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 1.0, "compression.method_counts.stored": 3.0 } } }, "traits": [ { "id": "micro-behaviors/process/create/subprocess::python-exec-capability", "conf": 0.800000011920929, "crit": 3, "desc": "Python process execution capability", "from": [ { "file": 2 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-requires-dist", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares runtime dependencies", "from": [ { "file": 11 } ] }, { "id": "objectives/credential-access/theft/keywords::token", "conf": 0.30000001192092896, "crit": 1, "desc": "Credential-access vocabulary word: token", "from": [ { "file": 5 } ] }, { "id": "metadata/package/quality/ecosystem::pypi-runtime-metadata", "conf": 0.9399999976158142, "crit": 2, "desc": "PyPI package declares runtime metadata", "from": [ { "file": 2 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-requires-python", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares Python requirement", "from": [ { "file": 11 } ] }, { "id": "metadata/package/manifest/ecosystem::conda-index-subdir", "conf": 0.9200000166893005, "crit": 1, "desc": "Conda index target subdir" }, { "id": "metadata/package/quality/ecosystem::pypi-license-metadata", "conf": 0.9399999976158142, "crit": 2, "desc": "PyPI package declares license metadata", "from": [ { "file": 2 } ] }, { "id": "metadata/package/quality/ecosystem::pypi-basic-metadata", "conf": 0.949999988079071, "crit": 2, "desc": "PyPI package has basic metadata", "from": [ { "file": 2 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-name-field", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares package name", "from": [ { "file": 11 } ] }, { "id": "metadata/package/manifest/ecosystem::conda-index-noarch-python", "conf": 0.9200000166893005, "crit": 1, "desc": "Conda index noarch Python" }, { "id": "metadata/package/quality/ecosystem::pkginfo-core-metadata", "conf": 1.0, "crit": 1, "desc": "Python core metadata marker", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/process/interpreter/python::exec-builtin", "atk": "T1059.006", "mbc": "E1059", "conf": 0.8999999761581421, "crit": 3, "desc": "Python exec() built-in function", "from": [ { "file": 3 } ] }, { "id": "objectives/command-and-control/backdoor/dispatch/eval::config-string-execution-cond-1--inline-15152", "atk": "T1059.006", "conf": 0.8999999761581421, "crit": 3, "desc": "Regex component marker", "from": [ { "file": 4 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-summary-field", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares package summary", "from": [ { "file": 11 } ] }, { "id": "metadata/package/manifest/ecosystem::conda-about-summary", "conf": 0.9200000166893005, "crit": 1, "desc": "Conda about package summary" }, { "id": "metadata/package/quality/ecosystem::pkginfo-license-expression", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares license expression", "from": [ { "file": 11 } ] }, { "id": "metadata/package/manifest/ecosystem::conda-about-home", "conf": 0.9200000166893005, "crit": 1, "desc": "Conda about homepage URL" }, { "id": "objectives/impact/destroy/keywords::cleanup-verb--clean", "conf": 0.8799999952316284, "crit": 1, "desc": "Cleanup/action word: clean", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/python::dunder-import-call", "atk": "T1059.006", "mbc": "E1059", "conf": 0.8500000238418579, "crit": 3, "desc": "Python __import__ call", "from": [ { "file": 8 } ] }, { "id": "metadata/package/manifest/ecosystem::conda-index-build", "conf": 0.9200000166893005, "crit": 1, "desc": "Conda index build string" }, { "id": "metadata/package/manifest/ecosystem::conda-forge-feedstock-url", "conf": 0.9200000166893005, "crit": 1, "desc": "Conda-forge feedstock URL" }, { "id": "metadata/package/manifest/ecosystem::conda-forge-channel", "conf": 0.9200000166893005, "crit": 1, "desc": "Conda-forge channel URL" }, { "id": "metadata/package/quality/ecosystem::pkginfo-markdown-description", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares markdown description", "from": [ { "file": 11 } ] }, { "id": "objectives/evasion/security-bypass/tls::python-local-https-proxy-marker", "atk": "T1553", "conf": 0.8999999761581421, "crit": 3, "desc": "Python local HTTPS proxy marker", "from": [ { "file": 7 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares package version", "from": [ { "file": 11 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-license-file", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares license file", "from": [ { "file": 11 } ] } ] }, { "id": 1, "sha": "8e44ea2e8d7f97f1214d63e678a0a594e622249804759b52810f29d6bc6b10bd", "path": "validatedata-0.6.5-pyhcf101f3_0.conda!!metadata.json", "size": 30, "type": "pkg_info", "depth": 1 }, { "depth": 1, "facts": { "metrics": { "file": { "size": 69320.0, "entropy": 7.99, "size_bytes": 69320.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.99, "peak_region_bytes": 69320.0, "peak_region_entropy": 7.85 } } }, "id": 2, "mol": "O₂(CEr)H(Po₂)", "path": "validatedata-0.6.5-pyhcf101f3_0.conda!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst", "risk": 4, "sha": "d409906c52f00cdf31e1f3bd35742395c98e29830428f6166e1aface5a620c9e", "size": 69320, "traits": [ { "id": "metadata/package/quality/ecosystem::pypi-license-metadata", "conf": 0.9399999976158142, "crit": 2, "desc": "PyPI package declares license metadata", "from": [ { "file": 11 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-license-file", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares license file", "from": [ { "file": 11 } ] }, { "id": "metadata/package/quality/ecosystem::pypi-runtime-metadata", "conf": 0.9399999976158142, "crit": 2, "desc": "PyPI package declares runtime metadata", "from": [ { "file": 11 } ] }, { "id": "objectives/impact/destroy/keywords::cleanup-verb--clean", "conf": 0.8799999952316284, "crit": 1, "desc": "Cleanup/action word: clean", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/process/interpreter/python::dunder-import-call", "atk": "T1059.006", "mbc": "E1059", "conf": 0.8500000238418579, "crit": 3, "desc": "Python __import__ call", "from": [ { "file": 8 } ] }, { "id": "metadata/package/quality/ecosystem::pypi-basic-metadata", "conf": 0.949999988079071, "crit": 2, "desc": "PyPI package has basic metadata", "from": [ { "file": 11 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-requires-dist", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares runtime dependencies", "from": [ { "file": 11 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-requires-python", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares Python requirement", "from": [ { "file": 11 } ] }, { "id": "objectives/evasion/security-bypass/tls::python-local-https-proxy-marker", "atk": "T1553", "conf": 0.8999999761581421, "crit": 3, "desc": "Python local HTTPS proxy marker", "from": [ { "file": 7 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-core-metadata", "conf": 1.0, "crit": 1, "desc": "Python core metadata marker", "from": [ { "file": 11 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-license-expression", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares license expression", "from": [ { "file": 11 } ] }, { "id": "objectives/credential-access/theft/keywords::token", "conf": 0.30000001192092896, "crit": 1, "desc": "Credential-access vocabulary word: token", "from": [ { "file": 5 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares package version", "from": [ { "file": 11 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-markdown-description", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares markdown description", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/process/create/subprocess::python-exec-capability", "conf": 0.800000011920929, "crit": 3, "desc": "Python process execution capability", "from": [ { "file": 3 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-summary-field", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares package summary", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/process/interpreter/python::exec-builtin", "atk": "T1059.006", "mbc": "E1059", "conf": 0.8999999761581421, "crit": 3, "desc": "Python exec() built-in function", "from": [ { "file": 3 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-name-field", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares package name", "from": [ { "file": 11 } ] }, { "id": "objectives/command-and-control/backdoor/dispatch/eval::config-string-execution-cond-1--inline-15152", "atk": "T1059.006", "conf": 0.8999999761581421, "crit": 3, "desc": "Regex component marker", "from": [ { "file": 4 } ] } ], "type": "tar.zst" }, { "ctx": [ { "b": "boRery?WA*By!#\u003eByu?mvrlKcz!9A}e]V7", "n": [ { "c": 2, "d": "Python file extension", "i": "metadata/file/extension/identity::py", "o": 0, "z": 12, "cf": 1.0 } ], "ln": 1, "addr": 0 }, { "b": "a%Fi", "ln": 2, "addr": 28 }, { "b": "mQZvWo(BMNy-}./LPTHFv@bN]vrujbwGVe8y?WA*BzkVhaz(4cwO=AgvS=y3BrCHtaA?gfx\u003egT]wN]j\u003evjcasv@Dj6x(4u\u003eay/tgwI9", "ln": 3, "addr": 32 }, { "b": "eIeLaeIeLaeIeLa", "ln": 6, "addr": 129 }, { "b": "dJ?h?B95Kzvruf9B-Rbnay/tbAa%c1wg??DayYncy-)j@y\u00260J?y?mVg\u0026^^moDs.bnaA8BmA+G2)wft/daA?gfx\u003eet%vrt{g", "ln": 7, "addr": 142 }, { "b": "dJ?f2A=k$vAa9\u003c4aAzyyBy/IowQ4Z3B-RnuwO=SmBzbYkB.twgwnbE+zF%Pce[wW8xkRTewGUP6AV/ypv}WzoAb]J1z/6DoBy!#l", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 277, "z": 3, "cf": 0.800000011920929 } ], "ln": 8, "addr": 219 }, { "b": "arUuuzddrlA+eV\u0026vpB4:az\u003eXhB75Y)B1OOCx\u003c\u003eT(z/YFjz*c8uaARpdazb+jy-)qfA=k$vy?WG)v%IN2wJy@QA:-\u003cbw]zZbec", "ln": 9, "addr": 300 }, { "b": "arUMAy\u00260J?y?j-0xK$W?efF[yAXg^tzGx]uvqfR3azb4@y\u0026%=faz\u003eXhB75Y)B0a[ewftx8B98tquU%\u003c%e=", "ln": 10, "addr": 378 }, { "b": "arR^HarR^HarR^HarR^HzGx2]b41\u003e[DUE2nEiI@tjS[oDw)]*#ByeV(BAz8m", "ln": 122, "addr": 4749 }, { "b": "arR^HarR^HarR^HarR^Hy?W=#B1Q)uAaJ]$c$TUCarR!GA^oX*uV{^gwo-IBjS[ozBywxXw{Xl5CZS\u003cwdf", "ln": 123, "addr": 4798 }, { "b": "arR^HarR^HarR^HarR^Hy?W=#B1Q)uAaJ]$c$TUCarR!rCW\u003er7BrBj/C%#:]z/N(.df", "n": [ { "c": 2, "d": "except keyword (Python)", "i": "metadata/package/error-handling::except-keyword", "o": 4899, "z": 6, "cf": 0.5 } ], "ln": 124, "addr": 4864 }, { "b": "arR^HarR^HarR^HarR^Hy?W=#B1Q)uAaJ]$c$TUCarR^HarR!lC6^}lCZQX$aywU(DUE2nEjcJ*df", "ln": 125, "addr": 4918 }, { "b": "arR^HarR^HarR^HarR^Hx\u003ewG9B.\u003e(5vR/Qp", "ln": 126, "addr": 4980 }, { "b": "arR^HBAhT/", "ln": 167, "addr": 6935 }, { "b": "arR^HarR^Hv@C)?auZ?\u003etY7-ryhW*7c#rQnwPGp", "ln": 168, "addr": 6944 }, { "b": "arR^HarR^HwQ4=@c$vgjAa%c1c$vgawH[%ob0oECB97=0z/fSrA=\u003e(luWDp0B1Q*bzEEx[uTFjBa$K\u0026XwQ4=@a$k5=zGvlHar@1Dz/GhDax70Gg5", "n": [ { "c": 4, "d": "Dynamic execution primitive", "i": "objectives/anti-static/obfuscation/eval/scripting::conditional-exec-primitive", "o": 6984, "z": 13, "cf": 0.8500000238418579 }, { "c": 2, "d": "References container, K8s, or cloud metadata", "i": "well-known/malware/miner/kinsing::container-or-cloud-marker", "o": 7039, "z": 6, "cf": 1.0 } ], "ln": 169, "addr": 6976 }, { "b": "arR^HarR^HA+funA=91qB6x?}w)]+5uT[1(B98CBv@#6/z/6Dcy?mc3t(", "ln": 170, "addr": 7066 }, { "b": "arR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiS", "n": [ { "c": 2, "d": "Error handling keywords", "i": "micro-behaviors/crypto/symmetric/fernet::error-handling-keywords", "o": 7116, "z": 16, "cf": 1.0 } ], "ln": 171, "addr": 7112 }, { "b": "arR^HarR^HboP(}B98Cpv@#o)az2Clx(XcfzdNQbaA8oywQ4=@azb4@y\u0026%=faMv{oazb4#y-)g}v@0iezY\u003cdnwGUR%zE)\u003c5v\u003c2Paz/vr", "ln": 172, "addr": 7134 }, { "b": "arR^HarR^HwmYu}uUi..y*{*.yBA.4ByviMwnbK}diHiaar\u003co-B97b{wmYN3iS", "ln": 173, "addr": 7218 }, { "b": "arR^HarR^HA+funA=910A=\u003e}Aax@a", "ln": 322, "addr": 13138 }, { "b": "arR^Hx\u003ewFiw)]y\u0026B-I5ma%pPqay]g{xf3", "ln": 323, "addr": 13162 }, { "b": "arR^HarR^HA+funA=90?vqH0@efFeetoW]}B8$=5wG\u003ez5w]zYjw/$/9ay]g{xiMM(vqfL2A+fqou0N", "n": [ { "c": 2, "d": "Iteration or loop pattern", "i": "micro-behaviors/data/control-flow/analysis::iteration-loop-pattern", "o": 13224, "z": 10, "cf": 0.5 } ], "ln": 324, "addr": 13189 }, { "b": "arR^HA+funA=90?vqH0@efFecx\u003c\u003eTbxjVfkb5H[jB75Y)a$K\u0026XC42i3wmoN]z/cXfvqfK?wfJEd", "n": [ { "c": 1, "d": "Extracts payload from JSON message field", "i": "objectives/command-and-control/dropper/delivery/fetch-eval::json-message-field", "o": 13275, "z": 14, "cf": 0.8999999761581421 } ], "ln": 325, "addr": 13252 }, { "b": "", "ln": 326, "addr": 13313 }, { "b": "", "ln": 327, "addr": 13314 }, { "b": "", "ln": 380, "addr": 14998 }, { "b": "arR^HmQZvWaAg+hxGvnRB.\u003eR@z^)DlA=(hfazC)tvixSkAV\u003cv@K%1azvrlJyuUr}(uT[1\u003eAa%c1wm6w1y?j.qoJ1\u003ekv{@\u003eXwN)kx", "ln": 381, "addr": 14999 }, { "b": "arR^HmQZaHvQS+ZiV}{Jze:i9wHF#IBzbl6aA}\u003cmA3e\u003ejayMymA+PYhvqE6cBAhIlBrCWsvrrS9z!@%9ayPvmy?m3@Bn", "n": [ { "c": 1, "d": "compile keyword", "i": "objectives/anti-static/obfuscation/payload/bytecode::compile-word", "o": 15094, "z": 7, "cf": 1.0 } ], "ln": 382, "addr": 15080 }, { "b": "arR^HBzbkdw)]+5uV]\u003c]x\u003egT]z/M$ezE:(cB.\u003e(5vR/P#w]7)*aAIDzBzbkduTEI+x()Y?az+$mA3fjzvr(]pB-7]9z/PXE", "ln": 383, "addr": 15154 }, { "b": "arR^Ha%Fi", "ln": 384, "addr": 15231 }, { "b": "", "ln": 577, "addr": 22914 }, { "b": "v@bN{B09}XB97b{wmYN9zdN/$v@bN{B3i(1vrlJ+z!9A}o\u003ewAPdlm", "ln": 578, "addr": 22915 }, { "b": "arR^Ha%Fi", "n": [ { "c": 2, "d": "Script overall entropy stays low", "i": "metadata/file/metrics::low-overall-entropy-source", "o": 22965, "z": 29, "cf": 0.8999999761581421 } ], "ln": 579, "addr": 22958 }, { "b": "arR^Hl$G\u003eAvrb^#x)a5gC42i3wmoN]z/cXmz!9A}e=", "ln": 580, "addr": 22966 }, { "b": "", "ln": 581, "addr": 23000 }, { "b": "", "ln": 855, "addr": 32695 }, { "b": "arR^HarR^HarR^HboP%aB-RUowftz\u003eByurKFrRf]zY\u003cjiy?WA*BzkVhaA8BmA+G2)wb", "ln": 856, "addr": 32696 }, { "b": "arR^HarR^HarR^HB-RbmauZ\u0026EB7GwAw].*buU0\u003eXBsqFWzEEx[b03?\u003cl2pmBwG\u0026VFb4k1)A+frkb03\u0026[b6d\u003cDwO2%ciV]R3gby4EvqfQ4q/\u003cimar\u003erfBA]5\u003ear\u003c:6A+PA7w[+*)wfMCIdf", "n": [ { "c": 3, "d": "Geolocation response field markers", "i": "objectives/discovery/host/geo::geo-response-field", "o": 32839, "z": 7, "cf": 0.5 } ], "ln": 857, "addr": 32750 }, { "b": "", "ln": 858, "addr": 32864 }, { "b": "arR^HarR^HarR^HboPD#y?$kqvqGT*vruj4zxN}?LPU0Px(^\u003cbaxz]!x\u003egT]x(v(TA=M8saA8cuvQS^\u0026wmoN*", "ln": 859, "addr": 32865 }, { "b": "arR^HarR^HarR^HarR^Hb5RKty**^?wG\u003ceTv@cisuTEqYze:i9wN]dWx\u003eq9\u003eB6\u0026oUw]q3]wNc{aB.\u003e(5vR/Qb", "ln": 1001, "addr": 38455 }, { "b": "arR^HarR^HarR^HEe", "ln": 1002, "addr": 38524 }, { "b": "arR^HarR^HA+funA=91Db5ImewO-LKay/kee)?$6vqPN.uO0rzw[+*)woe}Qazbt0y?dQn", "n": [ { "c": 2, "d": "python code embedded in string", "i": "metadata/lang/embedded::python", "o": 45930, "z": 858, "cf": 1.0 } ], "ln": 1003, "addr": 38538 } ], "depth": 2, "facts": { "imp": [ [ "", "object.__new__" ], [ "", "data.get" ], [ "", "default_getter" ], [ "", "isinstance" ], [ "", "nested_cls.__fast_construct__" ], [ "", "tf" ], [ "", "sa" ], [ "", "enumerate" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "\"\\n\".join" ], [ "", "exec" ], [ "", "compile" ], [ "", "fast_construct" ], [ "", "isinstance" ], [ "", "object.__new__" ], [ "", "data.get" ], [ "", "default_getter" ], [ "", "isinstance" ], [ "", "nested_cls.__fast_vc__" ], [ "", "sa" ], [ "", "cr.fast_validator" ], [ "", "cr.transform" ], [ "", "sa" ], [ "", "enumerate" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "\"\\n\".join" ], [ "", "exec" ], [ "", "compile" ], [ "", "fused_vc_loop" ], [ "", "diag.get" ], [ "", "diag.get" ], [ "", "getattr" ], [ "", "diagnose.diagnose" ], [ "", "diagnose_to_field_messages" ], [ "", "getattr" ], [ "", "cr.transform" ], [ "", "fast._CompiledRule" ], [ "", "isinstance" ], [ "", "fast._get_compiled_rule" ], [ "", "getattr" ], [ "", "rule_obj.compile" ], [ "", "make_trivial_compiled_rule" ], [ "", "isinstance" ], [ "", "getattr" ], [ "", "rule_obj._resolve_rule_string" ], [ "", "getattr" ], [ "", "getattr" ], [ "", "getattr" ], [ "", "rule_obj._resolve_rule_string" ], [ "", "getattr" ], [ "", "fast._CompiledRule" ], [ "", "super().__new__" ], [ "", "super" ], [ "", "dict" ], [ "", "reversed" ], [ "", "annotations.update" ], [ "", "getattr" ], [ "", "annotations.update" ], [ "", "namespace.get" ], [ "", "annotations.items" ], [ "", "isinstance" ], [ "", "v.startswith" ], [ "", "hasattr" ], [ "", "field_annotations.items" ], [ "", "namespace.get" ], [ "", "get_origin" ], [ "", "get_args" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "Rule" ], [ "", "Rule" ], [ "", "get_origin" ], [ "", "compiled_rule_for" ], [ "", "get_type_hints" ], [ "", "dict" ], [ "", "cls.__resolved_hints__.items" ], [ "", "isinstance" ], [ "", "issubclass" ], [ "", "tuple" ], [ "", "cls.__nested_model_fields__.get" ], [ "", "cls.__field_rules__.items" ], [ "", "getattr" ], [ "", "rule_obj.kwargs.copy" ], [ "", "kwargs_copy.pop" ], [ "", "str" ], [ "", "kwargs_copy.items" ], [ "", "parts.append" ], [ "", "parts.append" ], [ "", "\"|\".join" ], [ "", "rule_str.split" ], [ "", "build_rule_dict" ], [ "", "validator" ], [ "", "print" ], [ "", "build_fast_construct" ], [ "", "fast_construct" ], [ "", "build_fused_validate_construct" ], [ "", "c.__fast_validator__" ], [ "", "c.__fast_construct__" ], [ "", "errors.setdefault(field, []).extend" ], [ "", "errors.setdefault" ], [ "", "cls.__field_rules__[fname].get_default" ], [ "", "data.items" ], [ "", "add_error" ], [ "", "object.__setattr__" ], [ "", "cr.fast_validator" ], [ "", "cr.transform" ], [ "", "object.__setattr__" ], [ "", "diagnose_to_errors" ], [ "", "add_error" ], [ "", "object.__setattr__" ], [ "", "hasattr" ], [ "", "callable" ], [ "", "self.model_check" ], [ "", "getattr" ], [ "", "isinstance" ], [ "", "result.items" ], [ "", "object.__setattr__" ], [ "", "exc.errors.items" ], [ "", "add_error" ], [ "", "add_error" ], [ "", "str" ], [ "", "add_error" ], [ "", "ValidationError" ], [ "", "getattr" ], [ "", "getattr" ], [ "", "validator" ], [ "", "getattr" ], [ "", "getattr" ], [ "", "cr.transform" ], [ "", "get_callable_and_value" ], [ "", "bool" ], [ "", "fn" ], [ "", "getattr" ], [ "", "getattr" ], [ "", "cr.transform" ], [ "", "get_callable_and_value" ], [ "", "fn" ], [ "", "cls.__fast_validator__" ], [ "", "data.items" ], [ "", "getattr" ], [ "", "cr.transform" ], [ "", "getattr" ], [ "", "getattr" ], [ "", "validator" ], [ "", "fn" ], [ "", "self.__dict__.copy" ], [ "", "getattr" ], [ "", "isinstance" ], [ "", "value.to_dict" ], [ "", "nested_fields[k].from_dict" ], [ "", "isinstance" ], [ "", "data.items" ], [ "", "cls" ], [ "", "cls.__fast_vc__" ], [ "", "cls.__fast_validator__" ], [ "", "cls.__fast_construct__" ], [ "", "object.__new__" ], [ "", "data_get" ], [ "", "default_getter" ], [ "", "isinstance" ], [ "", "nested_cls.from_dict" ], [ "", "self.to_dict" ], [ "", "base.update" ], [ "", "self.__class__" ], [ "", "getattr" ], [ "", "parts.append" ], [ "", "', '.join" ], [ "", "type" ], [ "", "type" ], [ "", "self.to_dict" ], [ "", "other.to_dict" ], [ "", "data.items" ], [ "", "errors.setdefault(fname, []).append" ], [ "", "errors.setdefault" ], [ "", "cr.fast_validator" ], [ "", "diagnose_to_errors" ], [ "", "errors.setdefault(fname, []).extend" ], [ "", "errors.setdefault" ], [ "", "len" ], [ "", "cls.__field_rules__.items" ], [ "", "rule_obj._resolve_rule_string" ], [ "", ".compiled" ], [ "", ".compiled.validator" ], [ "", ".diagnose" ], [ "", ".engine" ], [ "", ".engine.ValidationError" ], [ "", ".fast" ], [ "", ".rule" ], [ "", ".rule.Rule" ], [ "", ".rule._MISSING" ], [ "", "Annotated" ], [ "", "Any" ], [ "", "Callable" ], [ "", "ClassVar" ], [ "", "Dict" ], [ "", "List" ], [ "", "Mapping" ], [ "", "Optional" ], [ "", "Tuple" ], [ "", "Type" ], [ "", "get_args" ], [ "", "get_origin" ], [ "", "get_type_hints" ], [ "", "sys" ], [ "", "typing" ], [ "", "typing_extensions" ] ], "mbr": [ "_c.__fast_construct__", "_c.__fast_validator__", "_diagnose.diagnose", "_fast._CompiledRule", "_fast._get_compiled_rule", "annotations.items", "annotations.update", "base.update", "cls.__compiled_fields__", "cls.__fast_construct__", "cls.__fast_validator__", "cls.__fast_vc__", "cls.__field_meta__", "cls.__field_rules__", "cls.__field_rules__.items", "cls.__name__", "cls.__nested_model_fields__", "cls.__nested_model_fields__.get", "cls.__resolved_hints__", "cls.__resolved_hints__.items", "cls.__rule_dict__", "cls.__validated_fields__", "compiled_struct.rule_str", "cr.fast_validator", "cr.nullable", "cr.rule_str", "cr.transform", "data.get", "data.items", "diag.failures", "diag.get", "errors.setdefault", "errors.setdefault().append", "errors.setdefault().extend", "exc.errors", "exc.errors.items", "f.message", "field_annotations.items", "instance.__dict__", "kwargs_copy.items", "kwargs_copy.pop", "lines.append", "namespace.get", "nested_cls.__fast_construct__", "nested_cls.__fast_vc__", "nested_cls.__rule_dict__", "nested_cls.from_dict", "ns._fast_construct_compiled", "ns._vc", "object.__new__", "object.__setattr__", "origin.__name__", "other.to_dict", "parts.append", "result.items", "rule_obj._resolve_rule_string", "rule_obj.compile", "rule_obj.default", "rule_obj.has_default", "rule_obj.init_new", "rule_obj.kwargs", "rule_obj.kwargs.copy", "rule_obj.kwargs.type", "rule_obj.nullable", "rule_obj.rule", "rule_str.split", "self.__class__", "self.__class__.__name__", "self.__class__.__validated_fields__", "self.__dict__", "self.__dict__.copy", "self.model_check", "self.to_dict", "super().__new__", "sys.version_info", "v.__origin__", "v.startswith", "value.to_dict" ], "tgt": [ "Rule", "ValidationError", "_add_error", "_build_fast_construct", "_build_fused_validate_construct", "_build_rule_dict", "_c.__fast_construct__", "_c.__fast_validator__", "_compiled_rule_for", "_diagnose.diagnose", "_diagnose_to_errors", "_diagnose_to_field_messages", "_fast._CompiledRule", "_fast._get_compiled_rule", "_fast_construct", "_fused_vc_loop", "_get_callable_and_value", "_make_trivial_compiled_rule", "annotations.items", "annotations.update", "base.update", "bool", "callable", "cls", "cls.__fast_construct__", "cls.__fast_validator__", "cls.__fast_vc__", "cls.__field_rules__.items", "cls.__nested_model_fields__.get", "cls.__resolved_hints__.items", "compile", "cr.fast_validator", "cr.transform", "data.get", "data.items", "data_get", "default_getter", "diag.get", "dict", "enumerate", "errors.setdefault", "errors.setdefault().append", "errors.setdefault().extend", "exc.errors.items", "exec", "field_annotations.items", "fn", "get_args", "get_origin", "get_type_hints", "getattr", "hasattr", "isinstance", "issubclass", "kwargs_copy.items", "kwargs_copy.pop", "len", "lines.append", "namespace.get", "nested_cls.__fast_construct__", "nested_cls.__fast_vc__", "nested_cls.from_dict", "object.__new__", "object.__setattr__", "other.to_dict", "parts.append", "print", "result.items", "reversed", "rule_obj._resolve_rule_string", "rule_obj.compile", "rule_obj.kwargs.copy", "rule_str.split", "sa", "self.__class__", "self.__dict__.copy", "self.model_check", "self.to_dict", "str", "super", "super().__new__", "tf", "tuple", "type", "v.startswith", "validator", "value.to_dict" ], "metrics": { "ast": { "op.add": 1.0, "op.bor": 2.0, "op.lor": 9.0, "op.land": 22.0, "max_depth": 24.0, "bind_count": 145.0, "call_count": 228.0, "node_count": 7412.0, "member_count": 78.0, "op_density.add": 0.0, "op_density.bor": 0.0, "op_density.lor": 0.0, "op_density.land": 0.0, "identifier_count": 200.0, "member_depth_max": 3.0, "string_literal_count": 164.0, "array_literal_max_length": 8.0, "numeric_array_max_length": 2.0, "string_concat_chain_max_length": 2.0 }, "file": { "size": 38594.0, "entropy": 4.38, "size_bytes": 38594.0 }, "text": { "digit_ratio": 0.0, "space_count": 11745.0, "total_lines": 1003.0, "char_entropy": 4.38, "unique_chars": 94.0, "string_density": 0.16, "ascii_art_lines": 21.0, "avg_line_length": 37.48, "high_byte_ratio": 0.0, "invisible_chars": 1.0, "max_line_length": 126.0, "non_ascii_ratio": 0.0, "empty_line_ratio": 0.16, "last_line_length": 56.0, "whitespace_ratio": 0.33, "most_common_ratio": 0.06, "identifier_density": 1.58, "line_length_stddev": 25.93, "normalized_string_count": 5.18, "repeated_char_sequences": 466.0, "suspicious_string_ratio": 0.09, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 0.02, "max_inline_whitespace_run": 12.0, "trailing_whitespace_lines": 24.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 20.06 }, "binds": { "count": 145.0 }, "calls": { "count": 228.0 }, "binary": { "overall_entropy": 4.38, "peak_region_bytes": 15360.0, "peak_region_entropy": 4.69 }, "source": { "class_count": 2.0, "function_count": 24.0 }, "imports": { "count": 26.0, "stdlib_count": 2.0, "stdlib_ratio": 0.08, "relative_ratio": 0.38, "unique_modules": 26.0, "aliased_imports": 2.0, "relative_imports": 10.0, "third_party_count": 24.0, "third_party_ratio": 0.92 }, "members": { "count": 78.0 }, "strings": { "total": 164.0, "avg_length": 62.6, "max_length": 2278.0, "avg_entropy": 3.04, "email_count": 1.0, "sql_strings": 4.0, "total_bytes": 10267.0, "entropy_stddev": 0.86, "very_long_strings": 3.0, "shell_command_strings": 3.0, "embedded_code_candidates": 8.0 }, "comments": { "chars": 4110.0, "lines": 81.0, "total": 81.0, "to_code_ratio": 0.09, "high_entropy_comments": 2.0 }, "functions": { "count": 26.0, "avg_params": 1.96, "max_params": 5.0, "length_stddev": 35.58, "over_100_lines": 2.0, "avg_name_length": 13.46, "no_params_count": 1.0, "avg_length_lines": 36.79, "max_length_lines": 132.0, "min_length_lines": 2.0, "nested_functions": 4.0, "avg_nesting_depth": 0.21, "max_nesting_depth": 1.0, "high_entropy_names": 3.0, "single_char_params": 2.0, "avg_param_name_length": 4.94, "density_per_100_lines": 2.39, "code_in_functions_ratio": 0.88 }, "identifiers": { "count": 200.0, "total": 1581.0, "avg_length": 8.66, "max_length": 31.0, "min_length": 1.0, "avg_entropy": 2.43, "reuse_ratio": 0.13, "unique_count": 200.0, "length_stddev": 5.47, "sequential_names": 5.0, "single_char_count": 6.0, "single_char_ratio": 0.03, "high_entropy_count": 9.0, "high_entropy_ratio": 0.05, "all_lowercase_ratio": 0.9, "all_uppercase_ratio": 0.02, "double_underscore_count": 19.0, "underscore_prefix_count": 43.0 } } }, "id": 3, "mol": "H(Po₂)", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata/fastmodel.py", "risk": 2, "sha": "36710983223409a09c3b46fe61909e5fefa72fd05ebef54a3b305d1eb072a33b", "size": 38594, "traits": [ { "id": "micro-behaviors/process/interpreter/python::exec-builtin", "atk": "T1059.006", "mbc": "E1059", "conf": 0.8999999761581421, "crit": 3, "desc": "Python exec() built-in function", "spans": [ [ 6984, 4 ] ] }, { "id": "micro-behaviors/process/create/subprocess::python-exec-capability", "conf": 0.800000011920929, "crit": 3, "desc": "Python process execution capability", "spans": [ [ 6984, 4 ] ] } ], "type": "python" }, { "ctx": [ { "b": "w].*baywF/B-.+DwNw^!x(d*cA=-BjzF\u003cxmvruj4zGt", "n": [ { "c": 3, "d": "Regex component marker", "i": "objectives/command-and-control/backdoor/dispatch/eval::config-string-execution-cond-1--inline-15152", "o": 0, "z": 23, "cf": 0.8999999761581421 } ], "ln": 1, "addr": 0 }, { "b": "", "ln": 2, "addr": 35 }, { "b": "x(d*cA=-BrAa9o/A+frk", "ln": 3, "addr": 36 }, { "b": "boPo)xlw65zGEEtx(mD}zF789wO=r%AS", "ln": 48, "addr": 932 }, { "b": "bl", "ln": 49, "addr": 958 }, { "b": "boPo*y-)!evqGv)aA?gfx\u003egT]z/M$jB-7Yhx(v)gaAR4cwGSyAvqH6$efFwwxdkCQra]?=w)]+5aAg+hxDRnmwI4w9zE^!", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 1012, "z": 3, "cf": 0.800000011920929 } ], "ln": 50, "addr": 960 }, { "b": "boQAnxcpS8ay/tbAa%c1aARsmwIb9bwGVbpwGUz7v@c78B-I4oA::66wPw]nxKL^3w{503Bz(8lB1RAuA==27y-)!qaARpd", "ln": 51, "addr": 1036 }, { "b": "boQDfzE^E0xcp]faz2!py?Wx[BrC1fwftr7z!S:6ayPekayPa@x\u003eIN5BA]0qvScyhaAhmux([6czEEu7C5[^wwQeGrA+2", "ln": 52, "addr": 1113 }, { "b": "arR^HBAhT/", "ln": 280, "addr": 11051 }, { "b": "arR^HarR^HA+funA=91lB7]JkByx5%wHIIaA=U/0wmoN\u003ed0v3\u003caywV3df", "ln": 281, "addr": 11060 }, { "b": "arR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiS", "n": [ { "c": 2, "d": "Error handling keywords", "i": "micro-behaviors/crypto/symmetric/fernet::error-handling-keywords", "o": 11110, "z": 16, "cf": 1.0 } ], "ln": 282, "addr": 11106 }, { "b": "arR^HarR^HA+funA=90?vqH0@", "ln": 283, "addr": 11128 }, { "b": "", "ln": 284, "addr": 11149 }, { "b": "boP()BzkVhvqGHoazC[hzGx]dzEWlarc0a)efFUABswtDB0aC5B.8XfzxI=3BzbPge*9D4aARpdaARKvaz+RjwO-GiB7Gxk", "ln": 358, "addr": 14113 }, { "b": "boQGmzGG]qy-)}nvrrSlxK#DiAa9*ej0nlPB7]e@ayMy5z/fV9x(mH5aARpdC{3TozyoJUaz++kBx-D%Bx{2kx([1", "ln": 359, "addr": 14190 }, { "b": "boQhBefE]jB.99DgHhbAx(4u#BzMjBAa9*ex(mMaCw?Ruwftt)ayMy8z/o-gB-5/Ow]8x]BrCpsay/k0vqWjEFrQ", "n": [ { "c": 1, "d": "Cleanup/action word: clean", "i": "objectives/impact/destroy/keywords::cleanup-verb--clean", "o": 14323, "z": 5, "cf": 0.8799999952316284 } ], "ln": 360, "addr": 14262 }, { "b": "boQYwx(n0lvqYN^c@+kfwH[%oy\u0026r:7diJtCavY^QB7DGNFrRf$zY\u0026$oy\u003cvdqzGE1swO2y[aARpdazk?9A+3^", "ln": 361, "addr": 14333 }, { "b": "uRai=o\u003cZ\u003e5p^[.Unjt)siV}%Ev@${@BAe]PlT:!EvpB4:tu:yhD0I%zvScg3u0ONoaBs", "ln": 362, "addr": 14401 }, { "b": "arR^HarR^HarR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiS", "ln": 446, "addr": 18122 }, { "b": "arR^HarR^HarR^HarR^HarR^HA+funA=90?vqH0@", "ln": 447, "addr": 18156 }, { "b": "arR^HarR^HarR^HwQ4Y@Ac9i]ze:AlBvyj\u003cz/N(", "n": [ { "c": 2, "d": "ImportError exception", "i": "micro-behaviors/data/control-flow/error-handling::importerror-keyword", "o": 18208, "z": 11, "cf": 0.6000000238418579 } ], "ln": 448, "addr": 18189 }, { "b": "arR^HarR^HarR^HarR^HA:-W6wGTMYAbP=smriA!AWQ", "ln": 449, "addr": 18221 }, { "b": "arR^HarR^HarR^HarR^HarR^Hw*g5+z/fbew]zZbvrrRtDTyb(zfggNaAz4kB.L(cB0bNrwGU@9z/fc7B.$P0A=SvxvpK7YxjSXra]", "ln": 450, "addr": 18256 }, { "b": "arR^HarR^HarR^HarR^HarR^Hb1VV[Byx04azC{uCwhejiV@xQA3e\u003ejB97\u0026by-)Xgz/fc7B.$P0A=SA", "n": [ { "c": 3, "d": "Python package installation via pip", "i": "micro-behaviors/os/package-manager/install::pip-installation", "o": 18376, "z": 11, "cf": 0.800000011920929 } ], "ln": 451, "addr": 18338 }, { "b": "arR^HarR^HarR^HarR^Hdf", "ln": 452, "addr": 18402 }, { "b": "arR^HarR^HA+funA=91bAa\u003cfcwNw}XwN/G", "ln": 453, "addr": 18420 }, { "b": "boO9KvqG:izEET3C4AYSarR^HarUxtx(n0lvqYN^c$$jPc%}6JefFqwgasT{arYV]LPU3YzF9=%avvnYvqG:5AaK5jx(){6", "ln": 474, "addr": 19167 }, { "b": "boO9KB7]J8y?j-bz/ddAvrujbwJy@vx\u003e5M9diG-QarR^HarR^HarR^HarR^HarYV]LPT\u003cZayPekc[coSC4CYcwNP9", "ln": 475, "addr": 19244 }, { "b": "boO9Kze1lawg}!xy\u0026\u003cwLarR^HarU9gC{)3fc$$aMw]zYjuT\u003ei)zxJp@B15jOarYV]LPTQIzE)\u0026%y-)s#y\u00260M?v}#", "n": [ { "c": 2, "d": "Iteration or loop pattern", "i": "micro-behaviors/data/control-flow/analysis::iteration-loop-pattern", "o": 19347, "z": 11, "cf": 0.5 } ], "ln": 476, "addr": 19316 }, { "b": "bl", "ln": 477, "addr": 19387 }, { "b": "boPN1wO\u0026MiD2NtoayP8gvr(]pB-RapuRai=o\u003cZ\u003e5p^[.Unjt)sasIqMA+P39azC[hzGx]dzEWlbaMv{oay/t3A:@*3xcp]gwO(F", "ln": 478, "addr": 19389 }, { "b": "arR^HBz\u003e@azGu{-ayx84AaJx#z!\u0026{4x)KtsA=(hfuVQsfdf", "ln": 579, "addr": 23493 }, { "b": "", "ln": 580, "addr": 23531 }, { "b": "arR^HboOM\u0026eG/dNyH}xafGHs#D2NsqzEEx[at2e%", "n": [ { "c": 1, "d": "Credential-access vocabulary word: token", "i": "objectives/credential-access/theft/keywords::token", "o": 23542, "z": 5, "cf": 0.30000001192092896 } ], "ln": 581, "addr": 23532 }, { "b": "arR^HBA}?puV6p?wGTbUBz\u003e@azGx2ot}QhuA+PFvdf", "ln": 582, "addr": 23565 }, { "b": "", "ln": 583, "addr": 23599 }, { "b": "arR^Ha%Fi$B.LV5aARpday]g@Bs?VAy?WA*Bz(gxv{%g\u0026vpB4:azbUjz6itbze:i9wN(]}x\u003eq9\u003eaAIHkv@\u003cm", "ln": 941, "addr": 37226 }, { "b": "", "ln": 942, "addr": 37294 }, { "b": "arR^HrcJm6v@Dj6x(4ujBzkP6aAITBvru6[x\u003equdvrb{4B7Gf0v@#o)ayX=2wN({4zxJ?ty\u00260J?x(4H9C@+", "n": [ { "c": 1, "d": "compile keyword", "i": "objectives/anti-static/obfuscation/payload/bytecode::compile-word", "o": 37303, "z": 7, "cf": 1.0 } ], "ln": 943, "addr": 37295 }, { "b": "", "ln": 944, "addr": 37362 }, { "b": "arR^HvqG:!A+flkx(W=}asIbCaz#sry**^?wGUP0wO+)#df", "ln": 945, "addr": 37363 }, { "b": "arR^HarR^HmrSl.C{3ZkwO+)1B-RbnayFO/vrt{Zw[+*)wl\u0026OJasH=mA+e:5avv.%wP?T3azth8xDRbfz!\u003cGmefF?G", "ln": 946, "addr": 37401 }, { "b": "arR^HarR^HwmYvYB.(dKC42ifwGU]mwPzD}vpQ/fCxdbhAaJM5x(k54aAg[jeOnZdy?aU@v03Bmfj/xrwPh-loj-xqA=M8su%\u003eO", "n": [ { "c": 2, "d": "except keyword (Python)", "i": "metadata/package/error-handling::except-keyword", "o": 37535, "z": 6, "cf": 0.5 } ], "ln": 947, "addr": 37474 }, { "b": "arR^HarR^Hra]?=xKL\u003e0C{46mBz8/RFrRf+aA?gfx\u003eet%x\u003e8lcCwhejaz2.cA^n^ywQbzqA+fr6zGE2XFrRf}vr(]pz/fxpaARpd", "ln": 948, "addr": 37554 }, { "b": "arR^HarR^HxKL%}az+$myJTOEaz$+lwPw]nxK@q{BAzLqvS=^7eO]uzyJTOsd\u003cetgy?$kjC4CYcwNP9(z!pb1u$r$YBs}iqBynGe", "ln": 949, "addr": 37635 }, { "b": "arR^HarR^HB98ChBy/9gauZ?\u003ezGP=ivpB4:a]", "ln": 1049, "addr": 41885 }, { "b": "", "ln": 1050, "addr": 41915 }, { "b": "arR^Hv@C)?auZ\u0026Sz/6Dcy?k1stY7-ryhW*7c#rQnwPGpKaz8/WwnbK}uV]\u003c]x\u003egT]z/Pi5j:R6{uWD\u003coA::63xl![?a$K\u0026XwQ4=@a$i", "n": [ { "c": 3, "d": "Python dynamic code evaluation", "i": "objectives/execution/interpreter/eval/invoke::python-eval", "o": 41927, "z": 7, "cf": 0.5 }, { "c": 2, "d": "References container, K8s, or cloud metadata", "i": "well-known/malware/miner/kinsing::container-or-cloud-marker", "o": 41991, "z": 6, "cf": 1.0 } ], "ln": 1051, "addr": 41916 }, { "b": "arR^HwQ4=@c$vgawH[%wB15jOboQ(xABy)Jq.Y%YarR)Kpes!:pc?=sax7cNgC*llFrRf\u003czGGDgAbPM3By!#9C42ifwPF#5A+cwczGGD5wPw]fz/oOqx(mD}v}xZ7z/fxpj0ncHwO+)1zEEx[B0a[ewftw\u003cy\u00260J?y?mVgwO#Q3AV/KtvixDeefF?wC4CXpvriMjz/{8gwGV8aCYS", "n": [ { "c": 3, "d": "Python exec() built-in function", "i": "micro-behaviors/process/interpreter/python::exec-builtin", "o": 42003, "z": 4, "cf": 0.8999999761581421 } ], "ln": 1052, "addr": 41999 }, { "b": "arR^HA+funA=91qB6x?}w]n!#arR)KBA}?piV@cHzF%Mbtxjp%B-IvKC42ifwNb", "ln": 1053, "addr": 42166 }, { "b": "", "ln": 1054, "addr": 42217 }, { "b": "arR^HarR^HarR^HarR^HcV:xIwO2%hiV]!\u003eBAh+Cx(k%/cOb", "ln": 1228, "addr": 49548 }, { "b": "arR^HarR^HarR^HarR^HcU3\u003ejC{+S}cV:xIcOb", "ln": 1229, "addr": 49587 }, { "b": "arR^HarR^HarR^HarR^HcWGGCcPSv$B98CIA+dpptX5gsEj3M", "n": [ { "c": 2, "d": "Windows path-like string pattern", "i": "micro-behaviors/fs/path/reference::windows-path-like-string", "o": 49647, "z": 10, "cf": 1.0 } ], "ln": 1230, "addr": 49618 }, { "b": "arR^HarR^HarR^HEjL", "ln": 1231, "addr": 49658 }, { "b": "arR^HarR^HEjk", "ln": 1232, "addr": 49673 }, { "b": "arR^HarR^Hdf", "ln": 1245, "addr": 50364 }, { "b": "", "ln": 1246, "addr": 50374 }, { "b": "arR^Hv{@\u003eXwNxj:C@^6?BAeG!aAzQvwGUY0azC[hzGx]dzEWlaA=(hfefG1QAW-bxy\u0026:egyiarhe[x9wAc0BFB.\u003eRuaAIEwBye/{D2(bFA=\u003e}x", "n": [ { "c": 2, "d": "Python json.dumps call", "i": "micro-behaviors/data/serialize/json::json-dumps-call", "o": 50431, "z": 10, "cf": 0.8999999761581421 } ], "ln": 1247, "addr": 50375 }, { "b": "", "ln": 1248, "addr": 50464 }, { "b": "arR^Hv{@\u003eXwN(]DaywR!v}YBXxjVfkv{@\u003eXwNxj:C{@", "ln": 1249, "addr": 50465 }, { "b": "", "ln": 1317, "addr": 52685 }, { "b": "uSx^0qBaU?qBa5RmO=]RuRa0^nLRYnay]g@Bx-*dAX5tOBAgUfjS]7", "ln": 1318, "addr": 52686 }, { "b": "arR^Hb6d\u003cDx(CmSarR\u003ePC6$#:BAh8mc[ct\u003e", "n": [ { "c": 2, "d": "Logic to parse/split hash data", "i": "micro-behaviors/data/parse/analysis::hash-parsing-strip", "o": 52735, "z": 5, "cf": 0.6000000238418579 } ], "ln": 1319, "addr": 52730 }, { "b": "arR^Hb5zsxA+PFpiV]R[C6$#VB98CpA40dVec", "ln": 1320, "addr": 52759 }, { "b": "arR^Hb64:DA+PFpiV]R[C6$#-B98CpA40dVec", "ln": 1321, "addr": 52789 }, { "b": "arR^HarR^HarR^Hx(m*1AV^H/x(mD)zGE0Kar?{JarR\u003c", "ln": 1688, "addr": 66753 }, { "b": "arR^HarR^HarR^Hx\u003ewGfA:-\u003cbw]zZbuUaF3AYK", "ln": 1689, "addr": 66789 }, { "b": "arR^HarR^HarR^HarR^HBzU$tjS[tXuVZTewo-ID", "n": [ { "c": 2, "d": "Reference to a temporary directory", "i": "micro-behaviors/fs/temp/reference::temp-dir-reference", "o": 66836, "z": 3, "cf": 0.4000000059604645 } ], "ln": 1690, "addr": 66820 }, { "b": "arR^HarR^HarR^HarR^Hy?W=#B1Q)uAaJ]$c$TVIx(m*1A^-pRze:[CjS]8[A:-\u003cbw]zZbuUaF3A^Y6Aw/$/ex(n0lvqYN^d0{bCA^YFYB98BKaz2wgwGVtyvrc=udf", "ln": 1691, "addr": 66853 }, { "b": "arR^HarR^HarR^HarR^HAa9\u0026#xK$Y%jS)%ue]\u003eJxy***+d0fGrzGxAdA=2e{CYmWOaAREtdiJkvAV!{ox(k55z/oD0wQ5fmB6O", "ln": 1692, "addr": 66955 }, { "b": "arR^HarR^HarR^HarR^HzGx31B6\u0026Y]D0IKQayw-6zEW3\u003cvq]B*B6\u0026Y]D0H", "ln": 1767, "addr": 70090 }, { "b": "", "ln": 1768, "addr": 70137 }, { "b": "arR^HwQ4=@c$vgjAa%c1d06rHA:@Viaz8/WB.(euvp9R?B7F(?zASt.wO@]qv}YB\u003cvjuQ*a$K\u0026XwQ4=@a$k5=zGvlHar@1Dz/GhDax70Gg5", "n": [ { "c": 4, "d": "Dynamic execution primitive", "i": "objectives/anti-static/obfuscation/eval/scripting::conditional-exec-primitive", "o": 70142, "z": 13, "cf": 0.8500000238418579 } ], "ln": 1769, "addr": 70138 }, { "b": "arR^Hw]n.Oaz#m8b42FeBAg!%w]n!#", "ln": 1770, "addr": 70224 }, { "b": "arR^HA+funA=91izu", "ln": 1771, "addr": 70249 } ], "depth": 2, "facts": { "imp": [ [ "", "fn" ], [ "", "len" ], [ "", "len" ], [ "", "len" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "len" ], [ "", "len" ], [ "", "len" ], [ "", "mk_min_len" ], [ "", "mk_min_val" ], [ "", "mk_max_len" ], [ "", "mk_max_val" ], [ "", "mk_between_len" ], [ "", "mk_between_val" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "len" ], [ "", "isinstance" ], [ "", "len" ], [ "", "isinstance" ], [ "", "len" ], [ "", "tc" ], [ "", "tc" ], [ "", "tc" ], [ "", "tc" ], [ "", "len" ], [ "", "tc" ], [ "", "len" ], [ "", "tc" ], [ "", "len" ], [ "", "fused_int_between" ], [ "", "fused_int_min" ], [ "", "fused_int_max" ], [ "", "fused_float_between" ], [ "", "fused_float_min" ], [ "", "fused_float_max" ], [ "", "fused_str_between" ], [ "", "fused_str_min" ], [ "", "fused_str_max" ], [ "", "fused_tc_len_between" ], [ "", "fused_tc_len_min" ], [ "", "fused_tc_len_max" ], [ "", "fused_tc_val_between" ], [ "", "fused_tc_val_min" ], [ "", "fused_tc_val_max" ], [ "", "ipaddress.ip_address" ], [ "", "str" ], [ "", "uuid_lib.UUID" ], [ "", "str" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "parse_date" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "bool" ], [ "", "PHONE_E164_RE.match" ], [ "", "str(v).strip" ], [ "", "str" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "EMAIL_RE.match" ], [ "", "str" ], [ "", "URL_RE.match" ], [ "", "str" ], [ "", "SLUG_RE.match" ], [ "", "str" ], [ "", "SEMVER_RE.match" ], [ "", "str" ], [ "", "is_valid_color" ], [ "", "isinstance" ], [ "", "bool" ], [ "", "HEX_COLOR_RE.match" ], [ "", "str(v).strip" ], [ "", "str" ], [ "", "bool" ], [ "", "RGB_COLOR_RE.match" ], [ "", "str(v).strip" ], [ "", "str" ], [ "", "bool" ], [ "", "HSL_COLOR_RE.match" ], [ "", "str(v).strip" ], [ "", "str" ], [ "", "str(v).strip().lower" ], [ "", "str(v).strip" ], [ "", "str" ], [ "", "frozenset" ], [ "", "re.compile" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "frozenset" ], [ "", "isinstance" ], [ "", "literal_eval" ], [ "", "str" ], [ "", "ValueError" ], [ "", "phonenumbers.parse" ], [ "", "str(v).strip" ], [ "", "str" ], [ "", "phonenumbers.is_valid_number" ], [ "", "ImportError" ], [ "", "get_registered_checker" ], [ "", "TypeError" ], [ "", "get_registered_checker" ], [ "", "TypeError" ], [ "", "\", \".join" ], [ "", "sorted" ], [ "", "tuple" ], [ "", "isinstance" ], [ "", "all" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "all" ], [ "", "isinstance" ], [ "", "len" ], [ "", "ITEM_TYPE_CHECK.get" ], [ "", "get_registered_checker" ], [ "", "TypeError" ], [ "", "all" ], [ "", "tuple" ], [ "", "len" ], [ "", "all" ], [ "", "all" ], [ "", "any" ], [ "", "OrderedDict" ], [ "", "COMPILED_CACHE.move_to_end" ], [ "", "len" ], [ "", "COMPILED_CACHE.popitem" ], [ "", "pipe_tokenize" ], [ "", "tokens[0].strip" ], [ "", "PARAMETERIZED_RE.match" ], [ "", "m.group" ], [ "", "t.strip" ], [ "", "m.group(2).split" ], [ "", "m.group" ], [ "", "TypeError" ], [ "", "token.partition" ], [ "", "key.strip" ], [ "", "ValueError" ], [ "", "transforms.append" ], [ "", "ValueError" ], [ "", "ValueError" ], [ "", "ValueError" ], [ "", "validators.append" ], [ "", "bind" ], [ "", "ValueError" ], [ "", "int" ], [ "", "ValueError" ], [ "", "validators.append" ], [ "", "bind" ], [ "", "ValueError" ], [ "", "frozenset" ], [ "", "item.strip" ], [ "", "value.split" ], [ "", "validators.append" ], [ "", "bind" ], [ "", "ValueError" ], [ "", "frozenset" ], [ "", "item.strip" ], [ "", "value.split" ], [ "", "validators.append" ], [ "", "bind" ], [ "", "ValueError" ], [ "", "tuple" ], [ "", "item.strip" ], [ "", "value.split" ], [ "", "validators.append" ], [ "", "bind" ], [ "", "ValueError" ], [ "", "validators.append" ], [ "", "bind" ], [ "", "ValueError" ], [ "", "validators.append" ], [ "", "bind" ], [ "", "ValueError" ], [ "", "validators.append" ], [ "", "bind" ], [ "", "ValueError" ], [ "", "ValueError" ], [ "", "ValueError" ], [ "", "ValueError" ], [ "", "value.split" ], [ "", "len" ], [ "", "ValueError" ], [ "", "ValueError" ], [ "", "coerce_range_val" ], [ "", "parts[0].strip" ], [ "", "coerce_range_val" ], [ "", "parts[1].strip" ], [ "", "ValueError" ], [ "", "ValueError" ], [ "", "ValueError" ], [ "", "coerce_range_val" ], [ "", "coerce_range_val" ], [ "", "coerce_range_val" ], [ "", "coerce_range_val" ], [ "", "build_parameterized_type_check" ], [ "", "build_type_check_callable" ], [ "", "len" ], [ "", "chain_transforms" ], [ "", "try_fuse_type_range" ], [ "", "validators.append" ], [ "", "make_between" ], [ "", "validators.append" ], [ "", "make_min" ], [ "", "validators.append" ], [ "", "make_max" ], [ "", "len" ], [ "", "c0" ], [ "", "c0" ], [ "", "c1" ], [ "", "c0" ], [ "", "c1" ], [ "", "c2" ], [ "", "all" ], [ "", "run" ], [ "", "run" ], [ "", "transform" ], [ "", "run" ], [ "", "transform" ], [ "", "rule.items" ], [ "", "ValueError" ], [ "", "ValueError" ], [ "", "type" ], [ "", "rule.items" ], [ "", "compile_dict_rule" ], [ "", "make_dict_callable" ], [ "", "result.append" ], [ "", "compile_pipe_rule" ], [ "", "result.append" ], [ "", "make_callable" ], [ "", "len" ], [ "", "any" ], [ "", "tuple" ], [ "", "tuple" ], [ "", "data.get" ], [ "", "enumerate" ], [ "", "lines.append" ], [ "", "range" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "enumerate" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "compile" ], [ "", "\"\\n\".join" ], [ "", "exec" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "PARAMETERIZED_RE.match" ], [ "", "PARAMETERIZED_RE.match" ], [ "", "m_p.group" ], [ "", "t.strip" ], [ "", "m_p.group(2).split" ], [ "", "m_p.group" ], [ "", "len" ], [ "", "ITEM_TYPE_CHECK.get" ], [ "", "TYPE_CHECK.get" ], [ "", "exprs.append" ], [ "", "tuple" ], [ "", "exprs.append" ], [ "", "ULTRA_TYPE_EXPRS.get" ], [ "", "TypeError" ], [ "", "ns.update" ], [ "", "exprs.append" ], [ "", "template.format" ], [ "", "tok.partition" ], [ "", "key.strip" ], [ "", "val.strip" ], [ "", "frozenset" ], [ "", "x.strip" ], [ "", "val.split" ], [ "", "exprs.append" ], [ "", "frozenset" ], [ "", "x.strip" ], [ "", "val.split" ], [ "", "exprs.append" ], [ "", "re_module.compile" ], [ "", "exprs.append" ], [ "", "val.split" ], [ "", "len" ], [ "", "parts[0].strip" ], [ "", "parts[1].strip" ], [ "", "exprs.append" ], [ "", "exprs.append" ], [ "", "exprs.append" ], [ "", "exprs.append" ], [ "", "exprs.append" ], [ "", "exprs.append" ], [ "", "exprs.append" ], [ "", "d.items" ], [ "", "new_var" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "emit" ], [ "", "rule.split" ], [ "", "tokens[0].strip" ], [ "", "build_exprs" ], [ "", "\" and \".join" ], [ "", "lines.append" ], [ "", "emit" ], [ "", "len" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "compile" ], [ "", "\"\\n\".join" ], [ "", "exec" ], [ "", "TypeError" ], [ "", "type" ], [ "", "json.dumps" ], [ "", "cache_get" ], [ "", "compile_pipe_rule" ], [ "", "make_callable" ], [ "", "is_ultra_simple_schema" ], [ "", "ultra_compile_dict" ], [ "", "compile_dict_rule" ], [ "", "make_dict_callable" ], [ "", "cache_set" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "len" ], [ "", "len" ], [ "", "json.dumps" ], [ "", "schema.values" ], [ "", "is_ultra_simple_schema" ], [ "", "rule.split" ], [ "", "tokens[0].strip" ], [ "", "PARAMETERIZED_RE.match" ], [ "", "m.group" ], [ "", "m.group(2).strip" ], [ "", "m.group" ], [ "", "ULTRA_RANGE_MODIFIERS.union" ], [ "", "ULTRA_RANGE_MODIFIERS.union" ], [ "", "ULTRA_RANGE_MODIFIERS.union" ], [ "", "ULTRA_RANGE_MODIFIERS.union" ], [ "", "ULTRA_RANGE_MODIFIERS.union" ], [ "", "ULTRA_RANGE_MODIFIERS.union" ], [ "", "ULTRA_RANGE_MODIFIERS.union" ], [ "", "tok.split(\":\")[0].strip" ], [ "", "tok.split" ], [ "", "tok.partition" ], [ "", "key.strip" ], [ "", "val.strip" ], [ "", "transforms.append" ], [ "", "val.split" ], [ "", "len" ], [ "", "parts[0].strip" ], [ "", "parts[1].strip" ], [ "", "tmpl.replace" ], [ "", "type_tok.startswith" ], [ "", "type_tok.split" ], [ "", "type_tok[:-1].split('[')[1].strip" ], [ "", "type_tok[:-1].split" ], [ "", "ULTRA_REGEX_FAST_REJECT.get" ], [ "", "fast_reject.format" ], [ "", "ULTRA_ARITH_INLINE[type_tok].replace" ], [ "", "type_tok.startswith" ], [ "", "bool_exprs.append" ], [ "", "bool_exprs.append" ], [ "", "bool_exprs.append" ], [ "", "bool_exprs.append" ], [ "", "bool_exprs.append" ], [ "", "bool_exprs.append" ], [ "", "bool_exprs.append" ], [ "", "type_tok.startswith" ], [ "", "p.strip" ], [ "", "val.split" ], [ "", "type_tok.startswith" ], [ "", "type_tok.startswith" ], [ "", "int" ], [ "", "type_tok.startswith" ], [ "", "type_tok.startswith" ], [ "", "float" ], [ "", "tuple" ], [ "", "bool_exprs.append" ], [ "", "bool_exprs.append" ], [ "", "p.strip" ], [ "", "val.split" ], [ "", "type_tok.startswith" ], [ "", "type_tok.startswith" ], [ "", "int" ], [ "", "type_tok.startswith" ], [ "", "type_tok.startswith" ], [ "", "float" ], [ "", "tuple" ], [ "", "bool_exprs.append" ], [ "", "bool_exprs.append" ], [ "", "t.strip" ], [ "", "in_vals.split" ], [ "", "frozenset" ], [ "", "int" ], [ "", "frozenset" ], [ "", "float" ], [ "", "frozenset" ], [ "", "bool_exprs.append" ], [ "", "t.strip" ], [ "", "not_in_vals.split" ], [ "", "frozenset" ], [ "", "int" ], [ "", "frozenset" ], [ "", "float" ], [ "", "frozenset" ], [ "", "bool_exprs.append" ], [ "", "tuple" ], [ "", "t.strip" ], [ "", "contains_vals.split" ], [ "", "type_tok.startswith" ], [ "", "type_tok.startswith" ], [ "", "type_tok.startswith" ], [ "", "tuple" ], [ "", "int" ], [ "", "type_tok.startswith" ], [ "", "type_tok.startswith" ], [ "", "type_tok.startswith" ], [ "", "tuple" ], [ "", "float" ], [ "", "bool_exprs.append" ], [ "", "type_tok.startswith" ], [ "", "type_tok.startswith" ], [ "", "type_tok.startswith" ], [ "", "int" ], [ "", "type_tok.startswith" ], [ "", "type_tok.startswith" ], [ "", "type_tok.startswith" ], [ "", "float" ], [ "", "bool_exprs.append" ], [ "", "re.compile" ], [ "", "bool_exprs.append" ], [ "", "schema.items" ], [ "", "repr" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "ultra_emit_checks" ], [ "", "rule.split" ], [ "", "tokens[0].strip" ], [ "", "ultra_compile_rule_exprs" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "e.replace" ], [ "", "\" and \".join" ], [ "", "\" and \".join" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "e.replace" ], [ "", "\" and \".join" ], [ "", "lines.append" ], [ "", "sum" ], [ "", "expr.count" ], [ "", "e.replace" ], [ "", "\" and \".join" ], [ "", "lines.append" ], [ "", "lines.append" ], [ "", "\" and \".join" ], [ "", "lines.append" ], [ "", "ultra_emit_checks" ], [ "", "lines.append" ], [ "", "\"\\n\".join" ], [ "", "set" ], [ "", "s.values" ], [ "", "collect_types" ], [ "", "used_types.add" ], [ "", "rule.split(\"|\")[0].strip" ], [ "", "rule.split" ], [ "", "collect_types" ], [ "", "frozenset" ], [ "", "ULTRA_REGEX_TYPES.items" ], [ "", "frozenset" ], [ "", "ULTRA_FUNC_TYPES.items" ], [ "", "exec" ], [ "", "compile" ], [ "", "len" ], [ "", "TypeError" ], [ "", "type" ], [ "", "time.perf_counter" ], [ "", "is_ultra_simple_schema" ], [ "", "make_ultra_fused_validator" ], [ "", "time.perf_counter" ], [ "", "validator" ], [ "", "validator" ], [ "", ".engine" ], [ "", ".engine._EMAIL_RE" ], [ "", ".engine._HEX_COLOR_RE" ], [ "", ".engine._HSL_COLOR_RE" ], [ "", ".engine._NAMED_COLORS" ], [ "", ".engine._PHONE_E164_RE" ], [ "", ".engine._RGB_COLOR_RE" ], [ "", ".engine._SEMVER_RE" ], [ "", ".engine._SLUG_RE" ], [ "", ".engine._URL_RE" ], [ "", ".engine._is_prime" ], [ "", ".engine._is_valid_color" ], [ "", ".engine.validate_contains" ], [ "", ".engine.validate_endswith" ], [ "", ".engine.validate_excludes" ], [ "", ".engine.validate_expression" ], [ "", ".engine.validate_length" ], [ "", ".engine.validate_options" ], [ "", ".engine.validate_startswith" ], [ "", ".engine.validate_unique" ], [ "", ".types" ], [ "", ".types.get_registered_checker" ], [ "", ".validatedata" ], [ "", ".validatedata.BASIC_TYPES" ], [ "", ".validatedata.EXTENDED_TYPES" ], [ "", ".validatedata._TRANSFORM_MAP" ], [ "", ".validatedata._chain_transforms" ], [ "", ".validatedata._coerce_range_val" ], [ "", ".validatedata._pipe_tokenize" ], [ "", "Any" ], [ "", "Callable" ], [ "", "OrderedDict" ], [ "", "ast" ], [ "", "collections" ], [ "", "datetime" ], [ "", "datetime" ], [ "", "dateutil.parser" ], [ "", "ipaddress" ], [ "", "json" ], [ "", "literal_eval" ], [ "", "parse" ], [ "", "phonenumbers" ], [ "", "re" ], [ "", "re" ], [ "", "time" ], [ "", "typing" ], [ "", "uuid" ] ], "mbr": [ "_COMPILED_CACHE.move_to_end", "_COMPILED_CACHE.popitem", "_EMAIL_RE.match", "_HEX_COLOR_RE.match", "_HSL_COLOR_RE.match", "_ITEM_TYPE_CHECK.get", "_PARAMETERIZED_RE.match", "_PHONE_E164_RE.match", "_RGB_COLOR_RE.match", "_SEMVER_RE.match", "_SLUG_RE.match", "_TYPE_CHECK.color", "_TYPE_CHECK.get", "_TYPE_CHECK.phone", "_ULTRA_FUNC_TYPES.items", "_ULTRA_RANGE_MODIFIERS.union", "_ULTRA_REGEX_FAST_REJECT.get", "_ULTRA_REGEX_TYPES.items", "_ULTRA_TYPE_EXPRS.get", "_URL_RE.match", "_m.group", "_m.group().split", "_re_module.compile", "bool_exprs.append", "contains_vals.split", "d.items", "data.get", "e.replace", "expr.count", "exprs.append", "fast_reject.format", "in_vals.split", "ipaddress.ip_address", "item.strip", "json.dumps", "key.strip", "lines.append", "m.group", "m.group().strip", "m_p.group", "m_p.group().split", "not_in_vals.split", "ns._fn", "ns._ultra_fn", "ns.update", "p.strip", "phonenumbers.is_valid_number", "phonenumbers.parse", "re.compile", "result.append", "rule.items", "rule.split", "s.values", "schema.items", "schema.values", "str().strip", "str().strip().lower", "t.strip", "template.format", "time.perf_counter", "tmpl.replace", "tok.partition", "tok.split", "token.partition", "transforms.append", "type().__name__", "type_tok.split", "type_tok.startswith", "used_types.add", "uuid_lib.UUID", "val.split", "val.strip", "validators.append", "value.split", "x.strip" ], "tgt": [ "ImportError", "OrderedDict", "TypeError", "ValueError", "_COMPILED_CACHE.move_to_end", "_COMPILED_CACHE.popitem", "_EMAIL_RE.match", "_HEX_COLOR_RE.match", "_HSL_COLOR_RE.match", "_ITEM_TYPE_CHECK.get", "_PARAMETERIZED_RE.match", "_PHONE_E164_RE.match", "_RGB_COLOR_RE.match", "_SEMVER_RE.match", "_SLUG_RE.match", "_TYPE_CHECK.get", "_ULTRA_FUNC_TYPES.items", "_ULTRA_RANGE_MODIFIERS.union", "_ULTRA_REGEX_FAST_REJECT.get", "_ULTRA_REGEX_TYPES.items", "_ULTRA_TYPE_EXPRS.get", "_URL_RE.match", "_a", "_b", "_bind", "_build_exprs", "_build_parameterized_type_check", "_build_type_check_callable", "_c", "_cache_get", "_cache_set", "_chain_transforms", "_coerce_range_val", "_collect_types", "_compile_dict_rule", "_compile_pipe_rule", "_emit", "_fn", "_fused_float_between", "_fused_float_max", "_fused_float_min", "_fused_int_between", "_fused_int_max", "_fused_int_min", "_fused_str_between", "_fused_str_max", "_fused_str_min", "_fused_tc_len_between", "_fused_tc_len_max", "_fused_tc_len_min", "_fused_tc_val_between", "_fused_tc_val_max", "_fused_tc_val_min", "_is_ultra_simple_schema", "_is_valid_color", "_m.group", "_m.group().split", "_make_between", "_make_callable", "_make_dict_callable", "_make_max", "_make_min", "_make_ultra_fused_validator", "_mk_between_len", "_mk_between_val", "_mk_max_len", "_mk_max_val", "_mk_min_len", "_mk_min_val", "_new_var", "_pipe_tokenize", "_re_module.compile", "_run", "_tc", "_try_fuse_type_range", "_ultra_compile_dict", "_ultra_compile_rule_exprs", "_ultra_emit_checks", "all", "any", "bool", "bool_exprs.append", "c", "c0", "c1", "c2", "compile", "contains_vals.split", "d.items", "data.get", "e.replace", "enumerate", "exec", "expr.count", "exprs.append", "fast_reject.format", "float", "frozenset", "get_registered_checker", "in_vals.split", "int", "ipaddress.ip_address", "isinstance", "item.strip", "json.dumps", "key.strip", "len", "lines.append", "literal_eval", "m.group", "m.group().strip", "m_p.group", "m_p.group().split", "not_in_vals.split", "ns.update", "p.strip", "parse_date", "phonenumbers.is_valid_number", "phonenumbers.parse", "range", "re.compile", "repr", "result.append", "rule.items", "rule.split", "s.values", "schema.items", "schema.values", "set", "sorted", "str", "str().strip", "str().strip().lower", "sum", "t.strip", "template.format", "time.perf_counter", "tmpl.replace", "tok.partition", "tok.split", "token.partition", "transform", "transforms.append", "tuple", "type", "type_tok.split", "type_tok.startswith", "used_types.add", "uuid_lib.UUID", "val.split", "val.strip", "validator", "validators.append", "value.split", "x.strip" ], "metrics": { "ast": { "op.add": 6.0, "op.bor": 61.0, "op.lor": 28.0, "op.mod": 2.0, "op.sub": 4.0, "op.band": 2.0, "op.land": 55.0, "max_depth": 21.0, "bind_count": 272.0, "call_count": 538.0, "node_count": 16677.0, "member_count": 75.0, "op_density.add": 0.0, "op_density.bor": 0.0, "op_density.lor": 0.0, "op_density.mod": 0.0, "op_density.sub": 0.0, "op_density.band": 0.0, "op_density.land": 0.0, "identifier_count": 374.0, "member_depth_max": 3.0, "string_literal_count": 556.0, "array_literal_max_length": 14.0, "string_concat_chain_max_length": 2.0 }, "file": { "size": 72553.0, "entropy": 4.71, "size_bytes": 72553.0 }, "text": { "digit_ratio": 0.01, "space_count": 18289.0, "total_lines": 1831.0, "char_entropy": 4.71, "unique_chars": 99.0, "string_density": 0.3, "ascii_art_lines": 44.0, "avg_line_length": 38.63, "high_byte_ratio": 0.0, "max_line_length": 166.0, "non_ascii_ratio": 0.0, "empty_line_ratio": 0.15, "last_line_length": 45.0, "whitespace_ratio": 0.28, "most_common_ratio": 0.06, "identifier_density": 1.74, "line_length_stddev": 28.2, "normalized_string_count": 12.99, "repeated_char_sequences": 563.0, "suspicious_string_ratio": 0.02, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 0.03, "max_inline_whitespace_run": 23.0, "trailing_whitespace_lines": 10.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.04, "normalized_unique_identifiers": 34.51 }, "binds": { "count": 272.0 }, "calls": { "count": 538.0 }, "binary": { "overall_entropy": 4.71, "peak_region_bytes": 24576.0, "peak_region_entropy": 5.06 }, "source": { "function_count": 65.0 }, "imports": { "count": 47.0, "stdlib_count": 11.0, "stdlib_ratio": 0.23, "relative_ratio": 0.62, "unique_modules": 47.0, "aliased_imports": 4.0, "relative_imports": 29.0, "third_party_count": 36.0, "third_party_ratio": 0.77 }, "members": { "count": 75.0 }, "strings": { "total": 556.0, "avg_length": 26.19, "max_length": 1840.0, "avg_entropy": 2.55, "sql_strings": 3.0, "total_bytes": 14563.0, "entropy_stddev": 1.16, "very_long_strings": 3.0, "shell_command_strings": 2.0, "embedded_code_candidates": 4.0 }, "comments": { "chars": 12782.0, "lines": 226.0, "total": 238.0, "to_code_ratio": 0.14, "empty_comments": 12.0, "high_entropy_comments": 6.0 }, "functions": { "count": 65.0, "avg_params": 1.91, "max_params": 6.0, "one_liners": 4.0, "length_stddev": 46.64, "over_100_lines": 4.0, "avg_name_length": 14.25, "no_params_count": 1.0, "avg_length_lines": 22.88, "max_length_lines": 263.0, "min_length_lines": 1.0, "nested_functions": 5.0, "avg_nesting_depth": 0.22, "max_nesting_depth": 1.0, "high_entropy_names": 11.0, "single_char_params": 20.0, "avg_param_name_length": 4.34, "density_per_100_lines": 3.71, "code_in_functions_ratio": 0.85 }, "identifiers": { "count": 374.0, "total": 3178.0, "avg_length": 9.55, "max_length": 31.0, "min_length": 1.0, "avg_entropy": 2.55, "reuse_ratio": 0.12, "unique_count": 374.0, "length_stddev": 5.93, "has_digit_ratio": 0.02, "sequential_names": 15.0, "single_char_count": 13.0, "single_char_ratio": 0.03, "high_entropy_count": 27.0, "high_entropy_ratio": 0.07, "all_lowercase_ratio": 0.85, "all_uppercase_ratio": 0.11, "numeric_suffix_count": 6.0, "double_underscore_count": 1.0, "underscore_prefix_count": 146.0 } } }, "id": 4, "mol": "O(C)H(Po₂)", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata/compiled.py", "risk": 3, "sha": "b746de1fbdf9037a9eb1accdfa3efa01ffd96d0fd41c9e9bad4b75397ba1a654", "size": 72553, "traits": [ { "id": "objectives/credential-access/theft/keywords::token", "conf": 0.30000001192092896, "crit": 1, "desc": "Credential-access vocabulary word: token", "spans": [ [ 23542, 5 ] ] }, { "id": "micro-behaviors/process/interpreter/python::exec-builtin", "atk": "T1059.006", "mbc": "E1059", "conf": 0.8999999761581421, "crit": 3, "desc": "Python exec() built-in function", "spans": [ [ 42003, 4 ] ] }, { "id": "objectives/command-and-control/backdoor/dispatch/eval::config-string-execution-cond-1--inline-15152", "atk": "T1059.006", "conf": 0.8999999761581421, "crit": 3, "desc": "Regex component marker", "spans": [ [ 0, 23 ] ] }, { "id": "objectives/impact/destroy/keywords::cleanup-verb--clean", "conf": 0.8799999952316284, "crit": 1, "desc": "Cleanup/action word: clean", "spans": [ [ 14323, 5 ] ] }, { "id": "micro-behaviors/process/create/subprocess::python-exec-capability", "conf": 0.800000011920929, "crit": 3, "desc": "Python process execution capability", "spans": [ [ 42003, 4 ] ] } ], "type": "python" }, { "ctx": [ { "b": "w].*baywF/B-.+DwNw^!x(d*cA=-BjzF\u003cxmvruj4zGt", "n": [ { "c": 2, "d": "Python file extension", "i": "metadata/file/extension/identity::py", "o": 0, "z": 15, "cf": 1.0 } ], "ln": 1, "addr": 0 }, { "b": "", "ln": 2, "addr": 35 }, { "b": "x(d*cA=-Bmx\u003ey%[x\u003c}", "ln": 3, "addr": 36 }, { "b": "w].*bazC.mAaJK3azCXiz/P}xxjVf%B.\u003e(5A+xDjwN^nlx(^^5A=l8xx(mG]B-7Yhx(v\u003e", "ln": 9, "addr": 154 }, { "b": "w].*baAR)Fx(mMax(d*cA=-A\u0026zH0=QlT:!EvpB4:efEt{v@%mAoLFM\u0026efE-cBzkVhvqEFqrcrd@wH[%7zFs3befFOpByfcnAaJx\u0026x(n3l", "ln": 10, "addr": 210 }, { "b": "w].*baAz3ox(d*cA=-Blz/6Dcy?j.$B0a?gwNw}=ze:i9wD", "n": [ { "c": 3, "d": "Python dynamic code evaluation", "i": "objectives/execution/interpreter/eval/invoke::python-eval", "o": 310, "z": 7, "cf": 0.5 } ], "ln": 11, "addr": 295 }, { "b": "w].*batdkyxk8l{azCXiz/P}xc\u0026", "ln": 12, "addr": 333 }, { "b": "arR^Ho*I(*pdn8XnLR=.l}6{KngT", "ln": 13, "addr": 355 }, { "b": "arR^Hl3di?x\u003c#jbwPG)", "ln": 33, "addr": 743 }, { "b": "arR^HarR^Hz!?xRu%(@OB.a@*azCBgC42i3wmoN]z/cXpvrlH3wgO\u003chu}aNvB7F-!aA8vnwPA0eB7D%", "ln": 34, "addr": 759 }, { "b": "arR^HarR^HwPz*fA=Tn:k{f#TB95Kyw/$V9A=k$vzdN^fvp%d)e*akewO@R#u$TH#B-pY0A=M8sB3iGyB.a@*asItBwD", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 893, "z": 3, "cf": 0.800000011920929 } ], "ln": 35, "addr": 823 }, { "b": "arR^HarR^HarR^HwmYvYB.(dGefFIjv}V#@zGG]AazC)tx([Acy?s!#az++kBrCHlaAITBx(mN8aMv{oaA8deaAIWmeO]cxBn", "ln": 36, "addr": 897 }, { "b": "arR^HarR^HarR^HAaK5jw[+*)wg/0axK#67u%)R/z/{2awPz*fA=TxkvqH0@u%\u003e9*A=M8sB0bgrayMy8y*?Ady?W%jaA7\u0026", "ln": 37, "addr": 975 }, { "b": "", "ln": 71, "addr": 1709 }, { "b": "boOM\u0026eIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeD", "ln": 72, "addr": 1710 }, { "b": "boP)by?khlwQbzby\u002613ly?W%jayPd#az1#4y\u003cvdDvqGT*vruj4zu", "n": [ { "c": 1, "d": "Allow-list vocabulary", "i": "objectives/credential-access/shell/history::allow-list-vocabulary", "o": 1799, "z": 9, "cf": 0.30000001192092896 } ], "ln": 73, "addr": 1788 }, { "b": "boOM\u0026eIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeD", "ln": 74, "addr": 1830 }, { "b": "", "ln": 75, "addr": 1908 }, { "b": "arR^HarR^Hb4V1rA+frkx(v(kec", "ln": 92, "addr": 2316 }, { "b": "arR^HarR^Hb4CLeByw)3B0rd", "ln": 93, "addr": 2338 }, { "b": "arR^HarR^Hb6d\u003cmA==wDx([2jec", "n": [ { "c": 2, "d": "Logic to parse/split hash data", "i": "micro-behaviors/data/parse/analysis::hash-parsing-startswith", "o": 2367, "z": 10, "cf": 0.6000000238418579 } ], "ln": 94, "addr": 2358 }, { "b": "arR^HarR^Hb4UU5B9ztuxD!#", "ln": 95, "addr": 2380 }, { "b": "arR^HarR^Hb6v^qADL?pec", "ln": 96, "addr": 2400 }, { "b": "arR^Ha%Fi", "ln": 118, "addr": 3024 }, { "b": "arR^HB-7#jz*c7wjS)@", "ln": 119, "addr": 3032 }, { "b": "arR^HarR^HyANkcAV/cux(k5lB.\u003eRix\u003ewG6az#atazCZorZxzJl%\u0026?(oHSqYmoJLivqYP#zF%RtyC6gowoh%eBz96DeP26uB75Y)a$i", "n": [ { "c": 2, "d": "Iteration or loop pattern", "i": "micro-behaviors/data/control-flow/analysis::iteration-loop-pattern", "o": 3057, "z": 10, "cf": 0.5 } ], "ln": 120, "addr": 3048 }, { "b": "arR^Ht(", "ln": 121, "addr": 3131 }, { "b": "arR^Hx\u003ewG9z/^aAzFKcdCwYC", "ln": 122, "addr": 3137 }, { "b": "arR^HBAhT/", "ln": 339, "addr": 10960 }, { "b": "arR^HarR^HA+funA=91jwPRv5BAe^rzF\u003cxmefDczuV6p?wNw^*efG1QAWUvlzF%RCdf", "ln": 340, "addr": 10969 }, { "b": "arR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiS", "n": [ { "c": 2, "d": "Error handling keywords", "i": "micro-behaviors/crypto/symmetric/fernet::error-handling-keywords", "o": 11027, "z": 16, "cf": 1.0 } ], "ln": 341, "addr": 11023 }, { "b": "arR^HarR^HA+funA=91vBAe^rzF\u003cxmdf", "ln": 342, "addr": 11045 }, { "b": "", "ln": 343, "addr": 11071 }, { "b": "arR^HarR^Hb5RKty**^?wG\u0026V", "ln": 873, "addr": 29517 }, { "b": "arR^HarR^Hb6v^qADL?pec", "ln": 874, "addr": 29537 }, { "b": "arR^HarR^Hb6d\u003cDx(CmE", "n": [ { "c": 2, "d": "Logic to parse/split hash data", "i": "micro-behaviors/data/parse/analysis::hash-parsing-strip", "o": 29564, "z": 5, "cf": 0.6000000238418579 } ], "ln": 875, "addr": 29555 }, { "b": "arR^HarR^Hb5zsxA+PFpec", "ln": 876, "addr": 29572 }, { "b": "arR^HarR^Hb64:DA+PFpec", "ln": 877, "addr": 29590 }, { "b": "wmYu}uVoZ#wNxK$yH}x$DsXHCdlm", "ln": 939, "addr": 30831 }, { "b": "arR^Ha%FjfAbolgaAFVzzxKrHz/fxpaA}HgA+cw9z!%ldCv+qcvTf88aAz46z!A%4B7F(8zeS%0w[+*%azULlCw?Ije=", "ln": 940, "addr": 30854 }, { "b": "arR^Hra]?=BA}?paARKqwO@S8B0a[cCvt=raAIHrx(\u003eFaBrCWswGUP0A=VsBD)0MHv@Dl}x([6czEEu$C}Ho+a]", "n": [ { "c": 1, "d": "Credential-access vocabulary word: token", "i": "objectives/credential-access/theft/keywords::token", "o": 30941, "z": 5, "cf": 0.30000001192092896 } ], "ln": 941, "addr": 30928 }, { "b": "arR^Hw[=pbByf03AaHdPaAGeEx(mDfb77N-", "ln": 942, "addr": 30998 }, { "b": "arR^Hx\u003ewG1x(XopuVoZ#wGTc0at2re", "ln": 943, "addr": 31027 }, { "b": "arR^HB97\u0026hBrAZ?fA", "ln": 948, "addr": 31133 }, { "b": "arR^HAbP!ujS[=RB963Dx(mDfb77N-", "ln": 949, "addr": 31147 }, { "b": "arR^HCw7YbwGU@gB08R?at2re", "n": [ { "c": 2, "d": "while loop pattern", "i": "micro-behaviors/data/control-flow/analysis::while-loop", "o": 31172, "z": 20, "cf": 0.30000001192092896 } ], "ln": 950, "addr": 31172 }, { "b": "arR^HarR^Hx\u003ewF{x(^T2x(ES\u003cwmYN\u003eze196AWU%tB95@QAbP!DiS", "ln": 951, "addr": 31193 }, { "b": "arR^HarR^HarR^HBz\u003e@azGvBsAbYxawghFfB97ScByxiii=G1Ut}2", "ln": 952, "addr": 31235 }, { "b": "arR^HarR^HarR^HarR^Hdf", "ln": 1050, "addr": 34352 }, { "b": "", "ln": 1051, "addr": 34370 }, { "b": "arR^HarR^HwO=6)azULlau.\u003egb64mcx(v(kiS", "n": [ { "c": 3, "d": "Geolocation response field markers", "i": "objectives/discovery/host/geo::geo-response-field", "o": 34391, "z": 9, "cf": 0.5 } ], "ln": 1052, "addr": 34371 }, { "b": "arR^HarR^HarR^HA=(hfuU0\u003eXBxY@fwOkZ}zx-vejS[9LwPq\u003cbA+eQ3vqH6$c#iytefGaAy\u0026%qr", "ln": 1053, "addr": 34401 }, { "b": "", "ln": 1054, "addr": 34462 } ], "depth": 2, "facts": { "imp": [ [ "", "getattr" ], [ "", "getattr" ], [ "", "re_compile" ], [ "", "frozenset" ], [ "", "k.endswith" ], [ "", "difflib.get_close_matches" ], [ "", "messages.append" ], [ "", "ValueError" ], [ "", "\"\\n\".join" ], [ "", "check_rule_dict" ], [ "", "EmptyObject" ], [ "", "inspect.signature" ], [ "", "list" ], [ "", "sig.parameters.values" ], [ "", "bool" ], [ "", "OrderedDict" ], [ "", "OrderedDict" ], [ "", "func_data.update" ], [ "", "zip" ], [ "", "len" ], [ "", "func_data.update" ], [ "", "func_data.update" ], [ "", "zip" ], [ "", "func_data.update" ], [ "", "zip" ], [ "", "func_data.update" ], [ "", "zip" ], [ "", "kwargs.keys" ], [ "", "set" ], [ "", "func_data.keys" ], [ "", "kwargs.values" ], [ "", "extract_func_spec" ], [ "", "align_func_data" ], [ "", "extract_func_spec" ], [ "", "iscoroutinefunction" ], [ "", "wraps" ], [ "", "align_func_data" ], [ "", "validate_data" ], [ "", "hasattr" ], [ "", "list" ], [ "", "transformed.values" ], [ "", "isinstance" ], [ "", "func" ], [ "", "func" ], [ "", "isinstance" ], [ "", "func" ], [ "", "func" ], [ "", "wraps" ], [ "", "align_func_data" ], [ "", "validate_data" ], [ "", "hasattr" ], [ "", "list" ], [ "", "transformed.values" ], [ "", "isinstance" ], [ "", "func" ], [ "", "func" ], [ "", "isinstance" ], [ "", "func" ], [ "", "func" ], [ "", "getattr" ], [ "", "str" ], [ "", "str" ], [ "", "isinstance" ], [ "", "errors.append" ], [ "", "format_expected" ], [ "", "type" ], [ "", "errors.append" ], [ "", "isinstance" ], [ "", "errors.append" ], [ "", "type" ], [ "", "enumerate" ], [ "", "check_type" ], [ "", "isinstance" ], [ "", "errors.append" ], [ "", "type" ], [ "", "len" ], [ "", "enumerate" ], [ "", "check_type" ], [ "", "len" ], [ "", "len" ], [ "", "enumerate" ], [ "", "zip" ], [ "", "check_type" ], [ "", "errors.append" ], [ "", "len" ], [ "", "len" ], [ "", "isinstance" ], [ "", "errors.append" ], [ "", "type" ], [ "", "len" ], [ "", "len" ], [ "", "value.items" ], [ "", "repr" ], [ "", "check_type" ], [ "", "check_type" ], [ "", "isinstance" ], [ "", "errors.append" ], [ "", "type" ], [ "", "repr" ], [ "", "check_type" ], [ "", "isinstance" ], [ "", "errors.append" ], [ "", "format_expected" ], [ "", "type" ], [ "", "errors.append" ], [ "", "bool" ], [ "", "errors.append" ], [ "", "format_expected" ], [ "", "type" ], [ "", "errors.append" ], [ "", "isinstance" ], [ "", "bool" ], [ "", "errors.append" ], [ "", "type" ], [ "", "errors.append" ], [ "", "get_origin" ], [ "", "getattr" ], [ "", "getattr" ], [ "", "mapping.get" ], [ "", "get_args" ], [ "", "getattr" ], [ "", "resolve_origin_and_args" ], [ "", "hasattr" ], [ "", "check_type" ], [ "", "\" or \".join" ], [ "", "format_expected" ], [ "", "errors.append" ], [ "", "type" ], [ "", "bool" ], [ "", "errors.append" ], [ "", "format_expected" ], [ "", "type" ], [ "", "errors.append" ], [ "", "check_generic_container" ], [ "", "isinstance" ], [ "", "errors.append" ], [ "", "format_expected" ], [ "", "type" ], [ "", "getattr" ], [ "", "str" ], [ "", "bool" ], [ "", "errors.append" ], [ "", "type" ], [ "", "errors.append" ], [ "", "errors.append" ], [ "", "getattr" ], [ "", "inspect.signature" ], [ "", "list" ], [ "", "sig.parameters.values" ], [ "", "getattr" ], [ "", "dict" ], [ "", "vars" ], [ "", "locals.update" ], [ "", "get_type_hints" ], [ "", "get_type_hints" ], [ "", "type_hints.get" ], [ "", "checks.append" ], [ "", "type" ], [ "", "get_origin" ], [ "", "get_args" ], [ "", "any" ], [ "", "type" ], [ "", "bound_args.get" ], [ "", "none_allowed" ], [ "", "check_type" ], [ "", "wraps" ], [ "", "sig.bind" ], [ "", "bound.apply_defaults" ], [ "", "ValidationError" ], [ "", "str" ], [ "", "str" ], [ "", "check_types" ], [ "", "ValidationError" ], [ "", "\"\\n\".join" ], [ "", "inspect.iscoroutinefunction" ], [ "", "wraps" ], [ "", "sig.bind" ], [ "", "bound.apply_defaults" ], [ "", "ValidationError" ], [ "", "str" ], [ "", "str" ], [ "", "check_types" ], [ "", "ValidationError" ], [ "", "\"\\n\".join" ], [ "", "decorator" ], [ "", "ValueError" ], [ "", "isinstance" ], [ "", "expand_rule" ], [ "", "isinstance" ], [ "", "len" ], [ "", "ValueError" ], [ "", "repr" ], [ "", "expand_shorthand_rule" ], [ "", "isinstance" ], [ "", "expand_shorthand_rule" ], [ "", "child_path" ], [ "", "rule.items" ], [ "", "check_rule_dict" ], [ "", "expand_shorthand_rule" ], [ "", "child_path" ], [ "", "rule[\"fields\"].items" ], [ "", "isinstance" ], [ "", "expand_shorthand_rule" ], [ "", "rule[\"items\"][\"fields\"].items" ], [ "", "expand_rule" ], [ "", "isinstance" ], [ "", "OrderedDict" ], [ "", "dict_rules.append" ], [ "", "expand_shorthand_rule" ], [ "", "data.get" ], [ "", "has_nested_rules" ], [ "", "validate_object_engine" ], [ "", "hasattr" ], [ "", "dict" ], [ "", "zip" ], [ "", "data.keys" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "rest.startswith" ], [ "", "rest.startswith" ], [ "", "len" ], [ "", "s.find" ], [ "", "rest.find" ], [ "", "is_pipe_delimiter" ], [ "", "tokens.append" ], [ "", "rest.find" ], [ "", "tokens.append" ], [ "", "float" ], [ "", "int" ], [ "", "fn" ], [ "", "pipe_tokenize" ], [ "", "tokens[0].strip" ], [ "", "set" ], [ "", "PARAMETERIZED_RE.match" ], [ "", "TypeError" ], [ "", "ValueError" ], [ "", "tuple" ], [ "", "item.strip" ], [ "", "v.split" ], [ "", "token.partition" ], [ "", "key.strip" ], [ "", "ValueError" ], [ "", "transforms.append" ], [ "", "split_csv" ], [ "", "require_value" ], [ "", "require_value" ], [ "", "tuple" ], [ "", "item.strip" ], [ "", "v.split" ], [ "", "set" ], [ "", "split_csv" ], [ "", "require_value" ], [ "", "ValueError" ], [ "", "require_value" ], [ "", "int" ], [ "", "ValueError" ], [ "", "require_value" ], [ "", "require_value" ], [ "", "require_value" ], [ "", "ValueError" ], [ "", "value.split" ], [ "", "len" ], [ "", "ValueError" ], [ "", "coerce_range_val" ], [ "", "parts[0].strip" ], [ "", "coerce_range_val" ], [ "", "parts[1].strip" ], [ "", "ValueError" ], [ "", "ValueError" ], [ "", "coerce_range_val" ], [ "", "coerce_range_val" ], [ "", "len" ], [ "", "chain_transforms" ], [ "", "isinstance" ], [ "", "TypeError" ], [ "", "len" ], [ "", "str" ], [ "", "ValueError" ], [ "", "expand_pipe_rule" ], [ "", "rule.split(\":\")[0].strip" ], [ "", "rule.split" ], [ "", "set" ], [ "", "TypeError" ], [ "", "rule.split" ], [ "", "rule.split" ], [ "", "without_msg.split" ], [ "", "without_msg.split" ], [ "", "len" ], [ "", "rule.split" ], [ "", "ValueError" ], [ "", "rule.split" ], [ "", "len" ], [ "", "rule.split" ], [ "", "rule.split" ], [ "", "length.isdigit" ], [ "", "int" ], [ "", "isinstance" ], [ "", "expanded_rules.append" ], [ "", "expand_rule_string" ], [ "", "isinstance" ], [ "", "check_rule_dict" ], [ "", "expanded_rules.append" ], [ "", "isinstance" ], [ "", "expanded_rules.append" ], [ "", "expand_rule_string" ], [ "", "isinstance" ], [ "", "check_rule_dict" ], [ "", "expanded_rules.append" ], [ "", "TypeError" ], [ "", ".engine" ], [ "", ".engine.MAX_NESTING_DEPTH" ], [ "", ".engine.ValidationError" ], [ "", ".engine._has_nested_rules" ], [ "", ".engine.validate_object_engine" ], [ "", "Any" ], [ "", "Callable" ], [ "", "Dict" ], [ "", "List" ], [ "", "Optional" ], [ "", "OrderedDict" ], [ "", "Tuple" ], [ "", "Union" ], [ "", "collections" ], [ "", "compile" ], [ "", "difflib" ], [ "", "functools" ], [ "", "get_args" ], [ "", "get_origin" ], [ "", "get_type_hints" ], [ "", "getfullargspec" ], [ "", "inspect" ], [ "", "iscoroutinefunction" ], [ "", "re" ], [ "", "sys" ], [ "", "types" ], [ "", "typing" ], [ "", "typing" ], [ "", "wraps" ] ], "mbr": [ "_PARAMETERIZED_RE.match", "_locals.update", "_typing.Dict", "_typing.FrozenSet", "_typing.List", "_typing.Set", "_typing.Tuple", "_typing.Type", "bound.apply_defaults", "bound.arguments", "bound_args.get", "checks.append", "data.get", "data.keys", "dict_rules.append", "difflib.get_close_matches", "errors.append", "expanded_rule.keys", "expanded_rules.append", "f.__module__", "first.kind", "first.name", "func_data.keys", "func_data.update", "inspect.Parameter", "inspect.Parameter.POSITIONAL_ONLY", "inspect.Parameter.POSITIONAL_OR_KEYWORD", "inspect.Parameter.VAR_KEYWORD", "inspect.Parameter.VAR_POSITIONAL", "inspect._empty", "inspect.iscoroutinefunction", "inspect.signature", "item.strip", "k.endswith", "key.strip", "kwargs.keys", "kwargs.values", "length.isdigit", "mapping.get", "messages.append", "p.default", "p.kind", "p.name", "param.VAR_KEYWORD", "param.VAR_POSITIONAL", "param.annotation", "param.default", "param.empty", "param.kind", "param.name", "rest.find", "rest.startswith", "result.data", "result.errors", "result.ok", "rule.fields", "rule.fields.items", "rule.items", "rule.items.fields", "rule.items.fields.items", "rule.split", "rule_dict.expression", "rule_dict.items", "rule_dict.length", "rule_dict.message", "rule_dict.range", "rule_dict.region", "rule_dict.transform", "rule_dict.type", "s.find", "sig.bind", "sig.parameters", "sig.parameters.values", "str.lower", "str.lstrip", "str.rstrip", "str.strip", "str.title", "str.upper", "sys.version_info", "token.partition", "tokens.append", "transformed.values", "transforms.append", "type().__name__", "type_hints.get", "types.UnionType", "v.split", "value.items", "value.split", "without_msg.split" ], "tgt": [ "EmptyObject", "OrderedDict", "TypeError", "ValidationError", "ValueError", "_PARAMETERIZED_RE.match", "_align_func_data", "_chain_transforms", "_check_generic_container", "_check_rule_dict", "_check_type", "_coerce_range_val", "_expand_pipe_rule", "_expand_shorthand_rule", "_extract_func_spec", "_format_expected", "_has_nested_rules", "_is_pipe_delimiter", "_locals.update", "_none_allowed", "_pipe_tokenize", "_re_compile", "_require_value", "_resolve_origin_and_args", "_split_csv", "any", "bool", "bound.apply_defaults", "bound_args.get", "check_types", "checks.append", "child_path", "data.get", "data.keys", "decorator", "dict", "dict_rules.append", "difflib.get_close_matches", "enumerate", "errors.append", "expand_rule", "expand_rule_string", "expanded_rules.append", "f", "float", "fn", "frozenset", "func", "func_data.keys", "func_data.update", "get_args", "get_origin", "get_type_hints", "getattr", "hasattr", "inspect.iscoroutinefunction", "inspect.signature", "int", "iscoroutinefunction", "isinstance", "item.strip", "k.endswith", "key.strip", "kwargs.keys", "kwargs.values", "len", "length.isdigit", "list", "mapping.get", "messages.append", "repr", "rest.find", "rest.startswith", "rule.fields.items", "rule.items", "rule.items.fields.items", "rule.split", "s.find", "set", "sig.bind", "sig.parameters.values", "str", "token.partition", "tokens.append", "transformed.values", "transforms.append", "tuple", "type", "type_hints.get", "v.split", "validate_data", "validate_object_engine", "value.items", "value.split", "vars", "without_msg.split", "wraps", "zip" ], "metrics": { "ast": { "op.add": 11.0, "op.bor": 16.0, "op.lor": 10.0, "op.mul": 1.0, "op.sub": 4.0, "op.land": 21.0, "max_depth": 23.0, "bind_count": 155.0, "call_count": 316.0, "node_count": 9127.0, "member_count": 91.0, "op_density.add": 0.0, "op_density.bor": 0.0, "op_density.lor": 0.0, "op_density.mul": 0.0, "op_density.sub": 0.0, "op_density.land": 0.0, "identifier_count": 256.0, "member_depth_max": 4.0, "string_literal_count": 293.0, "array_literal_max_length": 29.0, "numeric_array_max_length": 2.0, "string_return_function_count": 2.0, "string_return_function_ratio": 0.05, "string_concat_chain_max_length": 2.0 }, "file": { "size": 38473.0, "entropy": 4.43, "size_bytes": 38473.0 }, "text": { "digit_ratio": 0.0, "space_count": 12063.0, "total_lines": 1170.0, "char_entropy": 4.43, "unique_chars": 96.0, "string_density": 0.25, "ascii_art_lines": 4.0, "avg_line_length": 31.88, "high_byte_ratio": 0.0, "max_line_length": 133.0, "non_ascii_ratio": 0.0, "empty_line_ratio": 0.15, "last_line_length": 25.0, "whitespace_ratio": 0.34, "most_common_ratio": 0.06, "identifier_density": 1.51, "line_length_stddev": 25.04, "normalized_string_count": 8.57, "repeated_char_sequences": 394.0, "suspicious_string_ratio": 0.02, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 0.02, "max_inline_whitespace_run": 2.0, "trailing_whitespace_lines": 4.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.04, "normalized_unique_identifiers": 25.12 }, "binds": { "count": 155.0 }, "calls": { "count": 316.0 }, "binary": { "overall_entropy": 4.43, "peak_region_bytes": 10240.0, "peak_region_entropy": 4.95 }, "source": { "class_count": 2.0, "function_count": 32.0 }, "imports": { "count": 29.0, "stdlib_count": 9.0, "stdlib_ratio": 0.31, "relative_ratio": 0.17, "unique_modules": 29.0, "aliased_imports": 2.0, "relative_imports": 5.0, "third_party_count": 20.0, "third_party_ratio": 0.69 }, "members": { "count": 91.0 }, "strings": { "total": 293.0, "avg_length": 22.12, "max_length": 615.0, "avg_entropy": 2.48, "empty_count": 9.0, "sql_strings": 3.0, "total_bytes": 6481.0, "entropy_stddev": 1.13, "shell_command_strings": 2.0, "embedded_code_candidates": 1.0 }, "comments": { "chars": 3886.0, "lines": 82.0, "total": 82.0, "to_code_ratio": 0.08, "high_entropy_comments": 2.0 }, "functions": { "count": 34.0, "avg_params": 2.29, "max_params": 7.0, "length_stddev": 43.25, "over_100_lines": 5.0, "avg_name_length": 13.09, "avg_length_lines": 38.8, "max_length_lines": 160.0, "min_length_lines": 2.0, "nested_functions": 8.0, "avg_nesting_depth": 0.54, "max_nesting_depth": 2.0, "high_entropy_names": 2.0, "single_char_params": 9.0, "avg_param_name_length": 6.04, "density_per_100_lines": 2.99, "code_in_functions_ratio": 1.16 }, "identifiers": { "count": 256.0, "total": 1770.0, "avg_length": 8.36, "max_length": 24.0, "min_length": 1.0, "avg_entropy": 2.48, "reuse_ratio": 0.14, "unique_count": 256.0, "length_stddev": 4.81, "has_digit_ratio": 0.0, "sequential_names": 10.0, "single_char_count": 11.0, "single_char_ratio": 0.04, "high_entropy_count": 11.0, "high_entropy_ratio": 0.04, "all_lowercase_ratio": 0.85, "all_uppercase_ratio": 0.07, "double_underscore_count": 4.0, "underscore_prefix_count": 44.0 } } }, "id": 5, "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata/validatedata.py", "risk": 1, "sha": "66080662e6e60f1be244b98288ebfa363eb0703c5b6ada36f817611a601de377", "size": 38473, "traits": [ { "id": "objectives/credential-access/theft/keywords::token", "conf": 0.30000001192092896, "crit": 1, "desc": "Credential-access vocabulary word: token", "spans": [ [ 30941, 5 ] ] }, { "id": "metadata/file/extension/identity::py", "conf": 1.0, "crit": 2, "desc": "Python file extension", "spans": [ [ 0, 15 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Script overall entropy stays low", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/file/profile/identity::sequential-identifiers", "conf": 0.800000011920929, "crit": 2, "desc": "Sequential source identifier names", "spans": [ [ 0, 36 ] ] } ], "type": "python" }, { "ctx": [ { "b": "boRery?WA*By!#\u003eByu?yB.\u003eRwAcR", "n": [ { "c": 2, "d": "Python file extension", "i": "metadata/file/extension/identity::py", "o": 0, "z": 7, "cf": 1.0 } ], "ln": 1, "addr": 0 }, { "b": "a%Fi", "ln": 2, "addr": 23 }, { "b": "qGV!!aMv{oazbt0y?aV0wPIv4x(FfjAV!$jAV^?WB97b{wmYNf", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 53, "z": 3, "cf": 0.800000011920929 } ], "ln": 3, "addr": 27 }, { "b": "", "ln": 4, "addr": 68 }, { "b": "k{f6Fy?j-0vrcy5wPF#oxMvV}ay/tcv}xW#B0bgmaA8deaA7.7wN/*y", "ln": 5, "addr": 69 }, { "b": "arSA(axi2=ay]4}vrDydaA?gfB.8WGazb4(Bz(hBazbLjaARpdazbt0y?bc", "ln": 8, "addr": 172 }, { "b": "arSD)avdb^vr#T7C}AJAze:i9wN({5vqf:8c$maky-)j@y\u00260J?y?kduuQF:GAa%c1wkWL^wGV5oA=\u003e(ldiJ.CvrrSaA@", "ln": 9, "addr": 220 }, { "b": "arR^Hay!?\u0026xK$Y%vp\u003cQ)AV/EqwGUP0A=VsBv@Dj6x(4uediJbey?$k5zE:(gwP-69wft/daz2.cA^n^wzGx]dzEWlg", "n": [ { "c": 1, "d": "compile keyword", "i": "objectives/anti-static/obfuscation/payload/bytecode::compile-word", "o": 322, "z": 7, "cf": 1.0 } ], "ln": 10, "addr": 294 }, { "b": "", "ln": 11, "addr": 367 }, { "b": "p?:(WaAITBx(mMaB9RUBvr-]aCWUDdy?mU", "ln": 12, "addr": 368 }, { "b": "arR^HarR^HBAhT/", "ln": 146, "addr": 5150 }, { "b": "arR^HarR^HarR^HA+funA=91fz/x$OwmYs\u003ev@Dsid05%ow?ER9w)]*#Bsv", "ln": 147, "addr": 5163 }, { "b": "arR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiS", "n": [ { "c": 2, "d": "Error handling keywords", "i": "micro-behaviors/crypto/symmetric/fernet::error-handling-keywords", "o": 5218, "z": 16, "cf": 1.0 } ], "ln": 148, "addr": 5210 }, { "b": "arR^HarR^HarR^HA+funA=91vwO+%hwmYvYB.(d", "ln": 149, "addr": 5236 }, { "b": "", "ln": 150, "addr": 5268 }, { "b": "arR^HarR^HwO=6)azC[hzGx]dzEWlavQTs?efFFqv@%dX", "ln": 170, "addr": 5975 }, { "b": "arR^HarR^HarR^Hx(d*cA=-BsB8L{", "ln": 171, "addr": 6012 }, { "b": "arR^HarR^HarR^HA=(hfuVQsfauZ\u0026ZB8L}Gwoz:dB0$HaB7D)BB8M8vuU:j#B3iGyB.90", "n": [ { "c": 2, "d": "Python json.dumps call", "i": "micro-behaviors/data/serialize/json::json-dumps-call", "o": 6059, "z": 10, "cf": 0.8999999761581421 } ], "ln": 172, "addr": 6036 }, { "b": "arR^HarR^HboQ=Cvrc14ePkJyC{4fwz/P@kvqYP", "ln": 173, "addr": 6092 }, { "b": "arR^HarR^HwO=6)aAIagw?E\u003eyvrc14iS", "ln": 174, "addr": 6124 }, { "b": "arR^HarR^HA+funA=91uB.\u003eR@B98B", "ln": 195, "addr": 6958 }, { "b": "", "ln": 196, "addr": 6982 }, { "b": "arR^HwmYu}v@Dj6x(4ueB7Gf1dlm", "n": [ { "c": 3, "d": "Python dynamic code evaluation", "i": "objectives/execution/interpreter/eval/invoke::python-eval", "o": 6987, "z": 7, "cf": 0.5 } ], "ln": 197, "addr": 6983 }, { "b": "arR^HarR^Ha%Fi", "ln": 198, "addr": 7006 }, { "b": "arR^HarR^HoKSlYy\u003cvdkz/6Dcy?j-hzY*Dqz/oD0v{%g\u0026vpB4:efFp!z/6Dcy?mcPB.\u003eRiD(#g5zE\u003emH", "ln": 199, "addr": 7018 } ], "depth": 2, "facts": { "imp": [ [ "", "object" ], [ "", "isinstance" ], [ "", "dict" ], [ "", "callable" ], [ "", "type" ], [ "", "type" ], [ "", "self._default_factory" ], [ "", "copy.deepcopy" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "json.dumps" ], [ "", "self.kwargs.pop" ], [ "", "self.kwargs.pop" ], [ "", "parts.append" ], [ "", "str" ], [ "", "self.kwargs.items" ], [ "", "parts.append" ], [ "", "parts.append" ], [ "", "parts.append" ], [ "", "\"|\".join" ], [ "", "rule_str.split" ], [ "", "get_compiled_modules" ], [ "", "self._resolve_rule_string" ], [ "", "fast_get_compiled_rule" ], [ "", "compiled_validator" ], [ "", "self.compile" ], [ "", "bool" ], [ "", "fn" ], [ "", "parts.append" ], [ "", "repr" ], [ "", "parts.append" ], [ "", "parts.append" ], [ "", "parts.append" ], [ "", "parts.append" ], [ "", "parts.extend" ], [ "", "self.kwargs.items" ], [ "", "', '.join" ], [ "", ".compiled" ], [ "", ".fast" ], [ "", "Any" ], [ "", "Callable" ], [ "", "Optional" ], [ "", "copy" ], [ "", "dataclass" ], [ "", "dataclasses" ], [ "", "field" ], [ "", "json" ], [ "", "typing" ] ], "mbr": [ "_c.validator", "_f._get_compiled_rule", "copy.deepcopy", "cr.fast_validator", "json.dumps", "parts.append", "parts.extend", "rule_str.split", "self._compiled", "self._compiled_struct", "self._default_factory", "self._resolve_rule_string", "self.compile", "self.default", "self.init_new", "self.kwargs", "self.kwargs.items", "self.kwargs.pop", "self.nullable", "self.rule" ], "tgt": [ "_get_compiled_modules", "bool", "callable", "compiled_validator", "copy.deepcopy", "dict", "fast_get_compiled_rule", "fn", "isinstance", "json.dumps", "object", "parts.append", "parts.extend", "repr", "rule_str.split", "self._default_factory", "self._resolve_rule_string", "self.compile", "self.kwargs.items", "self.kwargs.pop", "str", "type", "type()" ], "metrics": { "ast": { "op.add": 1.0, "op.lor": 2.0, "op.land": 5.0, "max_depth": 18.0, "bind_count": 40.0, "call_count": 37.0, "node_count": 1489.0, "member_count": 20.0, "op_density.add": 0.0, "op_density.lor": 0.0, "op_density.land": 0.0, "identifier_count": 77.0, "member_depth_max": 3.0, "string_literal_count": 30.0, "array_literal_max_length": 8.0, "string_concat_chain_max_length": 2.0 }, "file": { "size": 9510.0, "entropy": 4.49, "size_bytes": 9510.0 }, "text": { "digit_ratio": 0.0, "space_count": 2452.0, "total_lines": 263.0, "char_entropy": 4.49, "unique_chars": 85.0, "string_density": 0.11, "ascii_art_lines": 10.0, "avg_line_length": 35.16, "high_byte_ratio": 0.0, "max_line_length": 87.0, "non_ascii_ratio": 0.0, "empty_line_ratio": 0.14, "last_line_length": 42.0, "whitespace_ratio": 0.29, "most_common_ratio": 0.07, "identifier_density": 1.22, "line_length_stddev": 24.08, "normalized_string_count": 1.85, "repeated_char_sequences": 80.0, "suspicious_string_ratio": 0.13, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 0.04, "max_inline_whitespace_run": 23.0, "most_common_char_codepoint": 45.0, "suspicious_identifier_ratio": 0.05, "normalized_unique_identifiers": 9.58 }, "binds": { "count": 40.0 }, "calls": { "count": 37.0 }, "binary": { "overall_entropy": 4.49, "peak_region_bytes": 8486.0, "peak_region_entropy": 4.59 }, "source": { "class_count": 1.0, "function_count": 8.0 }, "imports": { "count": 12.0, "stdlib_count": 4.0, "stdlib_ratio": 0.33, "relative_ratio": 0.25, "unique_modules": 12.0, "aliased_imports": 2.0, "relative_imports": 3.0, "third_party_count": 8.0, "third_party_ratio": 0.67 }, "members": { "count": 20.0 }, "strings": { "total": 30.0, "avg_length": 111.93, "max_length": 1351.0, "avg_entropy": 2.93, "sql_strings": 2.0, "total_bytes": 3358.0, "entropy_stddev": 1.15, "very_long_strings": 2.0, "shell_command_strings": 2.0 }, "comments": { "chars": 1053.0, "lines": 24.0, "total": 24.0, "to_code_ratio": 0.1, "high_entropy_comments": 1.0 }, "functions": { "count": 9.0, "avg_params": 1.88, "max_params": 8.0, "length_stddev": 15.22, "avg_name_length": 11.75, "no_params_count": 1.0, "avg_length_lines": 19.88, "max_length_lines": 41.0, "min_length_lines": 2.0, "many_params_count": 1.0, "high_entropy_names": 1.0, "single_char_params": 1.0, "avg_param_name_length": 5.47, "density_per_100_lines": 3.04, "code_in_functions_ratio": 0.6 }, "identifiers": { "count": 77.0, "total": 322.0, "avg_length": 7.52, "max_length": 23.0, "min_length": 1.0, "avg_entropy": 2.26, "reuse_ratio": 0.24, "unique_count": 77.0, "length_stddev": 5.24, "sequential_names": 4.0, "single_char_count": 5.0, "single_char_ratio": 0.06, "high_entropy_count": 8.0, "high_entropy_ratio": 0.1, "all_lowercase_ratio": 0.92, "all_uppercase_ratio": 0.03, "double_underscore_count": 3.0, "underscore_prefix_count": 16.0 } } }, "id": 6, "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata/rule.py", "risk": 1, "sha": "633d38d86f68276b3a9dced7065778bd04b648d05065ccc417986d83ec426540", "size": 9510, "traits": [ { "id": "micro-behaviors/data/serialize/json::json-dumps-call", "conf": 0.8999999761581421, "crit": 2, "desc": "Python json.dumps call", "spans": [ [ 6059, 10 ] ] }, { "id": "metadata/file/extension/identity::py", "conf": 1.0, "crit": 2, "desc": "Python file extension", "spans": [ [ 0, 7 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Script overall entropy stays low", "spans": [ [ 0, 29 ] ] } ], "type": "python" }, { "ctx": [ { "b": "w].*baywF/B-.+DwNw^!x(d*cA=-BjzF\u003cxmvruj4zGt", "n": [ { "c": 2, "d": "Python file extension", "i": "metadata/file/extension/identity::py", "o": 0, "z": 9, "cf": 1.0 } ], "ln": 1, "addr": 0 }, { "b": "", "ln": 2, "addr": 35 }, { "b": "x(d*cA=-BrAa9o/A+frk", "ln": 3, "addr": 36 }, { "b": "arR^HwPz*fA=Su:ay]g@Bx-*dAX5tHx(!x2B98Cdt(", "ln": 33, "addr": 811 }, { "b": "arR^HarR^Hq/)55v@#\u003clwN(]{A=M8sB0bmfD1yIevTf8dx\u003eq9\u003eaz$R8wIb8Fo(BMNy+oEmC4CFjwPz*fA=SuKw].*b", "ln": 34, "addr": 845 }, { "b": "arR^HarR^Hu%)?\u0026wmYN:v}YB-yHyK0ayPq4aAITyA+e=7B-7-3AV/EqwGUw*b41X]z!9A}uTC0+u)6k@C}G", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 960, "z": 3, "cf": 0.800000011920929 } ], "ln": 35, "addr": 918 }, { "b": "arR^HarR^Hl2p:ND2\u003e9EA+fr6zGE@.wO(ydC{3Tiv@@\u0026qxK#67BzbkdwQ4Y@Acb/jzxKdiB0bHix(^\u0026@aA}KwxDQZ", "ln": 36, "addr": 985 }, { "b": "arR^HarR^HAbn@%zxK1xA+PA7asH!Nxd+rsA=k!qzF%zAmQZvWo(BMNy-)j@y\u00260W6B15Z", "ln": 37, "addr": 1057 }, { "b": "arR^HarR^HBAhT/", "ln": 41, "addr": 1140 }, { "b": "arR^HarR^HarR^HrDz.(d0oPxA=br5wJ.kCa$K\u003cFzddc{jTauzwfJD", "ln": 42, "addr": 1153 }, { "b": "arR^HarR^HwQ4Y@Ac9j6vqGT*vruj4zBFO^z/M$eB0b4sv(:", "n": [ { "c": 2, "d": "except keyword (Python)", "i": "metadata/package/error-handling::except-keyword", "o": 1205, "z": 6, "cf": 0.5 } ], "ln": 43, "addr": 1197 }, { "b": "arR^HarR^HarR^HwQ4YqwPz*fA=R", "ln": 44, "addr": 1236 }, { "b": "arR^HarR^HarR^HboRs", "ln": 45, "addr": 1259 }, { "b": "arR^HarR^HarR^HAa9^eB09Q*tu}", "ln": 58, "addr": 1820 }, { "b": "arR^HarR^HarR^Hw]zYjw[+*)wgO\u003cuwPI{3xjVcbx(k5gwPI{3xjUB*A:Jx#A=k#te[]Aszf49OiS", "ln": 59, "addr": 1843 }, { "b": "arR^HarR^HarR^HarR^Hw]zYjzf6tjx(k5gwPI{3xjVcB", "n": [ { "c": 2, "d": "Iteration or loop pattern", "i": "micro-behaviors/data/control-flow/analysis::iteration-loop-pattern", "o": 1920, "z": 12, "cf": 0.5 } ], "ln": 60, "addr": 1905 }, { "b": "arR^HarR^HarR^HarR^HarR^HAa9^eB1Q)uAaJ]$c#B3razCBgw[+*)wfs2#ar\u003ef1zeS@@y*QJ[az2wgwGUOeDUc#6y?d@PaBv%Dxmg%M", "ln": 61, "addr": 1942 }, { "b": "arR^HarR^HarR^HB9hCkAWSv?uTEI+x()Y?c)z]la$^RGx(ktrvrcEhdjC", "ln": 62, "addr": 2027 }, { "b": "arR^HAWLfwxMOunB3C4:Bz@V\u0026fe1W", "ln": 81, "addr": 2673 }, { "b": "arR^HAWJn1iW^iNtr%\u0026AfFbp\u003cc{G:%k}Mm]eJCy*DOv0ef[0m(eM%?WiBa6#tRmDQc{G:%k}MnCDONcgEoXx?D%n(*s$?J*eNrYUepy+QkpH$c", "ln": 82, "addr": 2697 }, { "b": "arR^HAWLWwv{%g!z/Z2FcJ", "n": [ { "c": 3, "d": "Python local HTTPS proxy marker", "i": "objectives/evasion/security-bypass/tls::python-local-https-proxy-marker", "o": 2792, "z": 9, "cf": 0.8999999761581421 } ], "ln": 83, "addr": 2786 }, { "b": "arR^HAWLa5DOE6cEoXyfwp33ZgKSHXtX5goehIYVe)I}lf!tbedjk", "ln": 84, "addr": 2804 }, { "b": "arR^HAWJn1iYZIRd\u003e9Xg", "ln": 85, "addr": 2847 }, { "b": "arR^HarR^HarR^HAa9^dwN(]DaAh1jzE)Zdzdm6%B1RAuA=U!uB1wCOwOkZ}zyDXJar@1HwOkZ}zxJL9CSD%\u003evriM8vrb)*z!9A\u0026awM\u0026)wD", "ln": 288, "addr": 10407 }, { "b": "arR^HarR^HarR^HA+funA=91sxM4^1zGP/9wPz\u0026Ax(^T8vqGT*uV716vR6NdAa9^dwN)j", "ln": 289, "addr": 10493 }, { "b": "arR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiS", "n": [ { "c": 2, "d": "Error handling keywords", "i": "micro-behaviors/crypto/symmetric/fernet::error-handling-keywords", "o": 10557, "z": 16, "cf": 1.0 } ], "ln": 290, "addr": 10549 }, { "b": "arR^HarR^HarR^HA+funA=90?vqH0@", "ln": 291, "addr": 10575 }, { "b": "arR^HwQ4Y@Ac9i]ze:AlBvyj\u003cz/N(", "n": [ { "c": 2, "d": "ImportError exception", "i": "micro-behaviors/data/control-flow/error-handling::importerror-keyword", "o": 10611, "z": 11, "cf": 0.6000000238418579 } ], "ln": 292, "addr": 10600 }, { "b": "arR^HarR^HA:-W6wGTMYAbP=smriA!AWQ", "ln": 293, "addr": 10624 }, { "b": "arR^HarR^HarR^Hw*g5+z/fbew]zZbvrrRtDUdbpEj3dTwPq\u003cbA+fqmBzbkdAa\u003cfcwO#TcvR6O3aAg+0yHH\u003c!e*8t", "ln": 294, "addr": 10651 }, { "b": "arR^HarR^HarR^Hb1VV[Byx04azC{uCwhejiV@xQA3e\u003ejB97\u0026by-)Xgz/fc7B.$P0A=SA", "n": [ { "c": 3, "d": "Python package installation via pip", "i": "micro-behaviors/os/package-manager/install::pip-installation", "o": 10753, "z": 11, "cf": 0.800000011920929 } ], "ln": 295, "addr": 10723 }, { "b": "arR^HarR^Hdf", "ln": 296, "addr": 10779 }, { "b": "", "ln": 297, "addr": 10789 }, { "b": "arR^Hc)@}LBzkVhB0\u0026HYarR!IvqGT*vru6/z/x/jz/fRBec", "ln": 513, "addr": 17936 }, { "b": "arR^Hc)@OJAb]JhB7]MgcOcx-vqGT*vru6/wQ5fmwPI{bz/d0P", "ln": 514, "addr": 17974 }, { "b": "arR^Hc)%7TvrcEhCwhejcOcx-vqGT*vru6/B97\u0026hBAqUuBz99O", "n": [ { "c": 2, "d": "Logic to parse/split hash data", "i": "micro-behaviors/data/parse/analysis::hash-parsing-startswith", "o": 18021, "z": 10, "cf": 0.6000000238418579 } ], "ln": 515, "addr": 18015 }, { "b": "arR^Hc)@Ozwoh%eBz93MarR!IvqGT*vru6/wO#41Cwhejdj+", "ln": 516, "addr": 18056 }, { "b": "arR^Hc)%dPx(OobcOcw.arR!IvqGT*vru6/B-7]kB.90M", "ln": 517, "addr": 18095 }, { "b": "arR^HarR^HB8bGeauZ\u0026VA=lnnzGxxhd0)sNx\u003eq9\u003eB0\u0026HYcUWWlzf46QasyYhAaJ]$B6\u0026\u003c6cOcw/BAg/cB7Puhz6{\u003eScVrEewN/*fEjk", "ln": 574, "addr": 20259 }, { "b": "arR^HarR^HA+f5#C42ogauZ\u0026]yDrOYazbLjazSIJB%7HpaAzQvwNw$Zv@%tqBy/rgc[coMw/$\u003eizF%Rtx(k5myIv:o", "ln": 575, "addr": 20342 }, { "b": "arR^HarR^HA+funA=91mB8L}Gwoz:dB0#6uy?m=#zGEALB8M8vuU:j#B3iGyB.90", "n": [ { "c": 2, "d": "Python json.dumps call", "i": "micro-behaviors/data/serialize/json::json-dumps-call", "o": 20430, "z": 10, "cf": 0.8999999761581421 } ], "ln": 576, "addr": 20415 }, { "b": "arR^HwQ4Y@Ac9iJrc-B]mriA!AX5tlvqH6$mriA!AW:3", "ln": 577, "addr": 20467 }, { "b": "arR^HarR^HA+funA=90{z/fa", "ln": 578, "addr": 20503 }, { "b": "boP*6x(w3aBA][", "ln": 701, "addr": 24628 }, { "b": "boO9Kf!KO?B.\u003eR@wnbK}e[X:qc)}b$B.\u003eR@yH}=PeP26uB75Y)cN*eXaz0fre*8JZvqYZ?eP26uB75Y)cJ", "ln": 702, "addr": 24640 }, { "b": "boO9Kga\u003cX\u0026B.\u003eR@wnbK}e[X:qc)@\u003eyB8$=5wHw]", "n": [ { "c": 1, "d": "Extracts payload from JSON message field", "i": "objectives/command-and-control/dropper/delivery/fetch-eval::json-message-field", "o": 24722, "z": 14, "cf": 0.8999999761581421 } ], "ln": 703, "addr": 24706 }, { "b": "boO9KgCf!YA=M1HxjVfkcUv77y?c)nwPz*fA:JP[C%iP8arR^HarR^HaA8dlC{4rAwO@S5x\u003eq9\u003euV6p?wGUYdaARTDBzb}", "ln": 704, "addr": 24738 }, { "b": "boO9Kg+G[ZA=M1HxjVfkcP\u003e%XA=k#9yH}=PcN/", "ln": 705, "addr": 24814 }, { "b": "arR^Hdf", "ln": 1075, "addr": 38170 }, { "b": "", "ln": 1076, "addr": 38176 }, { "b": "arR^HBz\u003e@azxI7+uT[h5uV]\u003c#e]$PCc$vvzdf", "n": [ { "c": 1, "d": "Credential-access vocabulary word: token", "i": "objectives/credential-access/theft/keywords::token", "o": 38181, "z": 5, "cf": 0.30000001192092896 } ], "ln": 1077, "addr": 38177 }, { "b": "arR^HBAhT/", "ln": 1078, "addr": 38207 }, { "b": "arR^HarR^HuVHpbuV]\u003c]x\u003egT]wNxv+ygQ)%c$D+dvjSKwB.\u003eSgefFFmw)]*#BAn#Qv@#@DaAg+fwO#P%Aa9\u003c4jTRQday]55Bz9/\u003edf", "ln": 1079, "addr": 38216 }, { "b": "arR^H", "ln": 1111, "addr": 39487 }, { "b": "v@bN{B0a*SvpJ$Zpgn0JB8UL$wJx", "ln": 1112, "addr": 39492 }, { "b": "arR^Ha%FjgxLzubxKL^?y?j-3z/M$xxK@r6z!a0bwI4.fC4CFjA=(hfay!?\u0026xK#lq", "n": [ { "c": 2, "d": "Script overall entropy stays low", "i": "metadata/file/metrics::low-overall-entropy-source", "o": 39522, "z": 29, "cf": 0.8999999761581421 } ], "ln": 1113, "addr": 39515 }, { "b": "", "ln": 1114, "addr": 39568 }, { "b": "arR^HrDzOYwJz\u003c", "ln": 1115, "addr": 39569 }, { "b": "", "ln": 1153, "addr": 41009 }, { "b": "", "ln": 1154, "addr": 41010 }, { "b": "v{@\u003eXwGTbUuQFmixK%}EzdN^cvpJ\u003c%df", "n": [ { "c": 2, "d": "python code embedded in string", "i": "metadata/lang/embedded::python", "o": 79044, "z": 195, "cf": 1.0 } ], "ln": 1155, "addr": 41011 } ], "depth": 2, "facts": { "imp": [ [ "", "isinstance" ], [ "", "message_or_errors.items" ], [ "", "parts.append" ], [ "", "super().__init__" ], [ "", "super" ], [ "", "\"\\n\".join" ], [ "", "super().__init__" ], [ "", "super" ], [ "", "str" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "re.compile" ], [ "", "int" ], [ "", "range" ], [ "", "int" ], [ "", "str(value).strip" ], [ "", "str" ], [ "", "bool" ], [ "", "HEX_COLOR_RE.match" ], [ "", "bool" ], [ "", "RGB_COLOR_RE.match" ], [ "", "bool" ], [ "", "HSL_COLOR_RE.match" ], [ "", "s.lower" ], [ "", "bool" ], [ "", "HEX_COLOR_RE.match" ], [ "", "bool" ], [ "", "RGB_COLOR_RE.match" ], [ "", "bool" ], [ "", "HSL_COLOR_RE.match" ], [ "", "s.lower" ], [ "", "isinstance" ], [ "", "any" ], [ "", "has_nested_rules" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "any" ], [ "", "has_nested_rules" ], [ "", "rules.values" ], [ "", "isinstance" ], [ "", "re.compile" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "frozenset" ], [ "", "dc_field" ], [ "", "dc_field" ], [ "", "dc_field" ], [ "", "self.errors.append" ], [ "", "self.errors.append" ], [ "", "self.errors[-1].append" ], [ "", "self.errors.append" ], [ "", "ValidationError" ], [ "", "len" ], [ "", "len" ], [ "", "all" ], [ "", "ContextVar" ], [ "", "str(value).strip" ], [ "", "str" ], [ "", "bool" ], [ "", "PHONE_E164_RE.match" ], [ "", "phonenumbers.parse" ], [ "", "phonenumbers.is_valid_number" ], [ "", "ImportError" ], [ "", "get_registered_checker" ], [ "", "custom_checker" ], [ "", "literal_eval" ], [ "", "str" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "parse_date" ], [ "", "len" ], [ "", "str" ], [ "", "str" ], [ "", "EMAIL_RE.match" ], [ "", "str" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "is_prime" ], [ "", "URL_RE.match" ], [ "", "str" ], [ "", "ipaddress.ip_address" ], [ "", "str" ], [ "", "uuid_lib.UUID" ], [ "", "str" ], [ "", "SLUG_RE.match" ], [ "", "str" ], [ "", "SEMVER_RE.match" ], [ "", "str" ], [ "", "is_valid_color" ], [ "", "check_phone" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "parse_date" ], [ "", "isinstance" ], [ "", "int" ], [ "", "float" ], [ "", "int" ], [ "", "len" ], [ "", "isinstance" ], [ "", "int" ], [ "", "float" ], [ "", "int" ], [ "", "len" ], [ "", "float" ], [ "", "float" ], [ "", "float" ], [ "", "float" ], [ "", "float" ], [ "", "isinstance" ], [ "", "len" ], [ "", "hasattr" ], [ "", "len" ], [ "", "len" ], [ "", "str" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "set" ], [ "", "str" ], [ "", "isinstance" ], [ "", "all" ], [ "", "isinstance" ], [ "", "set" ], [ "", "all" ], [ "", "str" ], [ "", "all" ], [ "", "isinstance" ], [ "", "any" ], [ "", "isinstance" ], [ "", "all" ], [ "", "re.compile" ], [ "", "ValidationError" ], [ "", "EXPRESSION_CACHE[pattern].match" ], [ "", "str" ], [ "", "isinstance" ], [ "", "bool" ], [ "", "str(value).startswith" ], [ "", "str" ], [ "", "isinstance" ], [ "", "bool" ], [ "", "str(value).endswith" ], [ "", "str" ], [ "", "isinstance" ], [ "", "len" ], [ "", "len" ], [ "", "set" ], [ "", "seen.append" ], [ "", "rule_dict.get" ], [ "", "parts.append" ], [ "", "'|'.join" ], [ "", "shape_key" ], [ "", "tuple" ], [ "", "frozenset" ], [ "", "rule_dict.items" ], [ "", "json.dumps" ], [ "", "rule_dict.get" ], [ "", "TypeSpec" ], [ "", "rule_dict.get" ], [ "", "rule_dict.get" ], [ "", "rule_dict.get" ], [ "", "rule_dict.get" ], [ "", "rule_dict.get" ], [ "", "rule_dict.get" ], [ "", "parse_date" ], [ "", "parse_date" ], [ "", "content_key" ], [ "", "shape_key" ], [ "", "set" ], [ "", "args.append" ], [ "", "build_range_arg" ], [ "", "args.append" ], [ "", "frozenset" ], [ "", "rule_dict.get" ], [ "", "args.append" ], [ "", "frozenset" ], [ "", "rule_dict.get" ], [ "", "args.append" ], [ "", "args.append" ], [ "", "rule_dict.get" ], [ "", "tuple" ], [ "", "rule_dict.get" ], [ "", "SIMPLE.get" ], [ "", "FN_TO_RULE_KEY.get" ], [ "", "rule_dict.get" ], [ "", "rule_dict.get" ], [ "", "errm.get" ], [ "", "errm.get" ], [ "", "rule_dict.get" ], [ "", "build_type_spec" ], [ "", "check_type" ], [ "", "TYPE_ERROR_KEY.get" ], [ "", "rule_dict.get" ], [ "", "rule_dict.get" ], [ "", "type" ], [ "", "errm.get" ], [ "", "errm.get" ], [ "", "raw.format" ], [ "", "errm.get" ], [ "", "raw.format" ], [ "", "errm.get" ], [ "", "errm.get" ], [ "", "errm.get" ], [ "", "ctx.add_error" ], [ "", "get_fns" ], [ "", "get_args" ], [ "", "zip" ], [ "", "fn" ], [ "", "logging.warning" ], [ "", "str" ], [ "", "error_key_for_fn" ], [ "", "resolve_message" ], [ "", "ctx.add_error" ], [ "", "rule_dict.get" ], [ "", "rule_dict.get" ], [ "", "transform.get" ], [ "", "transform.get" ], [ "", "func" ], [ "", "func" ], [ "", "callable" ], [ "", "transform" ], [ "", "rule_dict.get" ], [ "", "depends_on.get" ], [ "", "full_data.get" ], [ "", "depends_on.get" ], [ "", "callable" ], [ "", "condition" ], [ "", "depends_on.get" ], [ "", "str" ], [ "", "rule_dict.get" ], [ "", "ValueError" ], [ "", "list" ], [ "", "fields.values" ], [ "", "OrderedDict" ], [ "", "value.get" ], [ "", "fields.keys" ], [ "", "len" ], [ "", "len" ], [ "", "run_validate_object" ], [ "", "len" ], [ "", "dict" ], [ "", "zip" ], [ "", "fields.keys" ], [ "", "rule_dict.get" ], [ "", "all" ], [ "", "len" ], [ "", "enumerate" ], [ "", "build_path" ], [ "", "validate_type" ], [ "", "any" ], [ "", "check_type" ], [ "", "TypeSpec" ], [ "", "resolve_message" ], [ "", "ctx.add_error" ], [ "", "enumerate" ], [ "", "build_path" ], [ "", "items_rule.get" ], [ "", "handle_fields" ], [ "", "validate_type" ], [ "", "run_scalar_validators" ], [ "", "set" ], [ "", "defaults.keys" ], [ "", "set" ], [ "", "dict" ], [ "", "enumerate" ], [ "", "data.items" ], [ "", "build_path" ], [ "", "ctx.begin_field" ], [ "", "defaults.get" ], [ "", "ctx.transformed_data.append" ], [ "", "apply_transform" ], [ "", "check_depends_on" ], [ "", "ctx.transformed_data.append" ], [ "", "rule_dict.get" ], [ "", "handle_fields" ], [ "", "ctx.transformed_data.append" ], [ "", "rule_dict.get" ], [ "", "handle_items" ], [ "", "ctx.transformed_data.append" ], [ "", "validate_type" ], [ "", "ctx.transformed_data.append" ], [ "", "rule_dict.get" ], [ "", "ctx.transformed_data.append" ], [ "", "run_scalar_validators" ], [ "", "ctx.transformed_data.append" ], [ "", "enumerate" ], [ "", "build_path" ], [ "", "ctx.begin_field" ], [ "", "apply_transform" ], [ "", "rule_dict.get" ], [ "", "handle_fields" ], [ "", "ctx.transformed_data.append" ], [ "", "rule_dict.get" ], [ "", "handle_items" ], [ "", "ctx.transformed_data.append" ], [ "", "validate_type" ], [ "", "ctx.transformed_data.append" ], [ "", "rule_dict.get" ], [ "", "ctx.transformed_data.append" ], [ "", "run_scalar_validators" ], [ "", "ctx.transformed_data.append" ], [ "", "apply_transform" ], [ "", "run_scalar_validators" ], [ "", "ctx.transformed_data.append" ], [ "", "TypeError" ], [ "", "keywords.get" ], [ "", "keywords.get" ], [ "", "kwds.get" ], [ "", "kwds.get" ], [ "", "CallContext" ], [ "", "ctx_var.set" ], [ "", "run_validate_object" ], [ "", "ctx_var.reset" ], [ "", "SimpleNamespace" ], [ "", "extra_clear_callbacks.append" ], [ "", "FN_CACHE.clear" ], [ "", "ARGS_CACHE.clear" ], [ "", "EXPRESSION_CACHE.clear" ], [ "", "COMPILED_CACHE.clear" ], [ "", "cb" ], [ "", "len" ], [ "", "len" ], [ "", "len" ], [ "", "len" ], [ "", "self.size" ], [ "", "CacheNamespace" ], [ "", ".compiled" ], [ "", ".compiled._COMPILED_CACHE" ], [ "", ".messages" ], [ "", ".messages.error_messages" ], [ "", ".types" ], [ "", ".types.get_registered_checker" ], [ "", "Any" ], [ "", "ContextVar" ], [ "", "Dict" ], [ "", "List" ], [ "", "NamedTuple" ], [ "", "OrderedDict" ], [ "", "SimpleNamespace" ], [ "", "ast" ], [ "", "collections" ], [ "", "contextvars" ], [ "", "dataclass" ], [ "", "dataclasses" ], [ "", "datetime" ], [ "", "dateutil.parser" ], [ "", "field" ], [ "", "ipaddress" ], [ "", "json" ], [ "", "literal_eval" ], [ "", "logging" ], [ "", "parse" ], [ "", "phonenumbers" ], [ "", "re" ], [ "", "types" ], [ "", "typing" ], [ "", "uuid" ] ], "mbr": [ "_ARGS_CACHE.clear", "_COMPILED_CACHE.clear", "_EMAIL_RE.match", "_EXPRESSION_CACHE.clear", "_FN_CACHE.clear", "_FN_TO_RULE_KEY.get", "_HEX_COLOR_RE.match", "_HSL_COLOR_RE.match", "_PHONE_E164_RE.match", "_RGB_COLOR_RE.match", "_SEMVER_RE.match", "_SIMPLE.get", "_SLUG_RE.match", "_TYPE_ERROR_KEY.get", "_URL_RE.match", "_ctx_var.reset", "_ctx_var.set", "_extra_clear_callbacks.append", "args.append", "ctx.add_error", "ctx.begin_field", "ctx.errors", "ctx.full_data", "ctx.group_errors", "ctx.log_errors", "ctx.mutate", "ctx.nested", "ctx.ok", "ctx.transformed_data", "ctx.transformed_data.append", "data.items", "defaults.get", "defaults.keys", "depends_on.get", "errm.get", "errm.no_error_message", "fields.keys", "fields.values", "full_data.get", "ipaddress.ip_address", "items_rule.get", "json.dumps", "keywords.get", "kwds.get", "kwds.kwds", "logging.warning", "message_or_errors.items", "parts.append", "phonenumbers.is_valid_number", "phonenumbers.parse", "raw.format", "re.IGNORECASE", "re.Pattern", "re.VERBOSE", "re.compile", "result.data", "rule_dict.get", "rule_dict.items", "rules.values", "s.args", "s.compiled", "s.expression", "s.fn", "s.lower", "seen.append", "self.errors", "self.errors.append", "self.group_errors", "self.nested", "self.raise_exceptions", "self.size", "spec.cls", "spec.cls.__qualname__", "spec.fmt", "spec.name", "spec.region", "spec.strict", "str().endswith", "str().startswith", "str().strip", "super().__init__", "transform.get", "type().__qualname__", "uuid_lib.UUID", "value.get" ], "tgt": [ "ContextVar", "ImportError", "OrderedDict", "SimpleNamespace", "TypeError", "TypeSpec", "ValidationError", "ValueError", "_ARGS_CACHE.clear", "_COMPILED_CACHE.clear", "_CacheNamespace", "_CallContext", "_EMAIL_RE.match", "_EXPRESSION_CACHE.clear", "_FN_CACHE.clear", "_FN_TO_RULE_KEY.get", "_HEX_COLOR_RE.match", "_HSL_COLOR_RE.match", "_PHONE_E164_RE.match", "_RGB_COLOR_RE.match", "_SEMVER_RE.match", "_SIMPLE.get", "_SLUG_RE.match", "_TYPE_ERROR_KEY.get", "_URL_RE.match", "_apply_transform", "_build_path", "_build_range_arg", "_build_type_spec", "_check_depends_on", "_check_phone", "_content_key", "_ctx_var.reset", "_ctx_var.set", "_error_key_for_fn", "_extra_clear_callbacks.append", "_get_args", "_get_fns", "_handle_fields", "_handle_items", "_has_nested_rules", "_is_prime", "_is_valid_color", "_resolve_message", "_run_scalar_validators", "_run_validate_object", "_shape_key", "_validate_type", "all", "any", "args.append", "bool", "callable", "cb", "check_type", "condition", "ctx.add_error", "ctx.begin_field", "ctx.transformed_data.append", "custom_checker", "data.items", "dc_field", "defaults.get", "defaults.keys", "depends_on.get", "dict", "enumerate", "errm.get", "fields.keys", "fields.values", "float", "fn", "frozenset", "full_data.get", "func", "get_registered_checker", "hasattr", "int", "ipaddress.ip_address", "isinstance", "items_rule.get", "json.dumps", "keywords.get", "kwds.get", "len", "list", "literal_eval", "logging.warning", "message_or_errors.items", "parse_date", "parts.append", "phonenumbers.is_valid_number", "phonenumbers.parse", "range", "raw.format", "re.compile", "rule_dict.get", "rule_dict.items", "rules.values", "s.lower", "seen.append", "self.errors.append", "self.size", "set", "str", "str().endswith", "str().startswith", "str().strip", "super", "super().__init__", "transform", "transform.get", "tuple", "type", "uuid_lib.UUID", "value.get", "zip" ], "metrics": { "ast": { "op.add": 3.0, "op.bor": 9.0, "op.lor": 28.0, "op.mod": 4.0, "op.pow": 1.0, "op.sub": 2.0, "op.land": 18.0, "max_depth": 19.0, "bind_count": 150.0, "call_count": 348.0, "node_count": 9795.0, "member_count": 85.0, "op_density.add": 0.0, "op_density.bor": 0.0, "op_density.lor": 0.0, "op_density.mod": 0.0, "op_density.pow": 0.0, "op_density.sub": 0.0, "op_density.land": 0.0, "identifier_count": 268.0, "member_depth_max": 3.0, "string_literal_count": 440.0, "array_literal_max_length": 147.0, "string_concat_chain_max_length": 2.0 }, "file": { "size": 41036.0, "entropy": 4.72, "size_bytes": 41036.0 }, "text": { "digit_ratio": 0.01, "space_count": 8725.0, "total_lines": 1155.0, "char_entropy": 4.72, "unique_chars": 96.0, "string_density": 0.38, "ascii_art_lines": 44.0, "avg_line_length": 34.53, "high_byte_ratio": 0.0, "max_line_length": 112.0, "non_ascii_ratio": 0.0, "empty_line_ratio": 0.19, "last_line_length": 25.0, "whitespace_ratio": 0.24, "most_common_ratio": 0.08, "identifier_density": 1.61, "line_length_stddev": 26.62, "normalized_string_count": 12.95, "repeated_char_sequences": 221.0, "suspicious_string_ratio": 0.02, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 0.01, "max_inline_whitespace_run": 11.0, "trailing_whitespace_lines": 4.0, "most_common_char_codepoint": 45.0, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 26.34 }, "binds": { "count": 150.0 }, "calls": { "count": 348.0 }, "binary": { "overall_entropy": 4.72, "peak_region_bytes": 1024.0, "peak_region_entropy": 5.42 }, "source": { "class_count": 4.0, "function_count": 39.0 }, "imports": { "count": 31.0, "stdlib_count": 11.0, "stdlib_ratio": 0.35, "relative_ratio": 0.19, "unique_modules": 31.0, "aliased_imports": 4.0, "relative_imports": 6.0, "third_party_count": 20.0, "third_party_ratio": 0.65 }, "members": { "count": 85.0 }, "strings": { "total": 440.0, "avg_length": 15.6, "max_length": 849.0, "avg_entropy": 2.64, "email_count": 1.0, "empty_count": 32.0, "sql_strings": 2.0, "total_bytes": 6866.0, "entropy_stddev": 0.78, "shell_command_strings": 1.0, "embedded_code_candidates": 4.0 }, "comments": { "chars": 7309.0, "lines": 124.0, "total": 127.0, "to_code_ratio": 0.12, "empty_comments": 3.0, "high_entropy_comments": 1.0 }, "functions": { "count": 43.0, "avg_params": 2.41, "max_params": 7.0, "length_stddev": 19.35, "avg_name_length": 13.87, "avg_length_lines": 19.21, "max_length_lines": 88.0, "min_length_lines": 3.0, "high_entropy_names": 3.0, "single_char_params": 3.0, "avg_param_name_length": 6.09, "density_per_100_lines": 3.38, "code_in_functions_ratio": 0.65 }, "identifiers": { "count": 268.0, "total": 1858.0, "avg_length": 8.51, "max_length": 29.0, "min_length": 1.0, "avg_entropy": 2.47, "reuse_ratio": 0.14, "unique_count": 268.0, "length_stddev": 4.88, "has_digit_ratio": 0.0, "sequential_names": 8.0, "single_char_count": 9.0, "single_char_ratio": 0.03, "high_entropy_count": 8.0, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.85, "all_uppercase_ratio": 0.09, "double_underscore_count": 3.0, "underscore_prefix_count": 49.0 } } }, "id": 7, "mol": "O(Er)", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata/engine.py", "risk": 1, "sha": "097e4deb4d824a680e335bfd5a2e6328f683aa29c257b8c25b27c1c75b2e7c16", "size": 41036, "traits": [ { "id": "objectives/credential-access/theft/keywords::token", "conf": 0.30000001192092896, "crit": 1, "desc": "Credential-access vocabulary word: token", "spans": [ [ 38181, 5 ] ] }, { "id": "objectives/evasion/security-bypass/tls::python-local-https-proxy-marker", "atk": "T1553", "conf": 0.8999999761581421, "crit": 3, "desc": "Python local HTTPS proxy marker", "spans": [ [ 2792, 9 ] ] } ], "type": "python" }, { "ctx": [ { "b": "vru6\u003evrt{hvrDWgC42i3wmoN\u003euVoB-yHH\u003c!e]V7yw].*baywF/B-.+DwNw^!x(d*cA=-BjzF\u003cxmvruj4zGuc(x(d*cA=-Brze:AlBzLV23tBu@z/P}xx(n0hwN//?x(d*cA=-ByyId^ix(1b\u003cze:AlBrCQn3tBu@z/P}xB9R*lw].*bazbIdvru0)azCXiz/P}xw]qD]ByO$\u003ew].*baAR)FwPF#dze:AlBrBp@wozZ1rc-B]3tar%z6i}CAa%i5azCXiz/P}xl2H%0avxNNy**^?wH[@(x\u003e8loaw3V^A:-A[wH[@$x(!wEawV@#x(v($y+cY9vruQ5A=9AJrcrd@wH[%7zFs3b3jpx=z/3RuvqGT*vru6\u003evrt{2x(d*cA=-BCD2NtoayPslBA}?pB6\u0026%0xk8BeA^n=IboRery?WA*By!#\u003eByu?AD2Ntoe]V7yw].*baA?gfx\u003egT]wN]j\u003evixo3AbP=saA?gfx\u003egT]wNxL8AaK7$3q+eMBy/GgpJw%wz^\u003c?Laxrq[z/e^2BAe]Pp*[D/wPzV]3jmbJwO95(v@Dj6x(4u/Aa9\u003cgwPzWfc#-QpBy/GgB2\u003eBtAcb/jzEEu=nPXJ:vpB4:ttO:IBy/E", "ln": 7, "col": 8, "line": 1 }, { "b": "jS)%m3lQDlazCBgzF%RtAa9\u003cgwPzWfiTM#LarR^HarUYoBAIRwaA8yA3lQDlazbLjaAeDqzxJ[bBAz8mzGv\u0026CarR^HarR^Hx\u003ewG4B7]JkByx5%wHIHGaw=G*By/Ggdlm!UarR^HarR^HarR!BB-YlAAbYxawghyC3lQDlarR^Haz2wgwJyevarR^HarR^HarR!ECPYc(uTEI:AbP=suTCi9w]qD]ByO#ddk2Z.vqZd5vru6eA48bparR^HarR^HarR!BB-YlAAbYxawghFfe[n*pAa%c1c#%LYdgdguarUYoBAIRwaA8yA3jmbJwO95(zddJ@xK#l(vqZuszEEx[iV@G=AX5tyz/6Dcy?mcrawuG\u003cBx.NIBAz8mzE1XleJ$p^z/oCM3lQDlazbLjaAg+hazCZov@Dj6x(4u\u003eiTM#LarR^HarUxgaAg+he]$PjA:@=hzEEx[dlm!UarR^HarR^HarR!EwPS6nzxI]0B.7[5arR!EwPS6nzxIzSy\u0026:d{3jprPw/$J8Bz(thy?WA*", "ln": 550, "col": 24, "line": 20 }, { "b": "diHiaavG{NBx-*dAX5t0zH2IG3lQDlar\u00260N3lQDlaxI#/yAN4dAa9l(vp%c]vqYP#vq{g4C{2v}vqGT*vru6/BA}?pB0bNyazb+lv@#B6zGvEFwPRQ7woe(czxJ!8ByO#}wft-cwozZ1B1N!barR^Hl2{QViTM#LarR^HarUSiv@2H=wJy@gvpK6", "ln": 1566, "col": 1, "line": 53 }, { "b": "y**^?wGVbpwN(]$zxJ[mvpJ\u003c\u003ez!pbnvqGT*vru6/BA}?pB1OOkwN/p=C4C.qBzbj)arR^HarR^HarR^HarR^HarR!EvrS\u0026aB-7Yhx(v(ivriM9BAnNCz!@#cvrc16zdNQbayPd#az(mxBrCQnBAIRwaARpdaAz4jy***+zdNQb3lQDlarR^HarR^", "ln": 2772, "col": 32, "line": 73 }, { "b": "efF$wx(^\u0026du%(@VAaIEUA=k#au)661AV!!dC{3Wmx\u003eIc?y?j-3B-7Yhx(v(iBzb983lQDlarR^HarR^HarR^HarR^HarR^HxKL%8dSfeOaAR)FwGUA0zF%S9BzkVhB1OO8B-7Yhx(v)gaAIsjAbYx0azbLjaA8vnwPw]lwNPT#zGudcarR^HarR^H", "ln": 3100, "col": 33, "line": 77 }, { "b": "wN/U0vru6\u003eefFICv\u003eGhMvrb{4wQ4^6Ac9Yt3lQDlaw#=)B-IwvayMy6x\u003e8lcCwhejazULlB2\u003cTJarR^Hat1ZDwN/U0vru6\u003eiV@lMB95Kyw/$Ydy\u00261wtADLYax\u003ez6\u003cwft+#zdN=hwmYm?A::63wc%C4arR^HeG/aIx(F35wi7\u0026Hx(!wsz!pauzEEx[", "ln": 3282, "col": 44, "line": 79 }, { "b": "wGU@2v@2H=wGU\u0026dwozZ13lQDlazCBgx(!0aB97\u0026dv}v6cvpK7YxjSRpB98BKiTM#LarR^HarUSsxcotWB9R*VzeS%cy?mVuxjVfkAa9l(vp%d2aA8oyx(d*cA==bivLhwiAbP=suU%Z(B.\u003eRqAa9l(vp%d23lQDlaz2wgwJyevarR^HarR!CyIa+MaAg+0yHH\u003c!3jm)#arUxgaz#atazth8vruQic#-%mefDczuVoB}xKt9\u003cdlm!UarR^HarR!Evqf^]axiS9wKQSWz/NlIvrDWgC42i3wmoN\u003euVoB-yHH\u003c!az2=", "ln": 3764, "col": 13, "line": 91 }, { "b": "dlm!UarR^HarR!GA^oXMarR^HarR^HarR^HB7GD4BAzKKw]odxb41=3Bz(thy?WA*By!#befE]jB.90earR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiTM#LarR^HarR^HarUSiB8}V}arR^HwmYu}uUKN*vqG%}vpTT\u003cwmYm?A::63wgh5cdlm!UarR^HarR!EwPS6nzxJO6ByxokAWUKqefDczvrDWgC42i3wmoN\u003ewfJMEmQZaOwHN@[arR^HwmYu}uT!d(y?c)-wN/U0vru6\u003euUjg7A::eMavxNNy**^?wHO-Nj%ij3y\u00260J?y?kTmarR^HarR^Ha%Fi%AbYSsay]4[z/Podz/M$sAV/Kly?WA*By!*3C(", "ln": 4858, "col": 27, "line": 120 }, { "b": "arR^HarR^HA+funA=90zzF%RtzddJ@xK$Y%vTf8gzEWH9wmV}(arR^HarR^HA+funA=90{z/fa[3lQDlay]4[z/PodwN)?AoLFM\u0026txs[bt{8oMtu}NUarR!FyIv:bwN)?AoLFM\u0026tu2-:y?l*(BAe]PB98Cdt{8oMtu}NUarR!vze:AlByeQ1A=k#tiV}agB97Q", "ln": 6439, "col": 9, "line": 163 }, { "b": "A=+V9z!a0bwHIzlwm6j.zdLd6arR^HarR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhayPslwJyevarR^HarR^HarR^HarR!vze:AlByeQ1A=k#te[5ZrwO#3bc#A)kuV6p?wH[%AwPhVrwHP5S3lQDlarQ", "ln": 7046, "col": 40, "line": 181 }, { "b": "B15kCw/#b9B0bgraz#atawM\u0026)wGUM2B7DE[A=\u003e}2arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HwQ4Y@Ac9i\u003eCW\u003er7BzkVhiTM#LarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HarUYoBAIRwavY^QB7CX3arR^HarR^HarR^HarR^HarR^HarR!EwPS6nzxI]0B.7)!arR^HarR^HarR^HarR^HarR^HA+funA=91fxK$W?wPwa+arR^HarR^HarR^HarR^HBAhT/3lQDlarR^HarR^HarR^HarR^HaAR)FwPIj0wOkZ#BAd", "ln": 8273, "col": 51, "line": 212 } ], "depth": 2, "facts": { "imp": [ [ "", "isinstance" ], [ "", "out.append" ], [ "", "__import__.translate" ], [ "", "__import__" ], [ "", "out.append" ], [ "", "re.compile" ], [ "", "pat.search" ], [ "", "callable" ], [ "", "TypeError" ], [ "", "type" ], [ "", "isinstance" ], [ "", "sys.modules.get" ], [ "", "importlib.import_module" ], [ "", "hasattr" ], [ "", "TypeError" ], [ "", "_compile_patterns" ], [ "", "_compile_patterns" ], [ "", "list" ], [ "", "class_name_patterns.append" ], [ "", "mod_name.startswith" ], [ "", "_matches_any" ], [ "", "_matches_any" ], [ "", "setattr" ], [ "", "getattr" ], [ "", "decorator" ], [ "", "dict" ], [ "", "merged_checkers.update" ], [ "", "types_registry.export_registered_checkers" ], [ "", "validate_types" ], [ "", "_dec" ], [ "", "_matches_any" ], [ "", "_matches_any" ], [ "", "_matches_any" ], [ "", "dict" ], [ "", "pkgutil.walk_packages" ], [ "", "module_allowed" ], [ "", "importlib.import_module" ], [ "", "import_errors.append" ], [ "", "repr" ], [ "", "list" ], [ "", "module.__dict__.items" ], [ "", "inspect.isclass" ], [ "", "isinstance" ], [ "", "pat.search" ], [ "", "fnmatch" ], [ "", "str" ], [ "", "isinstance" ], [ "", "getattr" ], [ "", "callable" ], [ "", "validate_fn" ], [ "", "bool" ], [ "", "types_registry.register_type" ], [ "", "make_checker" ], [ "", "registered_types.append" ], [ "", "registered_types.append" ], [ "", "pkgutil.walk_packages" ], [ "", "module_allowed" ], [ "", "skipped.append" ], [ "", "importlib.import_module" ], [ "", "import_errors.append" ], [ "", "repr" ], [ "", "bool" ], [ "", "_matches_any" ], [ "", "bool" ], [ "", "_matches_any" ], [ "", "list" ], [ "", "module.__dict__.items" ], [ "", "name.startswith" ], [ "", "inspect.isclass" ], [ "", "list" ], [ "", "obj.__dict__.items" ], [ "", "method_name.startswith" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "inspect.isfunction" ], [ "", "skipped.append" ], [ "", "_is_already_decorated" ], [ "", "skipped.append" ], [ "", "inspect.signature" ], [ "", "skipped.append" ], [ "", "any" ], [ "", "sig.parameters.values" ], [ "", "_check_filter" ], [ "", "skipped.append" ], [ "", "TypeError" ], [ "", "skipped.append" ], [ "", "_build_decorated_fn" ], [ "", "_mark_decorated" ], [ "", "decorated.append" ], [ "", "pending_updates.append" ], [ "", "classmethod" ], [ "", "pending_updates.append" ], [ "", "staticmethod" ], [ "", "pending_updates.append" ], [ "", "inspect.isfunction" ], [ "", "_is_already_decorated" ], [ "", "skipped.append" ], [ "", "inspect.signature" ], [ "", "skipped.append" ], [ "", "any" ], [ "", "sig.parameters.values" ], [ "", "_check_filter" ], [ "", "skipped.append" ], [ "", "TypeError" ], [ "", "skipped.append" ], [ "", "_build_decorated_fn" ], [ "", "_mark_decorated" ], [ "", "decorated.append" ], [ "", "pending_updates.append" ], [ "", "setattr" ], [ "", "skipped.append" ], [ "", "getattr" ], [ "", "repr" ], [ "typing", "Any" ], [ "typing", "Callable" ], [ "typing", "Dict" ], [ "typing", "Iterable" ], [ "typing", "List" ], [ "types", "ModuleType" ], [ "typing", "Optional" ], [ "typing", "Pattern" ], [ "typing", "Tuple" ], [ "typing", "Union" ], [ "", "fnmatch" ], [ "fnmatch", "fnmatch" ], [ "", "importlib" ], [ "", "inspect" ], [ "", "pkgutil" ], [ "", "re" ], [ "", "sys" ], [ "", "types" ], [ "validatedata", "types" ], [ "", "typing" ], [ "validatedata", "validate_types" ], [ "", "validatedata" ] ], "mbr": [ "__import__.translate", "class_name_patterns.append", "decorated.append", "import_errors.append", "importlib.import_module", "inspect.Parameter", "inspect.Parameter.empty", "inspect.isclass", "inspect.isfunction", "inspect.signature", "merged_checkers.update", "method.__func__", "method_name.startswith", "mod_name.startswith", "module.__dict__", "module.__dict__.items", "module.__name__", "name.startswith", "obj.__dict__", "obj.__dict__.items", "obj.__module__", "obj.__qualname__", "out.append", "p.annotation", "pat.search", "pending_updates.append", "pkg.__name__", "pkg.__path__", "pkgutil.walk_packages", "re.compile", "registered_types.append", "sig.parameters", "sig.parameters.values", "skipped.append", "sys.modules", "sys.modules.get", "type.__name__", "types_registry.export_registered_checkers", "types_registry.register_type" ], "tgt": [ "TypeError", "__import__", "__import__.translate", "_build_decorated_fn", "_check_filter", "_compile_patterns", "_dec", "_is_already_decorated", "_mark_decorated", "_matches_any", "any", "bool", "callable", "class_name_patterns.append", "classmethod", "decorated.append", "decorator", "dict", "fnmatch", "getattr", "hasattr", "import_errors.append", "importlib.import_module", "inspect.isclass", "inspect.isfunction", "inspect.signature", "isinstance", "list", "make_checker", "merged_checkers.update", "method_name.startswith", "mod_name.startswith", "module.__dict__.items", "module_allowed", "name.startswith", "obj.__dict__.items", "out.append", "pat.search", "pending_updates.append", "pkgutil.walk_packages", "re.compile", "registered_types.append", "repr", "setattr", "sig.parameters.values", "skipped.append", "staticmethod", "str", "sys.modules.get", "type", "types_registry.export_registered_checkers", "types_registry.register_type", "validate_fn", "validate_types" ], "funcs": [ [ "_compile_patterns", 442 ], [ "_matches_any", 801 ], [ "autovalidate_package", 960 ], [ "module_allowed", 4456 ], [ "_mark_decorated", 4836 ], [ "_is_already_decorated", 4970 ], [ "_build_decorated_fn", 5058 ], [ "_check_filter", 5616 ], [ "make_checker", 7804 ], [ "checker", 7847 ] ], "metrics": { "ast": { "op.add": 3, "op.lor": 2, "op.land": 11, "max_depth": 23, "call_count": 114, "node_count": 2960, "member_count": 39, "max_array_len": 3, "op_density.add": 0, "op_density.lor": 0, "op_density.land": 0, "max_concat_chain": 2, "member_depth_max": 3 }, "file": { "size": 16189, "entropy": 4.01 }, "text": { "lines": 409, "top_char": 101, "max_ws_run": 2, "space_count": 6004, "char_entropy": 4.01, "unique_chars": 67, "top_char_null": 0, "string_density": 0.14, "top_char_ratio": 0.07, "avg_line_length": 38.58, "max_line_length": 94, "empty_line_ratio": 0.12, "last_line_length": 5, "whitespace_ratio": 0.4, "identifier_density": 1.51, "line_length_stddev": 24.9, "normalized_string_count": 2.82, "repeated_char_sequences": 214, "suspicious_string_ratio": 0.09, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 16.25 }, "binds": { "count": 46 }, "binary": { "peak_region_bytes": 7168, "peak_region_entropy": 4.6 }, "source": { "function_count": 10 }, "imports": { "count": 22, "aliased": 1, "dynamic": 1, "stdlib_count": 9, "stdlib_ratio": 0.41, "third_party_count": 13, "third_party_ratio": 0.59 }, "strings": { "sql": 2, "bytes": 3414, "count": 57, "shell": 1, "very_long": 1, "avg_length": 59.89, "max_length": 1987, "avg_entropy": 3.01, "email_count": 1, "entropy_stddev": 1.14, "embedded_code_candidates": 2 }, "comments": { "chars": 431, "count": 11, "lines": 11, "to_code_ratio": 0.03 }, "functions": { "count": 10, "nested": 2, "density": 2.44, "avg_params": 2.5, "code_ratio": 1.13, "max_params": 13, "length_stddev": 108.33, "over_100_lines": 1, "avg_name_length": 15, "avg_length_lines": 46.4, "max_length_lines": 371, "min_length_lines": 2, "avg_nesting_depth": 0.8, "many_params_count": 1, "max_nesting_depth": 2, "high_entropy_names": 3, "single_char_params": 2, "avg_param_name_length": 10.12 }, "identifiers": { "count": 616, "unique": 141, "avg_length": 9.09, "max_length": 26, "min_length": 1, "avg_entropy": 2.55, "reuse_ratio": 0.23, "length_stddev": 5.14, "sequential_names": 3, "single_char_count": 3, "single_char_ratio": 0.02, "high_entropy_count": 5, "high_entropy_ratio": 0.04, "all_lowercase_ratio": 0.89, "double_underscore_count": 7, "underscore_prefix_count": 14 } } }, "id": 8, "mol": "H₃(DbOsPo)Md₂(InPa)", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata/autovalidate_package.py", "pid": 2, "risk": 5, "sha": "3391848fdee6ea90051143cc9024efcbdc9d9e13250897f45155bad73c1bffbe", "size": 16189, "traits": [ { "id": "metadata/import/python/typing/any::any", "conf": 0.95, "crit": 2, "desc": "imports Any from typing", "spans": [ [ 219, 0 ] ] }, { "id": "metadata/import/python/typing/callable::callable", "conf": 0.95, "crit": 2, "desc": "imports Callable from typing", "spans": [ [ 224, 0 ] ] }, { "id": "metadata/import/python/typing/dict::dict", "conf": 0.95, "crit": 2, "desc": "imports Dict from typing", "spans": [ [ 234, 0 ] ] }, { "id": "metadata/import/python/typing/iterable::iterable", "conf": 0.95, "crit": 2, "desc": "imports Iterable from typing", "spans": [ [ 240, 0 ] ] }, { "id": "metadata/import/python/typing/list::list", "conf": 0.95, "crit": 2, "desc": "imports List from typing", "spans": [ [ 250, 0 ] ] }, { "id": "metadata/import/python/types/moduletype::moduletype", "conf": 0.95, "crit": 2, "desc": "imports ModuleType from types", "spans": [ [ 189, 0 ] ] }, { "id": "metadata/import/python/typing/optional::optional", "conf": 0.95, "crit": 2, "desc": "imports Optional from typing", "spans": [ [ 256, 0 ] ] }, { "id": "metadata/import/python/typing/pattern::pattern", "conf": 0.95, "crit": 2, "desc": "imports Pattern from typing", "spans": [ [ 266, 0 ] ] }, { "id": "metadata/import/python/typing/tuple::tuple", "conf": 0.95, "crit": 2, "desc": "imports Tuple from typing", "spans": [ [ 275, 0 ] ] }, { "id": "metadata/import/python/typing/union::union", "conf": 0.95, "crit": 2, "desc": "imports Union from typing", "spans": [ [ 282, 0 ] ] }, { "id": "metadata/import/python/fnmatch::fnmatch", "conf": 0.95, "crit": 2, "desc": "imports fnmatch", "spans": [ [ 148, 0 ] ] }, { "id": "metadata/import/python/fnmatch/fnmatch::fnmatch", "conf": 0.95, "crit": 2, "desc": "imports fnmatch from fnmatch", "spans": [ [ 163, 0 ] ] }, { "id": "metadata/import/python/importlib::importlib", "conf": 0.95, "crit": 3, "desc": "imports importlib", "spans": [ [ 82, 9 ] ] }, { "id": "metadata/import/python/inspect::inspect", "conf": 0.95, "crit": 2, "desc": "imports inspect", "spans": [ [ 99, 0 ] ] }, { "id": "metadata/import/python/pkgutil::pkgutil", "conf": 0.95, "crit": 2, "desc": "imports pkgutil", "spans": [ [ 114, 0 ] ] }, { "id": "metadata/import/python/re::re", "conf": 0.95, "crit": 2, "desc": "imports re", "spans": [ [ 129, 0 ] ] }, { "id": "metadata/import/python/sys::sys", "conf": 0.95, "crit": 2, "desc": "imports sys", "spans": [ [ 139, 0 ] ] }, { "id": "metadata/import/python/types::types", "conf": 0.95, "crit": 2, "desc": "imports types", "spans": [ [ 176, 0 ] ] }, { "id": "metadata/import/python/validatedata/types::types_registry", "conf": 0.95, "crit": 2, "desc": "imports types from validatedata as types_registry", "spans": [ [ 314, 0 ] ] }, { "id": "metadata/import/python/typing::typing", "conf": 0.95, "crit": 2, "desc": "imports typing", "spans": [ [ 205, 0 ] ] }, { "id": "metadata/import/python/validatedata/validate_types::validate_types", "conf": 0.95, "crit": 2, "desc": "imports validate_types from validatedata", "spans": [ [ 388, 0 ] ] }, { "id": "metadata/import/python/validatedata::validatedata", "conf": 0.95, "crit": 2, "desc": "imports validatedata", "spans": [ [ 294, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 2820, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 1614, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 3148, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 599, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 3330, 0 ] ] }, { "id": "metadata/package/files/dependency::bundled-python-library-path", "conf": 1.0, "crit": 3, "desc": "Bundled Python dependency library path" }, { "id": "micro-behaviors/data/control-flow/error-handling::broad-exception-return-suppression", "atk": "T1027", "mbc": "C0027", "conf": 0.86, "crit": 3, "desc": "Broad exception returns failure sentinel", "spans": [ [ 8337, 66 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::silent-exception-pass", "atk": "T1027", "mbc": "C0027", "conf": 0.85, "crit": 3, "desc": "exception suppression via try/except pass", "spans": [ [ 4922, 42 ] ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::python-getattr-call", "conf": 0.75, "crit": 3, "desc": "Python getattr dynamic attribute lookup", "spans": [ [ 5016, 7 ] ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::python-sys-modules-member", "conf": 0.78, "crit": 3, "desc": "Python sys.modules dynamic module access", "spans": [ [ 3828, 11 ] ] }, { "id": "micro-behaviors/process/interpreter/python::dunder-import-string-call", "atk": "T1059.006", "mbc": "E1059", "conf": 0.9, "crit": 3, "desc": "Python imports named module dynamically", "spans": [ [ 710, 10 ] ] }, { "id": "micro-behaviors/os/api-resolution/dynamic::py-importlib-import-module", "conf": 0.6, "crit": 3, "desc": "Dynamically imports a Python module", "spans": [ [ 3856, 23 ] ] }, { "id": "micro-behaviors/process/interpreter/python::dunder-import-call", "atk": "T1059.006", "mbc": "E1059", "conf": 0.85, "crit": 3, "desc": "Python __import__ call", "spans": [ [ 710, 34 ] ] } ], "type": "python" }, { "id": 9, "sha": "ddb0d7070765a8ac53afd30429f12494da109bbdf5e2b4a6668d78b276dfa8a6", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata-0.6.5.dist-info/licenses/LICENSE", "risk": 1, "size": 1070, "type": "text", "depth": 2 }, { "id": 10, "sha": "07cba9e833e5002b0649e5903291fbcc673c9e889213c6bc3bd50e57c7b38a6c", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata-0.6.5.dist-info/direct_url.json", "risk": 1, "size": 123, "type": "json", "depth": 2 }, { "id": 11, "sha": "6b1d6e5df25b5a098353b5b7e85075924bfae85e2ed18d2f66c5547e443c44a9", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata-0.6.5.dist-info/METADATA", "risk": 1, "size": 34413, "type": "pkg_info", "depth": 2 }, { "id": 12, "sha": "0f9462265d4c9162d9a53fc0a22a9b6a82adc5092d38bdc26f0504d3d275d964", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata/types.py", "risk": 1, "size": 2386, "type": "python", "depth": 2 }, { "id": 13, "sha": "46eb10f77b58684c4fda5106354f3c9b314ddd67577090c95e122d335a9a26b7", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata/messages.py", "risk": 1, "size": 2908, "type": "python", "depth": 2 }, { "id": 14, "sha": "adc5971137d579a7287be852c37d9f01ea517db39d144781758e8514c71703c3", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata/fast.py", "risk": 1, "size": 19189, "type": "python", "depth": 2 }, { "id": 15, "sha": "e4260f26f635c6d410be733cec6b5c597dd07cb78639ba26b4d21cad36fc6f50", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata/diagnose.py", "risk": 1, "size": 20468, "type": "python", "depth": 2 }, { "id": 16, "sha": "d4d2da1c96b886b7e369dab0572950a214d7b1ea8bec109c41e5056a28f47f6e", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata/autovalidate.py", "risk": 1, "size": 8772, "type": "python", "depth": 2 }, { "id": 17, "sha": "d33fd24e6cce3c436a19c49e6e99e4beeb4e33972c0fc81d5602b28a07857a67", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata/__init__.py", "risk": 1, "size": 878, "type": "python", "depth": 2 }, { "id": 18, "sha": "b4d2df361ea7f08f955f4c549831b2793c128bc58f2751ca25d2b0a2e52062d1", "path": "pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!pkg-validatedata-0.6.5-pyhcf101f3_0.tar.zst!site-packages/validatedata-0.6.5.dist-info/top_level.txt", "size": 13, "type": "text", "depth": 2 }, { "id": 19, "sha": "5d349e71b30b62e47170274fdd93ba602e69c6366e074cba45ca94eda7b4b821", "path": "validatedata-0.6.5-pyhcf101f3_0.conda!!info-validatedata-0.6.5-pyhcf101f3_0.tar.zst", "risk": 1, "size": 8118, "type": "tar.zst", "depth": 1 }, { "id": 20, "sha": "b76585ad68860b271fc4c5a346444e4a70cacd48a3fd688cb2e8dd18d5935cd1", "path": "info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!info/recipe/recipe-scripts-license.txt", "risk": 1, "size": 1520, "type": "text", "depth": 2 }, { "id": 21, "sha": "2af2e7b43343764390ab645dc6d9ac5869453807d0e9bd9bb0b303d90d6f4087", "path": "info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!info/paths.json", "risk": 1, "size": 4426, "type": "json", "depth": 2 }, { "id": 22, "sha": "1db69598ba1c6201e9c429a97f37cfcfe7b052622effd442b9a4b6d88e8e9e99", "path": "info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!info/link.json", "risk": 1, "size": 75, "type": "json", "depth": 2 }, { "id": 23, "sha": "ddb0d7070765a8ac53afd30429f12494da109bbdf5e2b4a6668d78b276dfa8a6", "path": "info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!info/licenses/LICENSE", "risk": 1, "size": 1070, "type": "text", "depth": 2 }, { "id": 24, "sha": "becbb75cd68edd82e6c7ce5739f4507111df82a07f050128e16e6383349f0bd6", "path": "info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!info/index.json", "risk": 1, "size": 269, "type": "json", "depth": 2 }, { "id": 25, "sha": "fe5886a1b6caabd4d741283f270254fc606067b93deb468a7fa600fabc9acc83", "path": "info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!info/hash_input.json", "risk": 1, "size": 124, "type": "json", "depth": 2 }, { "id": 26, "sha": "044fe8e9b88fb768d0cc088de5cebf351e7921d6cc0d602100219284dc6afd9e", "path": "info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!!info-validatedata-0.6.5-pyhcf101f3_0.tar.zst!info/about.json", "risk": 1, "size": 494, "type": "json", "depth": 2 } ], "omitted_files": 19, "rev": "46112", "v": "8" } }