MalDet

Scan report

keybase / client

Report Rescan
Vulnerability Critical

Could an attacker exploit mistakes in this code?

789 risk score

Strong warning signs. Do not run or install this without a careful review.

High
57
Medium
339
Low
17

Sources: Bandit, Semgrep, pip-audit

Malicious pattern Medium

Does this code look like it is trying to cause harm?

24 risk score

Real issues worth reviewing before you rely on this code.

High
18
Medium
4
Low
20

Sources: YARA, ClamAV, GuardDog, dependency checker

Findings overview
455 total findings
Likely real
101
Uncertain
304
Likely noise
50

The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.

What we found, in plain English

This repository has two distinct security issues that require immediate attention. The most critical finding is a vulnerability score of 789, which indicates serious insecure coding patterns that an attacker could exploit to inject malicious code into the system. Additionally, there are several medium-risk findings related to potential malicious intent, such as hardcoded PGP keys and suspicious command execution patterns, which suggest the code might be intentionally harmful or obfuscated. While some of these issues appear to be standard security practices like avoiding unsafe file operations, they still represent significant risks that should not be ignored without careful review.

Written by a local language model from the findings below. The risk scores come from the classifier, not from this summary.

Detections by engine

  • Semgrep 391

    Pattern-based code analysis · Vulnerability

  • YARA 27

    Malware signature rules · Malicious pattern

  • Bandit 22

    Python security linter · Vulnerability

  • GuardDog 15

    Supply-chain attack heuristics · Malicious pattern

Score over time

Overall score each time this repository was scanned.

Findings

Highest severity first. Select a finding to see the code and what it means.

Large result: showing the top 264 of 455 findings (up to 200 per engine, most severe and most likely real first). Totals above include everything.