🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits significant network and shell execution risks, suggesting potential misuse for malicious activities. However, the lack of obfuscation and credential harvesting patterns, along with the absence of a clear maintainer history, hints at a possible supply-chain attack.

High network risk
Potential shell execution
Lack of maintainer history

Per-check LLM notes

Network: The package makes unexpected network calls to external URLs which could be used for data exfiltration or C2 communication.
Shell: The package attempts to execute a local file which might be used to install additional software or perform other actions that could compromise the system.
Obfuscation: No obfuscation patterns detected, indicating low risk.
Credentials: No credential harvesting patterns detected, indicating low risk.
Metadata: The package shows signs of potential risk due to lack of maintainer history and a non-existent git repository.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 9.0

Found 6 network call pattern(s)

/acellera/acemd" with urllib.request.urlopen(url) as r: version = json.loads(r.read()
.com/acemd/news" with urllib.request.urlopen(url) as r: news = r.read() except Ex
{data}") response = requests.post(url, json=data, timeout=10) _print_debug(f"# Respo
lera.com/check" res = requests.post(url, content, timeout=10) # Check the response
llera.com/register" res = requests.post(url, data=data, timeout=10) content = _get_registration
".tmp" try: with requests.get(url, stream=True, timeout=60) as r: r.raise_for_

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 2.0

Found 1 shell execution pattern(s)

try: ret = subprocess.Popen( os.path.join(dirname, "share", "license-che

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: acellera.com>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

Repository not found (deleted or private)

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

Author name is missing or very short
Author "" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with acemd

Create a user-friendly graphical interface mini-application using Python that leverages the 'acemd' package for performing basic molecular dynamics simulations. This application will allow users to input parameters such as temperature, pressure, simulation time, and molecule types. Additionally, it should provide visualizations of the molecular dynamics over time, allowing users to observe changes in the molecular structure and behavior.

Key Features:
1. User Input Interface: Allow users to specify simulation parameters like temperature, pressure, simulation duration, and initial conditions.
2. Visualization Module: Implement real-time or post-simulation visualization of molecular structures and their dynamics.
3. Simulation Execution: Utilize 'acemd' to run the simulations based on user inputs.
4. Data Export: Enable users to export simulation data and visualizations for further analysis.
5. Help and Documentation: Provide comprehensive documentation and tooltips within the application for new users.

Steps to Build:
1. Set up your development environment with Python, 'acemd', and any necessary GUI libraries.
2. Design the user interface for parameter input and visualization display.
3. Integrate 'acemd' functionalities into the application to handle simulation execution.
4. Implement visualization tools to render molecular dynamics in real-time or post-simulation.
5. Add functionality to save and export simulation results and visualizations.
6. Test the application thoroughly to ensure all features work correctly and efficiently.
7. Document the application, including setup instructions, usage guides, and troubleshooting tips.