ICUICU
critical

embedchain

v0.1.128

Simplest open source retrieval (RAG) framework

PyPITaranjeet SinghFirst seen Feb 22, 2026

162

Total

14

Critical

72

High

76

Medium

Findings

unknown
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    41:             raise AttributeError(
    42:                 "Elasticsearch needs a URL or CLOUD_ID attribute, "
>>> 43:                 "this can either be passed to `ElasticsearchDBConfig` or as `ELASTICSEARCH_URL` or `ELASTICSEARCH_CLOUD_ID` in `.env`"  # noqa: E501
    44:             )
    45:         self.ES_EXTRA_PARAMS = ES_EXTRA_PARAMS
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    26:     name="embedchain-app",
    27:     image=image,
>>> 28:     secrets=[Secret.from_dotenv(".env")],
    29: )
    30: 
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

>>> 1: .env
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    5: from embedchain import App
    6: 
>>> 7: load_dotenv(".env")
    8: 
    9: image = Image.debian_slim().pip_install(
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

>>> 1: .env
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    220:         return
    221: 
>>> 222:     env_vars = read_env_file(".env")
    223:     secrets_command = ["flyctl", "secrets", "set", "-a", app_name] + [f"{k}={v}" for k, v in env_vars.items()]
    224: 
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    76:         console.print(f"🚀 [bold cyan]Running: {' '.join(render_setup_cmd)}[/bold cyan]")
    77:         subprocess.run(render_setup_cmd, check=True)
>>> 78:     shutil.move(".env.example", ".env")
    79:     console.print(
    80:         """Great! Now you can install the dependencies by doing: \n
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    188: 
    189:     Args:
>>> 190:     env_file_path (str): The path to the .env file.
    191: 
    192:     Returns:
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    54:         console.print(f"🚀 [bold cyan]Running: {' '.join(modal_setup_cmd)}[/bold cyan]")
    55:         subprocess.run(modal_setup_cmd, check=True)
>>> 56:     shutil.move(".env.example", ".env")
    57:     console.print(
    58:         """Great! Now you can install the dependencies by doing: \n
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    32:     try:
    33:         console.print(f"🚀 [bold cyan]Running: {' '.join(fly_launch_command)}[/bold cyan]")
>>> 34:         shutil.move(".env.example", ".env")
    35:         subprocess.run(fly_launch_command, check=True)
    36:         console.print("✅ [bold green]'fly launch' executed successfully.[/bold green]")
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    5: from embedchain import App
    6: 
>>> 7: load_dotenv(".env")
    8: 
    9: app = FastAPI(title="Embedchain FastAPI App")
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    40:             raise AttributeError(
    41:                 "Zilliz needs a token attribute, "
>>> 42:                 "this can either be passed to `ZILLIZ_CLOUD_TOKEN` or as `ZILLIZ_CLOUD_TOKEN` in `.env`,"
    43:                 "if having a username and password, pass it in the form 'username:password' to `ZILLIZ_CLOUD_TOKEN`"
    44:             )
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    33:             raise AttributeError(
    34:                 "Zilliz needs a URI attribute, "
>>> 35:                 "this can either be passed to `ZILLIZ_CLOUD_URI` or as `ZILLIZ_CLOUD_URI` in `.env`"
    36:             )
    37: 
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    44:             )
    45:         self.ES_EXTRA_PARAMS = ES_EXTRA_PARAMS
>>> 46:         # Load API key from .env if it's not explicitly passed.
    47:         # Can only set one of 'api_key', 'basic_auth', and 'bearer_auth'
    48:         if (
Report false positive
highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    2: Name: embedchain
    3: Version: 0.1.128
>>> 4: Summary: Simplest open source retrieval (RAG) framework
    5: License: Apache License
    6: Author: Taranjeet Singh
Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ���ʘ����m�\���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ����+mz�ߢYh���m�\���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: r��v��{�{8�K>��\ Ki�ns���A

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �֫���{k�ۜ�*'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: j/ܢ{k������v�,

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ���ʘ����m�\���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ����+mz�ߢYh���m�\���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: r��v��{�{8�K>��\ Ki�ns���A

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �֫���{k�ۜ�*'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: j/ܢ{k������v�,

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    286:         else:
    287:             if data_type == "qna_pair":
>>> 288:                 data_value = list(ast.literal_eval(data_value))
    289:             metadata = {}
    290: 
Report false positive
highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    417:         )
    418: 
>>> 419:     def _eval(self, dataset: list[EvalData], metric: Union[BaseMetric, str]):
    420:         """
    421:         Evaluate the app on a dataset for a given metric.
Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��ƭr/j[��*'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: I�r�֧q�/j[��*'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��ƭr/j[��*'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: I�r�֧q�/j[��*'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    109: 
    110:     if docker:
>>> 111:         subprocess.run(["docker-compose", "build"], check=True)
    112:     else:
    113:         ctx.invoke(install_reqs)
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    120:         time.sleep(2)
    121:         os.chdir("api")
>>> 122:         subprocess.run(["pip", "install", "-r", "requirements.txt"], check=True)
    123:         os.chdir("..")
    124:         console.print("\n ✅ [bold green]Installed API requirements successfully.[/bold green]\n")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    130:     try:
    131:         os.chdir("ui")
>>> 132:         subprocess.run(["yarn"], check=True)
    133:         console.print("\n✅ [bold green]Successfully installed frontend requirements.[/bold green]")
    134:         anonymous_telemetry.capture(event_name="ec_install_reqs", properties={"success": True})
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    142: def start(docker):
    143:     if docker:
>>> 144:         subprocess.run(["docker-compose", "up"], check=True)
    145:         return
    146: 
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    152:     try:
    153:         os.chdir("api")
>>> 154:         api_process = subprocess.Popen(["python", "-m", "main"], stdout=None, stderr=None)
    155:         os.chdir("..")
    156:         console.print("✅ [bold green]API server started successfully.[/bold green]")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    166:     try:
    167:         os.chdir("ui")
>>> 168:         subprocess.run(["yarn"], check=True)
    169:         ui_process = subprocess.Popen(["yarn", "dev"])
    170:         console.print("✅ [bold green]UI server started successfully.[/bold green]")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    167:         os.chdir("ui")
    168:         subprocess.run(["yarn"], check=True)
>>> 169:         ui_process = subprocess.Popen(["yarn", "dev"])
    170:         console.print("✅ [bold green]UI server started successfully.[/bold green]")
    171:         anonymous_telemetry.capture(event_name="ec_start", properties={"success": True})
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    227:     try:
    228:         console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
>>> 229:         subprocess.run(uvicorn_command, check=True)
    230:     except subprocess.CalledProcessError as e:
    231:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    228:         console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
    229:         subprocess.run(uvicorn_command, check=True)
>>> 230:     except subprocess.CalledProcessError as e:
    231:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    232:     except KeyboardInterrupt:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    238:     try:
    239:         console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(modal_run_cmd)}[/bold cyan]")
>>> 240:         subprocess.run(modal_run_cmd, check=True)
    241:     except subprocess.CalledProcessError as e:
    242:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    239:         console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(modal_run_cmd)}[/bold cyan]")
    240:         subprocess.run(modal_run_cmd, check=True)
>>> 241:     except subprocess.CalledProcessError as e:
    242:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    243:     except KeyboardInterrupt:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    249:     try:
    250:         console.print(f"🚀 [bold cyan]Running Streamlit app with command: {' '.join(streamlit_run_cmd)}[/bold cyan]")
>>> 251:         subprocess.run(streamlit_run_cmd, check=True)
    252:     except subprocess.CalledProcessError as e:
    253:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    250:         console.print(f"🚀 [bold cyan]Running Streamlit app with command: {' '.join(streamlit_run_cmd)}[/bold cyan]")
    251:         subprocess.run(streamlit_run_cmd, check=True)
>>> 252:     except subprocess.CalledProcessError as e:
    253:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    254:     except KeyboardInterrupt:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    266:     try:
    267:         console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
>>> 268:         subprocess.run(uvicorn_command, check=True)
    269:     except subprocess.CalledProcessError as e:
    270:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    267:         console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
    268:         subprocess.run(uvicorn_command, check=True)
>>> 269:     except subprocess.CalledProcessError as e:
    270:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    271:     except KeyboardInterrupt:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    277:     try:
    278:         console.print(f"🚀 [bold cyan]Running Gradio app with command: {' '.join(gradio_run_cmd)}[/bold cyan]")
>>> 279:         subprocess.run(gradio_run_cmd, check=True)
    280:     except subprocess.CalledProcessError as e:
    281:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    278:         console.print(f"🚀 [bold cyan]Running Gradio app with command: {' '.join(gradio_run_cmd)}[/bold cyan]")
    279:         subprocess.run(gradio_run_cmd, check=True)
>>> 280:     except subprocess.CalledProcessError as e:
    281:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    282:     except KeyboardInterrupt:
Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��b��i�(�{l��b

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: u���G�������}w��y�5�V�q�t��ѽ=�v��5q�4ӭv�׹

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: =��z�^��-y��K�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: =��z�^��-y��K�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: =��z�^��-y��K�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: =��z�^��-y��K�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: =��z�^��-y��K�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: =��z�^��-y��K�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    33:         console.print(f"🚀 [bold cyan]Running: {' '.join(fly_launch_command)}[/bold cyan]")
    34:         shutil.move(".env.example", ".env")
>>> 35:         subprocess.run(fly_launch_command, check=True)
    36:         console.print("✅ [bold green]'fly launch' executed successfully.[/bold green]")
    37:     except subprocess.CalledProcessError as e:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    35:         subprocess.run(fly_launch_command, check=True)
    36:         console.print("✅ [bold green]'fly launch' executed successfully.[/bold green]")
>>> 37:     except subprocess.CalledProcessError as e:
    38:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    39:     except FileNotFoundError:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    53:         modal_setup_cmd = ["modal", "setup"] + list(extra_args)
    54:         console.print(f"🚀 [bold cyan]Running: {' '.join(modal_setup_cmd)}[/bold cyan]")
>>> 55:         subprocess.run(modal_setup_cmd, check=True)
    56:     shutil.move(".env.example", ".env")
    57:     console.print(
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    75:         render_setup_cmd = ["render", "config", "init"]
    76:         console.print(f"🚀 [bold cyan]Running: {' '.join(render_setup_cmd)}[/bold cyan]")
>>> 77:         subprocess.run(render_setup_cmd, check=True)
    78:     shutil.move(".env.example", ".env")
    79:     console.print(
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    98: 
    99: def setup_hf_app():
>>> 100:     subprocess.run(["pip", "install", "huggingface_hub[cli]"], check=True)
    101:     hf_setup_file = os.path.join(os.path.expanduser("~"), ".cache/huggingface/token")
    102:     if os.path.exists(hf_setup_file):
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    112:                 """
    113:         )
>>> 114:         subprocess.run(["huggingface-cli", "login"], check=True)
    115:     console.print("Great! Now you can install the dependencies by doing `pip install -r requirements.txt`")
    116: 
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    126:     try:
    127:         console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
>>> 128:         subprocess.run(uvicorn_command, check=True)
    129:     except subprocess.CalledProcessError as e:
    130:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    127:         console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
    128:         subprocess.run(uvicorn_command, check=True)
>>> 129:     except subprocess.CalledProcessError as e:
    130:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    131:     except KeyboardInterrupt:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    137:     try:
    138:         console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(modal_run_cmd)}[/bold cyan]")
>>> 139:         subprocess.run(modal_run_cmd, check=True)
    140:     except subprocess.CalledProcessError as e:
    141:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    138:         console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(modal_run_cmd)}[/bold cyan]")
    139:         subprocess.run(modal_run_cmd, check=True)
>>> 140:     except subprocess.CalledProcessError as e:
    141:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    142:     except KeyboardInterrupt:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    148:     try:
    149:         console.print(f"🚀 [bold cyan]Running Streamlit app with command: {' '.join(streamlit_run_cmd)}[/bold cyan]")
>>> 150:         subprocess.run(streamlit_run_cmd, check=True)
    151:     except subprocess.CalledProcessError as e:
    152:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    149:         console.print(f"🚀 [bold cyan]Running Streamlit app with command: {' '.join(streamlit_run_cmd)}[/bold cyan]")
    150:         subprocess.run(streamlit_run_cmd, check=True)
>>> 151:     except subprocess.CalledProcessError as e:
    152:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    153:     except KeyboardInterrupt:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    165:     try:
    166:         console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
>>> 167:         subprocess.run(uvicorn_command, check=True)
    168:     except subprocess.CalledProcessError as e:
    169:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    166:         console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
    167:         subprocess.run(uvicorn_command, check=True)
>>> 168:     except subprocess.CalledProcessError as e:
    169:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    170:     except KeyboardInterrupt:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    176:     try:
    177:         console.print(f"🚀 [bold cyan]Running Gradio app with command: {' '.join(gradio_run_cmd)}[/bold cyan]")
>>> 178:         subprocess.run(gradio_run_cmd, check=True)
    179:     except subprocess.CalledProcessError as e:
    180:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    177:         console.print(f"🚀 [bold cyan]Running Gradio app with command: {' '.join(gradio_run_cmd)}[/bold cyan]")
    178:         subprocess.run(gradio_run_cmd, check=True)
>>> 179:     except subprocess.CalledProcessError as e:
    180:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    181:     except KeyboardInterrupt:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    227:         # Set secrets
    228:         console.print(f"🔐 [bold cyan]Setting secrets for {app_name}[/bold cyan]")
>>> 229:         subprocess.run(secrets_command, check=True)
    230: 
    231:         # Deploy application
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    231:         # Deploy application
    232:         console.print(f"🚀 [bold cyan]Running: {' '.join(deploy_command)}[/bold cyan]")
>>> 233:         subprocess.run(deploy_command, check=True)
    234:         console.print("✅ [bold green]'fly deploy' executed successfully.[/bold green]")
    235: 
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    234:         console.print("✅ [bold green]'fly deploy' executed successfully.[/bold green]")
    235: 
>>> 236:     except subprocess.CalledProcessError as e:
    237:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    238:     except FileNotFoundError:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    246:     try:
    247:         console.print(f"🚀 [bold cyan]Running: {' '.join(modal_deploy_cmd)}[/bold cyan]")
>>> 248:         subprocess.run(modal_deploy_cmd, check=True)
    249:         console.print("✅ [bold green]'modal deploy' executed successfully.[/bold green]")
    250:     except subprocess.CalledProcessError as e:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    248:         subprocess.run(modal_deploy_cmd, check=True)
    249:         console.print("✅ [bold green]'modal deploy' executed successfully.[/bold green]")
>>> 250:     except subprocess.CalledProcessError as e:
    251:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    252:     except FileNotFoundError:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    267:                       \n\n"""
    268:         )
>>> 269:         subprocess.run(streamlit_deploy_cmd, check=True)
    270:     except subprocess.CalledProcessError as e:
    271:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    268:         )
    269:         subprocess.run(streamlit_deploy_cmd, check=True)
>>> 270:     except subprocess.CalledProcessError as e:
    271:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    272:     except FileNotFoundError:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    282:     try:
    283:         console.print(f"🚀 [bold cyan]Running: {' '.join(render_deploy_cmd)}[/bold cyan]")
>>> 284:         subprocess.run(render_deploy_cmd, check=True)
    285:         console.print("✅ [bold green]'render blueprint launch' executed successfully.[/bold green]")
    286:     except subprocess.CalledProcessError as e:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    284:         subprocess.run(render_deploy_cmd, check=True)
    285:         console.print("✅ [bold green]'render blueprint launch' executed successfully.[/bold green]")
>>> 286:     except subprocess.CalledProcessError as e:
    287:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    288:     except FileNotFoundError:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    297:     try:
    298:         console.print(f"🚀 [bold cyan]Running: {' '.join(gradio_deploy_cmd)}[/bold cyan]")
>>> 299:         subprocess.run(gradio_deploy_cmd, check=True)
    300:         console.print("✅ [bold green]'gradio deploy' executed successfully.[/bold green]")
    301:     except subprocess.CalledProcessError as e:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    299:         subprocess.run(gradio_deploy_cmd, check=True)
    300:         console.print("✅ [bold green]'gradio deploy' executed successfully.[/bold green]")
>>> 301:     except subprocess.CalledProcessError as e:
    302:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
    303:     except FileNotFoundError:
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    315:     try:
    316:         console.print(f"🚀 [bold cyan]Running: {' '.join(hf_spaces_deploy_cmd)}[/bold cyan]")
>>> 317:         subprocess.run(hf_spaces_deploy_cmd, check=True)
    318:         console.print("✅ [bold green]'huggingface-cli upload' executed successfully.[/bold green]")
    319:     except subprocess.CalledProcessError as e:
Report false positive
highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    2: name = "embedchain"
    3: version = "0.1.128"
>>> 4: description = "Simplest open source retrieval (RAG) framework"
    5: authors = [
    6:     "Taranjeet Singh <taranjeet@embedchain.ai>",
Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    317:         subprocess.run(hf_spaces_deploy_cmd, check=True)
    318:         console.print("✅ [bold green]'huggingface-cli upload' executed successfully.[/bold green]")
>>> 319:     except subprocess.CalledProcessError as e:
    320:         console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    247:         if url.path.endswith(".yaml"):
    248:             try:
>>> 249:                 response = requests.get(source)
    250:                 response.raise_for_status()
    251:                 try:
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    89:     def check(self, api_key):
    90:         validation_url = f"{self.host}/api/v1/accounts/api_keys/validate/"
>>> 91:         response = requests.post(validation_url, headers={"Authorization": f"Token {api_key}"})
    92:         if response.status_code == 200:
    93:             return True
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumNS-003Network SuspiciousMedium ConfidenceLine 0

JavaScript fetch() call

Detected by automated pattern matching (rule NS-003) with medium confidence. May be a false positive.

    105:         if ids is not None:
    106:             for i in range(0, len(ids), self.batch_size):
>>> 107:                 result = self.pinecone_index.fetch(ids=ids[i : i + self.batch_size])
    108:                 vectors = result.get("vectors")
    109:                 batch_existing_ids = list(vectors.keys())
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    30:         if not config.model:
    31:             config.model = (
>>> 32:                 "a16z-infra/llama13b-v2-chat:df7690f1994d94e96ad9d568eac121aecf50684a0b0963b25a41cc40061269e5"
    33:             )
    34: 
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    40:             ),
    41:         }
>>> 42:         response = requests.get(url, headers=headers)
    43:         try:
    44:             response.raise_for_status()
Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    84:         def load_link(link: str):
    85:             try:
>>> 86:                 beehiiv_data = requests.get(link, headers=headers)
    87:                 beehiiv_data.raise_for_status()
    88: 
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    23: 
    24:         if url.scheme in ["http", "https"]:
>>> 25:             response = requests.get(content)
    26:             response.raise_for_status()
    27:             return StringIO(response.text)
Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    122: ## ✨ Live demo
    123: 
>>> 124: Checkout the [Chat with PDF](https://embedchain.ai/demo/chat-pdf) live demo we created using Embedchain. You can find the source code [here](https://github.com/mem0ai/mem0/tree/main/embedchain/examples/chat-pdf).
    125: 
    126: ## 🔍 Usage
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (5.2 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (5.0 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    34:     def _load_post(self, post_id):
    35:         post_url = f"{self.domain}posts/{post_id}.json"
>>> 36:         response = requests.get(post_url)
    37:         try:
    38:             response.raise_for_status()
Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    61:         logger.info(f"Searching data on discourse url: {self.domain}, for query: {query}")
    62:         search_url = f"{self.domain}search.json?q={query}"
>>> 63:         response = requests.get(search_url)
    64:         try:
    65:             response.raise_for_status()
Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    32:         current_path = parsed_url.path
    33: 
>>> 34:         response = requests.get(url)
    35:         if response.status_code != 200:
    36:             logger.info(f"Failed to fetch the website: {response.status_code}")
Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    56:     @staticmethod
    57:     def _load_data_from_url(url: str) -> list:
>>> 58:         response = requests.get(url)
    59:         if response.status_code != 200:
    60:             logger.info(f"Failed to fetch the website: {response.status_code}")
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    45: ## ✨ Live demo
    46: 
>>> 47: Checkout the [Chat with PDF](https://embedchain.ai/demo/chat-pdf) live demo we created using Embedchain. You can find the source code [here](https://github.com/mem0ai/mem0/tree/main/embedchain/examples/chat-pdf).
    48: 
    49: ## 🔍 Usage
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (5.2 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (5.0 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    69:                 json_data = json.load(json_file)
    70:         elif re.match(VALID_URL_PATTERN, content):
>>> 71:             response = requests.get(content)
    72:             if response.status_code == 200:
    73:                 json_data = response.json()
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    53:         while not done:
    54:             block_url = self.BLOCK_CHILD_URL_TMPL.format(block_id=cur_block_id)
>>> 55:             res = requests.get(block_url, headers=self.headers)
    56:             data = res.json()
    57: 
Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    17: 
    18:         if url.scheme in ["http", "https"]:
>>> 19:             response = requests.get(content)
    20:             response.raise_for_status()
    21:             return StringIO(response.text)
Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    40:         if urlparse(sitemap_source).scheme in ("http", "https"):
    41:             try:
>>> 42:                 response = requests.get(sitemap_source, headers=headers)
    43:                 response.raise_for_status()
    44:                 soup = BeautifulSoup(response.text, "xml")
Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    189:         print("🛠️ Fetching pipeline details from the platform...")
    190:         url = f"{self.client.host}/api/v1/pipelines/{id}/cli/"
>>> 191:         r = requests.get(
    192:             url,
    193:             headers={"Authorization": f"Token {self.client.api_key}"},
Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    213:         }
    214:         url = f"{self.client.host}/api/v1/pipelines/cli/create/"
>>> 215:         r = requests.post(
    216:             url,
    217:             json=payload,
Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    233:     def _get_presigned_url(self, data_type, data_value):
    234:         payload = {"data_type": data_type, "data_value": data_value}
>>> 235:         r = requests.post(
    236:             f"{self.client.host}/api/v1/pipelines/{self.id}/cli/presigned_url/",
    237:             json=payload,
Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    244:         try:
    245:             with open(file_path, "rb") as file:
>>> 246:                 response = requests.put(presigned_url, data=file)
    247:                 response.raise_for_status()
    248:                 return response.status_code == 200
Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    269:         url = f"{self.client.host}{endpoint}"
    270:         headers = {"Authorization": f"Token {self.client.api_key}"}
>>> 271:         response = requests.post(url, json=payload, headers=headers)
    272:         response.raise_for_status()
    273:         return response
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (5.2 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    32: 
    33:         output = []
>>> 34:         response = requests.get(url)
    35: 
    36:         try:
Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    84:         def load_link(link: str):
    85:             try:
>>> 86:                 substack_data = requests.get(link)
    87:                 substack_data.raise_for_status()
    88: 
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    74:     console.print(f"Creating a new embedchain app in [green]{Path().resolve()}[/green]\n")
    75:     try:
>>> 76:         response = requests.get(zip_url)
    77:         response.raise_for_status()
    78:         with tempfile.NamedTemporaryFile(delete=False) as tmp_file:
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

Scan History

DateRiskFindings
Feb 25, 2026critical162
Feb 23, 2026critical162
Feb 22, 2026critical162