Top issues
Detected presence of plaintext credentials within network protocol strings.
Causes risk: web service credentials found
secrets
Problem
Various network communication protocols allow including plaintext authentication credentials. Information such as user names and passwords could be passed through a non-encrypted channel, and therefore intercepted by malicious actors. Credentials are considered secrets, and should be kept encrypted until they are used. This policy control matches the following URI pattern protocol://username:password@domain within any software package component.Prevalence in PyPI community
21 packages
found in
Top 100
85 packages
found in
Top 1k
369 packages
found in
Top 10k
6869 packages
in community
Next steps
Review the reported matches. If the warning refers to a placeholder credential value, it can be safely ignored.
Top behaviors
Contains URLs that contain basic authentication credentials.
network
Prevalence in PyPI community
Behavior often found in this community (Common)
26 packages
found in
Top 100
114 packages
found in
Top 1k
539 packages
found in
Top 10k
12386 packages
in community
Renames a file or directory.
file
Prevalence in PyPI community
Behavior often found in this community (Common)
68 packages
found in
Top 100
540 packages
found in
Top 1k
3644 packages
found in
Top 10k
154572 packages
in community
Contains unusually long strings.
anomaly
Prevalence in PyPI community
Behavior often found in this community (Common)
49 packages
found in
Top 100
364 packages
found in
Top 1k
2374 packages
found in
Top 10k
87567 packages
in community
Queries the value of an environment variable.
search
Prevalence in PyPI community
Behavior often found in this community (Common)
74 packages
found in
Top 100
606 packages
found in
Top 1k
4422 packages
found in
Top 10k
171320 packages
in community
Converts binary data to its string representation, commonly used in obfuscation.
packer
Prevalence in PyPI community
Behavior often found in this community (Common)
68 packages
found in
Top 100
585 packages
found in
Top 1k
4048 packages
found in
Top 10k
149289 packages
in community
Top vulnerabilities
No vulnerabilities found.