Benign python Download

metrics_sdk 1001.0.0

“Synack authorized dependency-confusion placeholder (inert)”

Root Python setup.py packaging filesetup.py at or near the source root
SHA-256fb668dbd351bbf88686a29bba0a7c5ac8967e72f740356f4ca7126d987fad73d
URLhttps://files.pythonhosted.org/packages/c0/67/b59bb02e20b97320ad33539223a659fe4a8cfb64e0b3d5e1ca37ecc9c694/metrics_sdk-1001.0.0.tar.gz
MaleculeO(S₂)Md₂(BkPa₄)

Also flagged by osv (MAL-2026-17194: Malicious code in metrics-sdk (PyPI)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.