simplyllm

v0.1.1 suspicious
4.0
Medium Risk

Free AI LLM client with multi-provider fallback and rate limiting

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package has moderate network activity, which is concerning given the lack of detailed description and low maintainer activity. These factors suggest potential risks that warrant further investigation.

  • Moderate network risk
  • Low maintainer activity and incomplete metadata
Per-check LLM notes
  • Network: The presence of network calls suggests the package may be communicating with external servers, which could indicate legitimate functionality like fetching updates or data, but also raises concerns about potential unauthorized data transfer.
  • Shell: No shell execution patterns were detected, suggesting the package does not appear to execute system commands directly.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The package shows signs of low maintainer activity and incomplete metadata, which could indicate potential malicious intent.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 3.0

Found 2 network call pattern(s)

  • ps(params).encode() req = urllib.request.Request( url, data=body, headers={"C
  • , ) try: with urllib.request.urlopen(req, timeout=300) as resp: data = json.l
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

  • Repository not found (deleted or private)
⚠ Maintainer History score 8.0

4 maintainer concern(s) found

  • Package uploaded less than 24 hours ago (2026-06-05T03:28:33.000Z)
  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
  • Package has no PyPI classifiers (low effort / metadata quality)

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!