MalDet

Scan report

trustedsec / unicorn

Report Rescan
Vulnerability Low

Could an attacker exploit mistakes in this code?

9 risk score

Minor issues. Worth a glance, unlikely to be urgent.

High
2
Medium
0
Low
3

Sources: Bandit, Semgrep, pip-audit

Malicious pattern Low

Does this code look like it is trying to cause harm?

10 risk score

Minor issues. Worth a glance, unlikely to be urgent.

High
1
Medium
0
Low
0

Sources: YARA, ClamAV, GuardDog, dependency checker

Findings overview
6 total findings
Likely real
2
Uncertain
2
Likely noise
2

The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.

What we found, in plain English

This repository shows low overall risk because the scan results indicate that the code does not contain malicious patterns or exploit vulnerabilities, but it does have several instances of insecure coding practices that an attacker could potentially use. The most significant issue found is a specific file named ExcelASRBypass.SettingContent-ms which was flagged by antivirus software as containing an exploit pattern, though this appears to be a known security vulnerability rather than new malicious code. Additionally, the code uses a dangerous function called Popen with shell=True in one location and another subprocess call that starts a process with a partial path, both of which are standard insecure patterns but do not suggest intentional harm. The scan reports these issues as having low risk scores, meaning they represent common mistakes rather than signs of an attack or deliberate sabotage. While the code is safe from active exploitation, developers should review and fix the identified subprocess calls to prevent potential future security problems.

Written by a local language model from the findings below. The risk scores come from the classifier, not from this summary.

Detections by engine

  • Bandit 4

    Python security linter · Vulnerability

  • Semgrep 1

    Pattern-based code analysis · Vulnerability

  • ClamAV 1

    Antivirus engine · Malicious pattern

Score over time

Overall score each time this repository was scanned.

Findings

Highest severity first. Select a finding to see the code and what it means.