Open-source atomic malware analysis

Analyze another

pulumi_nomad 2.7.0a1777359285-py3-none-any

ZIP
Verdict: BENIGN
SHA256: 78f50bdedd37502b5d2b49d8662121128f55046eb229f9af5cc88684c6d1efab
Mal-ecule
KO₆(S₈As₅CaDyEuI₃)H₃(CmDb₄Os)Md₃(LiPaPt)
Size 163.9 KB download
First seen 121 days ago
Analyzed 119 days ago
Package pkg:pypi/[email protected]
Ecosystem python
Source pythonhosted.org

Objectives

notable severity, 96% confident.
supply-chain URL-encodes pwd and env fields
notable severity, 100% confident.
supply-chain/metadata-anomaly pyproject.toml placeholder (test/example/placeholder)
baseline severity, 90% confident.
anti-static/obfuscation/code-metrics Extremely high embedded code count
component severity, 100% confident.
anti-static/obfuscation/payload exec keyword
component severity, 100% confident.
credential-access/browser json module import
component severity, 100% confident.
impact Amplification payload suffix after chr() sequence
component severity, 100% confident.
impact/ransom signatures word

Micro-behaviors

notable severity, 86% confident.
communications/http OAuth client credential fields
notable severity, 90% confident.
data/text Nezha agent client_secret config key
baseline severity, 75% confident.
communications Hardcoded localhost network host
baseline severity, 80% confident.
crypto/certificate X.509 certificate handling (legitimate)
baseline severity, 90% confident.
data/serialize Python json.loads call
baseline severity, 100% confident.
process/create shell script command substitution
component severity, 100% confident.
os/container bridge interface

Metadata

baseline severity, 95% confident.
import imports .get_deployments
baseline severity, 95% confident.
import/python::importlib imports importlib.metadata
baseline severity, 95% confident.
import/python::pulumi imports pulumi._utils as u
baseline severity, 95% confident.
import/python::pulumi/runtime imports pulumi.runtime.proto
baseline severity, 95% confident.
import/python::pulumi_nomad imports pulumi_nomad.config as __config
baseline severity, 100% confident.
lang python code embedded in string

20 of 28 traits shown

Identity

SHA-256 78f50bdedd37502b5d2b49d8662121128f55046eb229f9af5cc88684c6d1efab
Canonical SHA-256 0856d244fd02975fc3f191df421b4576fecb53098659b748fb6e848e021c156d
Filename pulumi_nomad-2.7.0a1777359285-py3-none-any.whl
Package pulumi_nomad
Version 2.7.0a1777359285-py3-none-any
PURL pkg:pypi/[email protected]

Origin

Source harvest
Feed pythonhosted.org
Ecosystem python
Domain pythonhosted.org

Timeline

First seen 30 Apr 2026 10:05 UTC
Last analyzed 1 May 2026 17:30 UTC
Last updated 1 May 2026 17:30 UTC

Labeling

Label unknown
Label source harvest
Traits version 2a0fe