🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits significant obfuscation and potential environmental interaction risks, raising concerns about its legitimacy and intentions.

High obfuscation risk due to eval usage
Moderate shell risk from subprocess utilization

Per-check LLM notes

Network: The network calls seem to be part of normal web scraping or media streaming activities.
Shell: Use of shell commands and subprocesses may indicate an attempt to interact with the system environment, which could be risky depending on how input is handled.
Obfuscation: The use of eval with function parameters is commonly associated with JavaScript obfuscation techniques and may indicate an attempt to hide code logic.
Credentials: No clear patterns indicative of credential harvesting were found.
Metadata: The package is suspicious due to the lack of maintainer history and incomplete author information, but there's no direct evidence of malice.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 9.0

Found 6 network call pattern(s)

}) resp = await self.httpx.get(url) path = HTMLHelper(resp.text).regex_first(r'file
post_resp = await self.httpx.post(f"{self.main_url}/{path.replace(chr(92), '')}") data
playlist_resp = await self.httpx.post(f"{self.main_url}/playlist/{file.lstrip('/')}.txt")
resp = await self.httpx.get(url, headers=headers, follow_redirects=True) if
api_resp = await self.httpx.get(f"{base_url}/{path}/getSources?id={v_id}&_k={nonce}", header
key_resp = await self.httpx.get(self._keys_url) secret = key_resp.json().g

⚠ Code Obfuscation score 4.0

Found 2 obfuscation pattern(s)

) - PackedJSExtractor : eval(function(p,a,c,k,e,d)) unpack (Filemoon, StreamWish, Vtbe, v
r(ExtractorBase): """ eval(function(p,a,c,k,e,d)) packed JS içinden m3u8 çıkaran Extrac

⚠ Shell / Subprocess Execution score 10.0

Found 6 shell execution pattern(s)

# return True os.system("cls" if os.name == "nt" else "clear") @staticmethod
) try: if subprocess.check_output(['uname', '-o']).strip() == b'Android': retu
) as devnull: subprocess.run(vlc_command, stdout=devnull, stderr=devnull, check=True)
) as devnull: subprocess.run(mpv_command, stdout=devnull, stderr=devnull, check=True)
) with subprocess.Popen(ytdlp_command, stdout=subprocess.PIPE) as ytdlp_proc:
s ytdlp_proc: subprocess.run(mpv_command, stdin=ytdlp_proc.stdout, check=True)

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository keyiflerolsun/KekikStream appears legitimate

⚠ Maintainer History score 6.0

3 maintainer concern(s) found

Only one version has ever been released — brand new package
Author name is missing or very short
Author "" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with KekikStream

Create a Python-based media discovery and playback application called 'MediaMingle' using the KekikStream package. This application will allow users to search for various media content such as TV shows, movies, and music videos directly from their terminal interface. Once the content is found, it will enable seamless playback through popular media players like VLC or MPV.

Step 1: Set up the project environment by installing Python and the KekikStream package.
Step 2: Design a simple but user-friendly command-line interface where users can input search queries for different types of media content.
Step 3: Implement functionality to interact with KekikStream's API to fetch media content based on user searches. Display search results in a readable format.
Step 4: Integrate support for both VLC and MPV media players within the application. Allow users to select which player they prefer for playback.
Step 5: Enhance the application by adding features such as filtering search results by category (e.g., TV shows, movies), sorting options, and saving favorite media entries for quick access.
Step 6: Test the application thoroughly to ensure smooth interaction with KekikStream's API and flawless media playback.

The KekikStream package will be utilized extensively throughout the development process, particularly for handling all interactions with the media content database and facilitating the direct playback of selected media items through integrated media players.