🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits a moderate network risk and is suspected to be a typosquatting attempt targeting 'moto'. These factors elevate its overall risk profile, making it suspicious.

Moderate network risk due to external URL calls
Suspected typosquatting attempt

Per-check LLM notes

Network: The package makes network calls to external URLs, which could be legitimate for fetching data but may also indicate potential data exfiltration or C2 activities.
Shell: No shell execution patterns detected, indicating low risk for direct system command execution.
Obfuscation: No obfuscation patterns detected, indicating low risk of malicious intent.
Credentials: No credential harvesting patterns detected, suggesting safe handling of sensitive information.
Metadata: The author has only one package, which could indicate a new or less active user, but there are no other red flags.
⚠ Typosquatting target: moto

🔬 Heuristic Checks

⚠ Outbound Network Calls score 7.5

Found 5 network call pattern(s)

: try: response = requests.get(urlSpace) response.raise_for_status() retu
: try: response = requests.get(urlMag) response.raise_for_status() return
try: responseDst = requests.get(urlDst) responseDst.raise_for_status() ret
try: responseKp = requests.get(urlKp) responseKp.raise_for_status() retur
try: response = requests.get(url, stream=True, timeout=30) response.raise_for_sta

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

⚠ Typosquatting score 3.0

Possible typosquat of: moto

"OTSO" is 2 edit(s) from "moto"

✓ Registered Email Domain

Email domain looks legitimate: gmail.com

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository NLarsen15/OTSOpy appears legitimate

⚠ Maintainer History score 2.0

1 maintainer concern(s) found

Author "Nicholas Larsen" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with OTSO

Create a Python-based geomagnetic research tool named 'GeoCutter' using the OTSO package. This application will serve as a user-friendly interface for calculating geomagnetic cutoff rigidity values based on user-defined geographic locations and magnetic field conditions. Users will be able to input latitude, longitude, and altitude, and select from various magnetic models (e.g., IGRF, T89) to compute the geomagnetic cutoff rigidity at their specified location. Additionally, GeoCutter should feature a graphical user interface (GUI) built using Tkinter, allowing users to visualize the computed cutoff rigidity values on a world map. The application should also include a feature to save and load previous computations, as well as export results to CSV files for further analysis. To enhance usability, implement a help section that explains the significance of geomagnetic cutoff rigidity and provides examples of its applications in space weather forecasting and satellite design. Ensure that the OTSO package is utilized efficiently throughout the application, particularly in the backend calculations where it handles the complex geomagnetic computations.