antihook

v0.1.2 suspicious
5.0
Medium Risk

A native Cython memory integrity and unhooking library for Windows

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package has a moderate risk score due to its recent upload and lack of maintainer information, which raises concerns about its authenticity and purpose.

  • Metadata risk is high due to recent upload and lack of maintainer details.
  • Overall low risks in other categories do not outweigh metadata concerns.
Per-check LLM notes
  • Network: No network calls suggest normal behavior unless specific network interactions are expected based on the package's intended functionality.
  • Shell: No shell executions detected, indicating low risk of immediate system compromise.
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious intent.
  • Credentials: No credential harvesting patterns detected, suggesting safe handling of secrets.
  • Metadata: The package was uploaded recently and lacks maintainer details, raising suspicion of potential malintent.

🔬 Heuristic Checks

Outbound Network Calls

No suspicious network call patterns found

Code Obfuscation

No obfuscation patterns detected

Shell / Subprocess Execution

No shell execution patterns detected

Credential Harvesting

No credential harvesting patterns detected

Typosquatting

No typosquatting candidates detected

Registered Email Domain

Email domain looks legitimate: gmail.com>

Suspicious Page Links score 2.0

Found 1 suspicious link(s) on the package page

  • Non-HTTPS external link: http://www.apache.org/licenses/LICENSE-2.0
Git Repository History

No GitHub repository linked

  • No GitHub repository link found
Maintainer History score 6.0

3 maintainer concern(s) found

  • Package uploaded less than 24 hours ago (2026-06-04T18:11:57.000Z)
  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)