nopaddle

v0.1.0 suspicious
5.0
Medium Risk

PaddleOCR-grade document parsing, minus PaddlePaddle, minus PyTorch.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows signs of recent and rapid development, which could indicate suspicious activity. While there are no direct indications of malicious intent, the network calls warrant further investigation.

  • Recent and rapid development
  • Potential network-based activities
Per-check LLM notes
  • Network: The network call pattern suggests the package may be checking internet connectivity or performing some form of external validation, which is not inherently malicious but should be reviewed.
  • Shell: No shell execution patterns detected, indicating low risk in this area.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The recent creation and rapid development suggest potential suspicious activity.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 1.5

Found 1 network call pattern(s)

  • return False try: socket.create_connection((host, port), timeout=timeout).close() return True
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

⚠ Suspicious Page Links score 2.0

Found 1 suspicious link(s) on the package page

  • Non-HTTPS external link: http://127.0.0.1:8000/parse
⚠ Git Repository History score 5.0

Git history flags: Repository created very recently: 0 day(s) ago (2026-06-05T05:41:22Z)

  • Repository created very recently: 0 day(s) ago (2026-06-05T05:41:22Z)
  • All 21 commits happened within 24 hours
⚠ Maintainer History score 6.0

3 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Package uploaded less than 24 hours ago (2026-06-05T09:00:57.000Z)
  • Author "Bei Mi Chen" appears to have only 1 package on PyPI (new or inactive account)

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!