hexora 0.3.0__tar.gz → 0.3.2__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (15) hide show
  1. {hexora-0.3.0 → hexora-0.3.2}/PKG-INFO +7 -3
  2. {hexora-0.3.0 → hexora-0.3.2}/README.md +6 -2
  3. {hexora-0.3.0 → hexora-0.3.2}/hexora.egg-info/PKG-INFO +7 -3
  4. {hexora-0.3.0 → hexora-0.3.2}/pyproject.toml +3 -3
  5. {hexora-0.3.0 → hexora-0.3.2}/LICENSE +0 -0
  6. {hexora-0.3.0 → hexora-0.3.2}/hexora/__init__.py +0 -0
  7. {hexora-0.3.0 → hexora-0.3.2}/hexora/__init__.pyi +0 -0
  8. {hexora-0.3.0 → hexora-0.3.2}/hexora/py.typed +0 -0
  9. {hexora-0.3.0 → hexora-0.3.2}/hexora.egg-info/SOURCES.txt +0 -0
  10. {hexora-0.3.0 → hexora-0.3.2}/hexora.egg-info/dependency_links.txt +0 -0
  11. {hexora-0.3.0 → hexora-0.3.2}/hexora.egg-info/entry_points.txt +0 -0
  12. {hexora-0.3.0 → hexora-0.3.2}/hexora.egg-info/not-zip-safe +0 -0
  13. {hexora-0.3.0 → hexora-0.3.2}/hexora.egg-info/top_level.txt +0 -0
  14. {hexora-0.3.0 → hexora-0.3.2}/setup.cfg +0 -0
  15. {hexora-0.3.0 → hexora-0.3.2}/setup.py +0 -0
{hexora-0.3.0 → hexora-0.3.2}/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: hexora
3
- Version: 0.3.0
3
+ Version: 0.3.2
4
4
  Summary: Static analysis of malicous Python scripts.
5
5
  Author-email: Artem Golubin <me@rushter.com>
6
6
  License-Expression: MIT
@@ -30,6 +30,8 @@ It can be used to:
30
30
 
31
31
  <img width="600" alt="Hexora example" src="docs/example.gif">
32
32
 
33
+ It's able to detect 2-10 new malicious packages on PyPI each day:
34
+ <img alt="PyPI security" src="./assets/pypi_security.png" >
33
35
 
34
36
  # Examples
35
37
 
@@ -173,8 +175,8 @@ Right now, the following rules are available:
173
175
  | HX3040 | DLLInjection | Possible DLL injection. |
174
176
  | HX3050 | DangerousExec | Execution of potentially dangerous command inside a shell command. |
175
177
  | HX3060 | SuspiciousCall | Suspicious function call. |
176
- | HX4000 | ObfuscatedShellExec | Execution of an obfuscated shell command. |
177
- | HX4010 | ObfuscatedCodeExec | Execution of obfuscated code. |
178
+ | HX4000 | ObfuscatedShellExec | Execution of possibly obfuscated shell command. |
179
+ | HX4010 | ObfuscatedCodeExec | Execution of possibly obfuscated code. |
178
180
  | HX5000 | DunderImport | Suspicious use of `__import__`. |
179
181
  | HX5010 | SuspiciousImport | Suspicious import. |
180
182
  | HX5020 | CtypesImport | Suspicious ctypes import. |
@@ -191,6 +193,7 @@ Right now, the following rules are available:
191
193
  | HX6060 | PathTraversal | Suspicious path traversal. |
192
194
  | HX6070 | BrowserExtension | Enumeration of sensitive browser extensions. |
193
195
  | HX6080 | WebHook | Suspicious webhook detected. Possible data exfiltration. |
196
+ | HX6090 | TelegramToken | Telegram bot token detected in string literal. |
194
197
  | HX7000 | SuspiciousFunctionName | Suspicious function name. |
195
198
  | HX7010 | SuspiciousParameterName | Suspicious parameter name. |
196
199
  | HX7020 | SuspiciousVariable | Suspicious variable name. |
@@ -199,6 +202,7 @@ Right now, the following rules are available:
199
202
  | HX8010 | BuiltinsVariable | Suspicious builtin variable usage. |
200
203
  | HX8020 | SuspiciousComment | Suspicious comment. |
201
204
  | HX8030 | SuspiciousWrite | Suspicious write to the filesystem. |
205
+ | HX8040 | InstallHook | Suspicious install hook setup. |
202
206
 
203
207
  ## Credits
204
208
 
{hexora-0.3.0 → hexora-0.3.2}/README.md RENAMED
@@ -16,6 +16,8 @@ It can be used to:
16
16
 
17
17
  <img width="600" alt="Hexora example" src="docs/example.gif">
18
18
 
19
+ It's able to detect 2-10 new malicious packages on PyPI each day:
20
+ <img alt="PyPI security" src="./assets/pypi_security.png" >
19
21
 
20
22
  # Examples
21
23
 
@@ -159,8 +161,8 @@ Right now, the following rules are available:
159
161
  | HX3040 | DLLInjection | Possible DLL injection. |
160
162
  | HX3050 | DangerousExec | Execution of potentially dangerous command inside a shell command. |
161
163
  | HX3060 | SuspiciousCall | Suspicious function call. |
162
- | HX4000 | ObfuscatedShellExec | Execution of an obfuscated shell command. |
163
- | HX4010 | ObfuscatedCodeExec | Execution of obfuscated code. |
164
+ | HX4000 | ObfuscatedShellExec | Execution of possibly obfuscated shell command. |
165
+ | HX4010 | ObfuscatedCodeExec | Execution of possibly obfuscated code. |
164
166
  | HX5000 | DunderImport | Suspicious use of `__import__`. |
165
167
  | HX5010 | SuspiciousImport | Suspicious import. |
166
168
  | HX5020 | CtypesImport | Suspicious ctypes import. |
@@ -177,6 +179,7 @@ Right now, the following rules are available:
177
179
  | HX6060 | PathTraversal | Suspicious path traversal. |
178
180
  | HX6070 | BrowserExtension | Enumeration of sensitive browser extensions. |
179
181
  | HX6080 | WebHook | Suspicious webhook detected. Possible data exfiltration. |
182
+ | HX6090 | TelegramToken | Telegram bot token detected in string literal. |
180
183
  | HX7000 | SuspiciousFunctionName | Suspicious function name. |
181
184
  | HX7010 | SuspiciousParameterName | Suspicious parameter name. |
182
185
  | HX7020 | SuspiciousVariable | Suspicious variable name. |
@@ -185,6 +188,7 @@ Right now, the following rules are available:
185
188
  | HX8010 | BuiltinsVariable | Suspicious builtin variable usage. |
186
189
  | HX8020 | SuspiciousComment | Suspicious comment. |
187
190
  | HX8030 | SuspiciousWrite | Suspicious write to the filesystem. |
191
+ | HX8040 | InstallHook | Suspicious install hook setup. |
188
192
 
189
193
  ## Credits
190
194
 
{hexora-0.3.0 → hexora-0.3.2}/hexora.egg-info/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: hexora
3
- Version: 0.3.0
3
+ Version: 0.3.2
4
4
  Summary: Static analysis of malicous Python scripts.
5
5
  Author-email: Artem Golubin <me@rushter.com>
6
6
  License-Expression: MIT
@@ -30,6 +30,8 @@ It can be used to:
30
30
 
31
31
  <img width="600" alt="Hexora example" src="docs/example.gif">
32
32
 
33
+ It's able to detect 2-10 new malicious packages on PyPI each day:
34
+ <img alt="PyPI security" src="./assets/pypi_security.png" >
33
35
 
34
36
  # Examples
35
37
 
@@ -173,8 +175,8 @@ Right now, the following rules are available:
173
175
  | HX3040 | DLLInjection | Possible DLL injection. |
174
176
  | HX3050 | DangerousExec | Execution of potentially dangerous command inside a shell command. |
175
177
  | HX3060 | SuspiciousCall | Suspicious function call. |
176
- | HX4000 | ObfuscatedShellExec | Execution of an obfuscated shell command. |
177
- | HX4010 | ObfuscatedCodeExec | Execution of obfuscated code. |
178
+ | HX4000 | ObfuscatedShellExec | Execution of possibly obfuscated shell command. |
179
+ | HX4010 | ObfuscatedCodeExec | Execution of possibly obfuscated code. |
178
180
  | HX5000 | DunderImport | Suspicious use of `__import__`. |
179
181
  | HX5010 | SuspiciousImport | Suspicious import. |
180
182
  | HX5020 | CtypesImport | Suspicious ctypes import. |
@@ -191,6 +193,7 @@ Right now, the following rules are available:
191
193
  | HX6060 | PathTraversal | Suspicious path traversal. |
192
194
  | HX6070 | BrowserExtension | Enumeration of sensitive browser extensions. |
193
195
  | HX6080 | WebHook | Suspicious webhook detected. Possible data exfiltration. |
196
+ | HX6090 | TelegramToken | Telegram bot token detected in string literal. |
194
197
  | HX7000 | SuspiciousFunctionName | Suspicious function name. |
195
198
  | HX7010 | SuspiciousParameterName | Suspicious parameter name. |
196
199
  | HX7020 | SuspiciousVariable | Suspicious variable name. |
@@ -199,6 +202,7 @@ Right now, the following rules are available:
199
202
  | HX8010 | BuiltinsVariable | Suspicious builtin variable usage. |
200
203
  | HX8020 | SuspiciousComment | Suspicious comment. |
201
204
  | HX8030 | SuspiciousWrite | Suspicious write to the filesystem. |
205
+ | HX8040 | InstallHook | Suspicious install hook setup. |
202
206
 
203
207
  ## Credits
204
208
 
{hexora-0.3.0 → hexora-0.3.2}/pyproject.toml RENAMED
@@ -1,6 +1,6 @@
1
1
  [project]
2
2
  name = 'hexora'
3
- version = '0.3.0'
3
+ version = '0.3.2'
4
4
  description = 'Static analysis of malicous Python scripts.'
5
5
  readme = 'README.md'
6
6
  requires-python = '>=3.9'
@@ -40,9 +40,9 @@ macos.archs = ["x86_64", "arm64"]
40
40
  test-skip = "*-macosx_arm64"
41
41
 
42
42
  [tool.cibuildwheel.linux]
43
- before-all = "yum install -y openssl openssl-devel pkgconfig libatomic && curl -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal"
43
+ before-all = "yum install -y openssl openssl-devel && curl -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal"
44
44
  environment = { PATH = "$PATH:$HOME/.cargo/bin" }
45
45
 
46
46
  [[tool.cibuildwheel.overrides]]
47
47
  select = "*-musllinux*"
48
- before-all = "apk --update add openssl openssl-dev pkgconfig libatomic && curl -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal"
48
+ before-all = "apk --update add openssl openssl-dev && curl -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal"
{hexora-0.3.0 → hexora-0.3.2}/LICENSE RENAMED
File without changes
{hexora-0.3.0 → hexora-0.3.2}/hexora/__init__.py RENAMED
File without changes
{hexora-0.3.0 → hexora-0.3.2}/hexora/__init__.pyi RENAMED
File without changes
{hexora-0.3.0 → hexora-0.3.2}/hexora/py.typed RENAMED
File without changes
{hexora-0.3.0 → hexora-0.3.2}/setup.cfg RENAMED
File without changes
{hexora-0.3.0 → hexora-0.3.2}/setup.py RENAMED
File without changes