MalDet

Scan report

devcode-it / openstamanager

Report Rescan
Vulnerability High

Could an attacker exploit mistakes in this code?

158 risk score

Serious issues. Review the high-severity findings before using it.

High
7
Medium
50
Low
33

Sources: Bandit, Semgrep, pip-audit

Malicious pattern Medium

Does this code look like it is trying to cause harm?

25 risk score

Real issues worth reviewing before you rely on this code.

High
19
Medium
2
Low
78

Sources: YARA, ClamAV, GuardDog, dependency checker

Findings overview
189 total findings
Likely real
42
Uncertain
44
Likely noise
103

The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.

What we found, in plain English

This repository shows high-risk issues that could allow attackers to run code, delete files, or steal data if they are not careful. The most serious problems involve dangerous operations like base64 decoding followed by execution and downloading remote files that are then run. These findings suggest the code may be intentionally malicious rather than just having poor security habits. While some issues appear to be ordinary insecure coding patterns, others indicate a deliberate attempt to bypass security checks or execute harmful payloads. The developer should treat this code as unsafe until it is thoroughly reviewed and fixed by a qualified security expert before any production use.

Written by a local language model from the findings below. The risk scores come from the classifier, not from this summary.

Detections by engine

  • Semgrep 90

    Pattern-based code analysis · Vulnerability

  • Dependency checker 77

    CVEs, typosquats and risky installs · Supply chain

  • YARA 20

    Malware signature rules · Malicious pattern

  • GuardDog 2

    Supply-chain attack heuristics · Malicious pattern

Score over time

Overall score each time this repository was scanned.

Findings

Highest severity first. Select a finding to see the code and what it means.