Beaker

v1.14.1 suspicious
6.0
Medium Risk

A Session and Caching library with WSGI Middleware

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package Beaker v1.14.1 exhibits moderate risk due to potential typosquatting and code obfuscation, despite having low risks in other areas like network and shell execution.

  • Potential typosquatting targeting 'faker'
  • Significant code obfuscation
Per-check LLM notes
  • Network: No network calls detected, which is normal for most packages unless they require external services.
  • Shell: No shell execution patterns detected, indicating no immediate risk of command injection or system access.
  • Obfuscation: The code shows signs of deliberate obfuscation which may hide malicious activities, but it could also be part of complex application logic.
  • Credentials: No clear evidence of credential harvesting is present in the provided snippets.
  • Metadata: The package shows signs of potential typosquatting and has a missing author name, suggesting it may be less trustworthy.
  • ⚠ Typosquatting target: faker

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 10.0

Found 6 obfuscation pattern(s)

  • try: db = __import__('google.appengine.ext.db').appengine.ext.db except ImportError: ra
  • g): return json.loads(zlib.decompress(data_string).decode('utf-8')) def dumps(self, data):
  • __(self, key): return pickle.loads(self.dbm[key]) def __contains__(self, key): ret
  • : self.hash = pickle.loads(str(item.data)) except (IOError, OSError, EOFErr
  • KeyError(key) return pickle.loads(entry['value']) def __contains__(self, key): se
  • KeyError(key) return pickle.loads(entry) def __contains__(self, key): return self
✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

⚠ Typosquatting score 3.0

Possible typosquat of: faker

  • "Beaker" is 2 edit(s) from "faker"
✓ Registered Email Domain

Email domain looks legitimate: molina.fyi>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

  • No GitHub repository link found
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
⚠ Known CVE Vulnerabilities score 3.0

Found 1 vulnerability/vulnerabilities in OSV database.

  • CVE-2013-7489: No summary provided

💡 AI App Starter Prompt

Use this prompt to build a project with Beaker 
Create a simple web-based session management tool using Python and the Beaker package. This tool will allow users to create sessions, store data in those sessions, and manage session lifetimes. Here are the steps and features you should include:

1. **Setup**: Install the necessary packages including Beaker and Flask for a web framework.
2. **Session Creation**: Implement functionality for users to start new sessions by entering a username.
3. **Data Storage**: Allow users to add key-value pairs to their session data.
4. **Session Management**: Provide options for users to view, modify, and delete session data.
5. **Session Expiry**: Include configurable session expiry times so users can set how long their session remains active.
6. **Security Measures**: Utilize Beaker's security features to protect session data from tampering.
7. **User Interface**: Develop a simple but user-friendly interface using HTML and CSS for interacting with the session management tool.

For each of these features, describe how Beaker's capabilities such as its session middleware and caching mechanisms are leveraged to achieve the desired functionality.