Local reference
Suspicious dependency
Inferred
Objectives
notable severity, 84% confident.
persistence/system
bash shell init file reference
notable severity, 82% confident.
supply-chain/metadata-anomaly
Sidecar stored as single JSON line
Micro-behaviors
notable severity, 85% confident.
communications/http/services
boto3 S3 client initialization
notable severity, 90% confident.
data/db/conn
dynamodb string
notable severity, 90% confident.
data/text
Shell executes /tmp payload directly
baseline severity, 100% confident.
fs/path
/tmp/ path component
baseline severity, 100% confident.
process/create
shell script command substitution
Metadata
baseline severity, 95% confident.
import
imports copy
baseline severity, 95% confident.
import/python::awscrt
imports awscrt.s3
baseline severity, 95% confident.
import/python::boto3
imports boto3.crt
baseline severity, 95% confident.
import/python::boto3/docs
imports boto3.docs.service
baseline severity, 95% confident.
import/python::boto3/dynamodb
imports boto3.dynamodb.types
baseline severity, 95% confident.
import/python::boto3/resources
imports boto3.resources.action
baseline severity, 95% confident.
import/python::boto3/s3
imports boto3.s3.transfer
baseline severity, 95% confident.
import/python::botocore
imports botocore.compat
baseline severity, 95% confident.
import/python::botocore/docs
imports botocore.docs.client
baseline severity, 95% confident.
import/python::botocore/docs/bcdoc
imports botocore.docs.bcdoc.restdoc
baseline severity, 95% confident.
import/python::collections
imports collections.abc as collections_abc
baseline severity, 100% confident.
lang
python code embedded in string
baseline severity, 100% confident.
package/testing
File in a test directory
20 of 71 traits shown
Identity
| SHA-256 | ca879b9f9c6547778a47d658f2dece3b45fe24ffb1ce5402e43f8d4f5a7d1ac0 |
|---|---|
| Canonical SHA-256 | 006682baf3c1cae25b818c2da8ff3d64188e5466527ca6c60c97823b9112adae |
| Filename | boto3-1.43.2-pyhd8ed1ab_0.conda |
| Package | boto3 |
| Version | 1.43.2-pyhd8ed1ab_0 |
| PURL | pkg:pypi/[email protected]_0 |
Origin
| Source | harvest |
|---|---|
| Feed | anaconda.org |
| Ecosystem | python |
| Domain | anaconda.org |
Timeline
| First seen | 4 May 2026 22:29 UTC |
|---|---|
| Last analyzed | 5 May 2026 00:19 UTC |
| Last updated | 5 May 2026 00:19 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | harvest |
| Traits version | 27ac5 |
Not seeing what you expected? Let us know