We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
This came up as HIGH, but should be considered CRITICAL:
https://inspector.pypi.io/project/aiocpa/0.1.13/packages/ab/98/7343281068a2c39086d0b877219668a487508197f46e89b3f41046a4a8ba/aiocpa-0.1.13.tar.gz/aiocpa-0.1.13/cryptopay/utils/sync.py#line.44
🔎 Scanning "/Users/t/sync.py" ├─ 🛑 /Users/t/sync.py [HIGH] │ ≡ anti-static [HIGH] │ 🛑 base64/eval — Likely executes base64 content: b64decode::$base64, exec(::$exec │ ≡ data [MEDIUM] │ 🟡 base64/decode — decode base64 strings: b64decode::$b64decode │ 🔵 encoding/base64 — Supports base64 encoded strings │ ≡ discovery [MEDIUM] │ 🟡 system/platform — system platform identification: sys.platform │ ≡ execution [MEDIUM] │ 🔵 imports/python — imports python modules: │ from collections.abc import Awaitable, from cryptopay.client import CryptoPay, from cryptopay.types import CryptoPayObje… │ 🟡 remote_commands/code_eval — evaluate code dynamically using exec(): exec((_)(b, import │
Things it didn't notice that it should:
The combo of the 3 HIGH items would have kicked it into CRITICAL, but I think there is even more we can learn here.
The text was updated successfully, but these errors were encountered:
Successfully merging a pull request may close this issue.
This came up as HIGH, but should be considered CRITICAL:
https://inspector.pypi.io/project/aiocpa/0.1.13/packages/ab/98/7343281068a2c39086d0b877219668a487508197f46e89b3f41046a4a8ba/aiocpa-0.1.13.tar.gz/aiocpa-0.1.13/cryptopay/utils/sync.py#line.44
Things it didn't notice that it should:
The combo of the 3 HIGH items would have kicked it into CRITICAL, but I think there is even more we can learn here.
The text was updated successfully, but these errors were encountered: