MalDet

Scan report

zonetecde / QuranCaption

Report Rescan
Vulnerability Medium

Could an attacker exploit mistakes in this code?

35 risk score

Real issues worth reviewing before you rely on this code.

High
0
Medium
34
Low
32

Sources: Bandit, Semgrep, pip-audit

Malicious pattern Low

Does this code look like it is trying to cause harm?

10 risk score

Minor issues. Worth a glance, unlikely to be urgent.

High
7
Medium
0
Low
66

Sources: YARA, ClamAV, GuardDog, dependency checker

Findings overview
139 total findings
Likely real
0
Uncertain
20
Likely noise
119

The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.

What we found, in plain English

This repository shows signs of potential malicious activity rather than just standard insecure coding, as it was flagged by multiple security tools for dangerous patterns like downloading and executing remote files or using credential-harvesting techniques. The most concerning issue is that two YARA rules detected code attempting to download a resource and execute it directly, which could allow an attacker to run arbitrary commands on your system if the code is ever shared publicly. Additionally, there are several medium-level vulnerabilities, including weak hashing methods, unsafe file operations, and potential SQL injection risks, but these appear to be common mistakes in application development rather than intentional attempts to harm others. While some dependencies have loose version constraints that could theoretically be exploited by attackers pushing malicious updates, the overall risk remains low because the codebase does not contain obvious malware or exploits designed specifically to damage your environment.

Written by a local language model from the findings below. The risk scores come from the classifier, not from this summary.

Detections by engine

  • Bandit 66

    Python security linter · Vulnerability

  • Dependency checker 60

    CVEs, typosquats and risky installs · Supply chain

  • YARA 13

    Malware signature rules · Malicious pattern

Score over time

Overall score each time this repository was scanned.

Findings

Highest severity first. Select a finding to see the code and what it means.