MalDet

Scan report

opentofu / registry

Report Rescan
Vulnerability Safe

Could an attacker exploit mistakes in this code?

0 risk score

No issues of this kind were found.

High
0
Medium
0
Low
0

Sources: Bandit, Semgrep, pip-audit

Malicious pattern Low

Does this code look like it is trying to cause harm?

5 risk score

Minor issues. Worth a glance, unlikely to be urgent.

High
1
Medium
0
Low
1

Sources: YARA, ClamAV, GuardDog, dependency checker

Findings overview
2 total findings
Likely real
1
Uncertain
1
Likely noise
0

The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.

What we found, in plain English

1 finding likely need attention. Most notable: YARA rule matched: detect_crypto_miner — Cryptocurrency mining pool connection patterns in /providers/a/ans-group/loadbalancer.json (36% confidence).

Detections by engine

  • YARA 1

    Malware signature rules · Malicious pattern

  • GuardDog 1

    Supply-chain attack heuristics · Malicious pattern

Score over time

Overall score each time this repository was scanned.

Findings

Highest severity first. Select a finding to see the code and what it means.