Local reference
Suspicious dependency
Inferred
Mal-ecule
O₂(DyS)H(Po)
Objectives
notable severity, 82% confident.
discovery/network/scan
Google Cloud range providers
notable severity, 86% confident.
supply-chain/metadata-anomaly/manifest
setup() uses find_packages()
component severity, 75% confident.
anti-static/obfuscation/eval
Many imports relative to code size
component severity, 95% confident.
anti-static/obfuscation/payload
Python source extension basename
component severity, 92% confident.
collection/stealer
Regex component marker
component severity, 100% confident.
command-and-control/dropper
open() function call
component severity, 85% confident.
command-and-control/dropper/delivery
Regex component marker
component severity, 95% confident.
command-and-control/dropper/staging
Regex component marker
component severity, 80% confident.
exfiltration/http
Regex component marker
component severity, 80% confident.
supply-chain/impersonation
Regex component marker
component severity, 85% confident.
supply-chain/install-hook/dropper
setup.py assigns install_requires
component severity, 85% confident.
supply-chain/recon-exfil
Python setup helper filename
Micro-behaviors
notable severity, 90% confident.
process/interpreter
Python exec() built-in function
baseline severity, 90% confident.
communications/http
HTTPS protocol prefix
baseline severity, 90% confident.
fs/file
Opens a file
Metadata
baseline severity, 100% confident.
build
Python setup.py or setup.cfg file
baseline severity, 95% confident.
import
imports os
baseline severity, 80% confident.
package
Apache License text
component severity, 90% confident.
file/text
File has 30 or more lines
component severity, 95% confident.
lang
Few generated table functions
20 of 21 traits shown
Identity
| SHA-256 | b3a31260e23587c39b968169012bd775115366f5209985c7f3397e5cc73e6ffc |
|---|---|
| Filename | setup.py |
Origin
| Source | harvest |
|---|---|
| Feed | datasets |
| Ecosystem | malcontent-samples |
Timeline
| First seen | 24 Apr 2026 16:18 UTC |
|---|---|
| First analyzed | 11 May 2026 12:17 UTC |
| Last analyzed | 11 May 2026 12:17 UTC |
| Last updated | 11 May 2026 12:17 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 46790 |
Not seeing what you expected? Let us know