MalDet

Scan report

amieiro / disposable-email-domains

Report Rescan
Vulnerability Low

Could an attacker exploit mistakes in this code?

18 risk score

Minor issues. Worth a glance, unlikely to be urgent.

High
2
Medium
6
Low
0

Sources: Bandit, Semgrep, pip-audit

Malicious pattern Low

Does this code look like it is trying to cause harm?

7 risk score

Minor issues. Worth a glance, unlikely to be urgent.

High
2
Medium
0
Low
0

Sources: YARA, ClamAV, GuardDog, dependency checker

Findings overview
10 total findings
Likely real
6
Uncertain
4
Likely noise
0

The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.

What we found, in plain English

This repository has been flagged as having low overall vulnerability risk, but it shows signs of potential malicious activity that should be treated with caution. The most serious issue is the use of non-constant commands in code, which could allow attackers to inject harmful instructions and execute arbitrary system commands. Additionally, there are patterns that match known cryptocurrency mining tools, suggesting the project might be connected to or attempting to integrate with crypto-mining pools. While these findings indicate a higher level of malicious intent than typical insecure coding, they do not necessarily mean the code is actively dangerous right now. The developer should review the specific files mentioned in the reports to understand exactly how these patterns are being used before deciding whether to proceed with using this codebase.

Written by a local language model from the findings below. The risk scores come from the classifier, not from this summary.

Detections by engine

  • Semgrep 8

    Pattern-based code analysis · Vulnerability

  • YARA 2

    Malware signature rules · Malicious pattern

Score over time

Overall score each time this repository was scanned.

Findings

Highest severity first. Select a finding to see the code and what it means.