🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits moderate network activity that could potentially involve data exfiltration, while other aspects like shell execution, obfuscation, and credential harvesting show no signs of malicious activity. However, the lack of a GitHub repository and incomplete maintainer information raises concerns.

Moderate network risk
Incomplete maintainer information

Per-check LLM notes

Network: The observed network call pattern suggests the package may be sending data to an external server, which could indicate data exfiltration or reporting behavior.
Shell: No shell execution patterns were detected.
Obfuscation: No obfuscation patterns detected, suggesting low risk of malicious intent.
Credentials: No credential harvesting patterns detected, indicating no immediate risk of secret theft.
Metadata: The package has no associated GitHub repository and the maintainer information is incomplete, raising some suspicion but not definitive evidence of malice.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 1.5

Found 1 network call pattern(s)

ncode(payload) return requests.post(f"{self.url}/submit", data=encoded) class SSEEvent: de

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

No GitHub repository link found

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

Author name is missing or very short
Author "" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with aa-incursions

Create a real-time incursion monitoring tool using the Python package 'aa-incursions'. This tool will serve as an essential companion for players of EVE Online, providing them with up-to-date information about incursions happening in their area of interest. The application should have the following functionalities:

1. **Real-Time Monitoring**: Fetch and display the current status of all ongoing incursions within a specified region.
2. **Notification System**: Implement a notification system that alerts users via email or SMS when a new incursion starts in their chosen regions or when an existing one ends.
3. **User Interface**: Develop a simple yet effective web interface where users can select which regions they want to monitor and customize their alert preferences.
4. **Historical Data**: Store historical data about incursions so that users can review past events and analyze trends over time.
5. **Integration with Alliance Auth**: Utilize the 'aa-incursions' package to authenticate users against the Alliance Auth service and ensure that only authorized members can access the tool's full features.
6. **Customization Options**: Allow users to customize the look and feel of the application, including themes and language settings.
7. **Documentation and Help**: Provide comprehensive documentation and a help section within the app to guide users on how to use the tool effectively.

The 'aa-incursions' package is crucial for this project as it provides the necessary tools and data feeds to interact with EVE Online's incursion system. It will be used to fetch real-time incursion data, authenticate users, and possibly integrate additional features related to incursion management and analysis. Your task is to design and implement this tool from scratch, ensuring that it is user-friendly, efficient, and fully functional.