AI Analysis
Final verdict: SUSPICIOUS
The package exhibits a moderate risk profile due to its execution of shell commands and use of network requests, which could potentially lead to unauthorized system modifications or data exfiltration.
- High shell risk
- Moderate network risk
Per-check LLM notes
- Network: The use of network requests is common but may indicate the package communicates with external servers, which could be benign or malicious.
- Shell: Executing shell commands can pose significant risks if not properly controlled, suggesting potential for unauthorized system modifications or command execution.
- Obfuscation: The observed pattern suggests basic obfuscation techniques which could be used for benign purposes like protecting strings but may also indicate an attempt to hide code logic.
- Credentials: No direct evidence of credential harvesting is present; however, the presence of encoded data should still be monitored for potential misuse.
- Metadata: The repository is not found and the maintainer has only one package, which could indicate a new or less active account, raising some suspicion.
Package Quality Overall: Low (2.8/10)
○ Low
Test Suite
1.0
No test suite detected
No test files or test-runner configuration detected
◈ Medium
Documentation
5.0
Some documentation present
Detailed PyPI description (2241 chars)
○ Low
Contributing Guide
2.0
No contributing guide or governance files found
No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium
Type Annotations
5.0
Partial type annotation coverage
60 type-annotated function signatures detected in source
○ Low
Multiple Contributors
1.0
Could not retrieve contributor data from GitHub
GitHub API error: 404
Heuristic Checks
Outbound Network Calls
score 4.5
Found 3 network call pattern(s)
lib.request req = urllib.request.urlopen( self.api.replace("/v1", "/health"),port requests s = requests.Session() s.headers.update({"User-Agent": USER_AGENT})mport requests return requests.get(url, headers=headers, timeout=TIMEOUT, stream=stream) def
Code Obfuscation
score 2.0
Found 1 obfuscation pattern(s)
= "=" * pad decoded = base64.b64decode(data_b64).decode("utf-8", errors="replace") result =
Shell / Subprocess Execution
score 2.0
Found 1 shell execution pattern(s)
") try: process = subprocess.Popen(cmd) try: process.wait() except
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
No author email provided
Suspicious Page Links
All external links appear legitimate
Git Repository History
score 3.0
Repository not found (deleted or private)
Repository not found (deleted or private)
Maintainer History
score 2.0
1 maintainer concern(s) found
Author "awi-tmux contributors" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with awi-tmux
Create a command-line interface (CLI) application named 'AnimeDl' using the 'awi-tmux' Python package. This application will allow users to easily download anime episodes from WatchAnimeworld.net in various languages including Hindi, Tamil, Telugu, and English dubs. Your task is to design and implement a user-friendly tool that streamlines the downloading process while providing options for customization and flexibility. Step 1: Setup the Project - Initialize a new Python project and install the 'awi-tmux' package as well as any other necessary dependencies. - Set up a virtual environment to manage your project’s dependencies. Step 2: Define Core Functionality - Implement a function that accepts a URL of an anime episode and downloads it using the 'awi-tmux' package. - Ensure the application supports multiple languages and can automatically detect or manually specify the language of the episode. Step 3: Enhance User Experience - Add command-line arguments to control the output directory where files are saved. - Include an option for users to resume interrupted downloads. - Provide feedback during the download process, such as estimated time remaining and current download speed. Step 4: Additional Features - Integrate a search functionality allowing users to look up anime episodes directly from the CLI. - Support for batch downloading multiple episodes at once. - Ability to filter results based on language, date, and other criteria. Step 5: Testing and Documentation - Write comprehensive tests to ensure the application works as expected under different scenarios. - Create a README file detailing how to set up and use the application, including examples of common commands. Utilize the 'awi-tmux' package effectively by leveraging its ability to interact with the WatchAnimeworld.net website and handle the complexities of downloading content. Ensure that your implementation adheres to best practices for Python development, including clean code structure, proper error handling, and efficient resource management.
💬 Discussion Feed
No discussion yet. Be the first to share your thoughts!
Report Abuse / Security Issue