low

pyllamacpp

v2.4.3

Python bindings for llama.cpp

PyPIAbdeladim SadikiFirst seen Feb 22, 2026Source

Total

Critical

High

Medium

Findings

unknown

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �&R{"�w�.��.��

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    108:   --f16_kv F16_KV       use fp16 for KV cache
    109:   --logits_all LOGITS_ALL
>>> 110:                         the llama_eval() call computes all logits, not just the last one
    111:   --vocab_only VOCAB_ONLY
    112:                         only load the vocabulary, no weights

Report false positive

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: r��+a��mץiئ

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��r�V�i�i�جr�,��

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    95:   --f16_kv F16_KV       use fp16 for KV cache
    96:   --logits_all LOGITS_ALL
>>> 97:                         the llama_eval() call computes all logits, not just the last one
    98:   --vocab_only VOCAB_ONLY
    99:                         only load the vocabulary, no weights

Report false positive

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: r��+a��mץiئ

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��r�V�i�i�جr�,��

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: r��?r螏�ƥ�)�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �-��ך�Zj׬

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    46: 
    47: template <eval_mode mode = eval_expr>
>>> 48: object eval(const str &expr, object global = globals(), object local = object()) {
    49:     if (!local) {
    50:         local = global;

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    80: 
    81: template <eval_mode mode = eval_expr, size_t N>
>>> 82: object eval(const char (&s)[N], object global = globals(), object local = object()) {
    83:     /* Support raw string literals by removing common leading whitespace */
    84:     auto expr = (s[0] == '\n') ? str(module_::import("textwrap").attr("dedent")(s)) : str(s);

Report false positive

highSC-003Suspicious CommandsMedium ConfidenceLine 0

Dynamic code execution via exec()

Detected by automated pattern matching (rule SC-003) with medium confidence. May be a false positive.

    86: }
    87: 
>>> 88: inline void exec(const str &expr, object global = globals(), object local = object()) {
    89:     eval<eval_statements>(expr, std::move(global), std::move(local));
    90: }

Report false positive

highSC-003Suspicious CommandsMedium ConfidenceLine 0

Dynamic code execution via exec()

Detected by automated pattern matching (rule SC-003) with medium confidence. May be a false positive.

    91: 
    92: template <size_t N>
>>> 93: void exec(const char (&s)[N], object global = globals(), object local = object()) {
    94:     eval<eval_statements>(s, std::move(global), std::move(local));
    95: }

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    1453: #    define PYBIND11_EVAL3(...) PYBIND11_EVAL2(PYBIND11_EVAL2(PYBIND11_EVAL2(__VA_ARGS__)))
    1454: #    define PYBIND11_EVAL4(...) PYBIND11_EVAL3(PYBIND11_EVAL3(PYBIND11_EVAL3(__VA_ARGS__)))
>>> 1455: #    define PYBIND11_EVAL(...) PYBIND11_EVAL4(PYBIND11_EVAL4(PYBIND11_EVAL4(__VA_ARGS__)))
    1456: #    define PYBIND11_MAP_END(...)
    1457: #    define PYBIND11_MAP_OUT

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    1477: // PYBIND11_MAP_LIST(f, t, a1, a2, ...) expands to f(t, a1), f(t, a2), ...
    1478: #    define PYBIND11_MAP_LIST(f, t, ...)                                                          \
>>> 1479:         PYBIND11_EVAL(PYBIND11_MAP_LIST1(f, t, __VA_ARGS__, (), 0))
    1480: 
    1481: #    define PYBIND11_NUMPY_DTYPE(Type, ...)                                                       \

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    1499: // PYBIND11_MAP2_LIST(f, t, a1, a2, ...) expands to f(t, a1, a2), f(t, a3, a4), ...
    1500: #    define PYBIND11_MAP2_LIST(f, t, ...)                                                         \
>>> 1501:         PYBIND11_EVAL(PYBIND11_MAP2_LIST1(f, t, __VA_ARGS__, (), 0))
    1502: 
    1503: #    define PYBIND11_NUMPY_DTYPE_EX(Type, ...)                                                    \

Report false positive

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �@��=�ښ�k�c��-

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �@��=�ښ�k�c��-

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �@��=�ښ�k�c��-

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    108:   --f16_kv F16_KV       use fp16 for KV cache
    109:   --logits_all LOGITS_ALL
>>> 110:                         the llama_eval() call computes all logits, not just the last one
    111:   --vocab_only VOCAB_ONLY
    112:                         only load the vocabulary, no weights

Report false positive

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: r��+a��mץiئ

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��r�V�i�i�جr�,��

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    53:     'logits_all': {
    54:         'type': bool,
>>> 55:         'description': "the llama_eval() call computes all logits, not just the last one",
    56:         'options': None,
    57:         'default': False

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    61:         :param n_gpu_layers: number of layers to store in VRAM
    62:         :param f16_kv: use fp16 for KV cache
>>> 63:         :param logits_all: the llama_eval() call computes all logits, not just the last one
    64:         :param vocab_only: only load the vocabulary, no weights
    65:         :param use_mlock: force system to keep model in RAM

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    246:                         n_eval = self.gpt_params.n_batch
    247: 
>>> 248:                     pp.llama_eval(self._ctx,
    249:                                   predicted_tokens[i:],
    250:                                   n_eval,

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    442:                 n_eval = n_batch
    443: 
>>> 444:             pp.llama_eval(self._ctx,
    445:                           tokens[i:],
    446:                           n_eval,

Report false positive

highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    116:             build_temp.mkdir(parents=True)
    117: 
>>> 118:         subprocess.run(
    119:             ["cmake", ext.sourcedir, *cmake_args], cwd=build_temp, check=True
    120:         )

Report false positive

highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    119:             ["cmake", ext.sourcedir, *cmake_args], cwd=build_temp, check=True
    120:         )
>>> 121:         subprocess.run(
    122:             ["cmake", "--build", ".", *build_args], cwd=build_temp, check=True
    123:         )

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    101:    py::buffer_info buf = tokens.request();
    102:    llama_token *tokens_ptr = static_cast<llama_token *>(buf.ptr);
>>> 103:    return llama_eval(ctx, tokens_ptr, n_tokens, n_past, n_threads);
    104: }
    105:

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    458:         {
    459:             const std::vector<llama_token> tmp(params.n_batch, 0);
>>> 460:             llama_eval(ctx, tmp.data(), tmp.size(), 0, params.n_threads);
    461:         }
    462:

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    463:         {
    464:             const std::vector<llama_token> tmp = { 0, };
>>> 465:             llama_eval(ctx, tmp.data(), tmp.size(), params.n_predict - 1, params.n_threads);
    466:         }
    467:

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    645:             }
    646: 
>>> 647:             // try to reuse a matching prefix from the loaded session instead of re-eval (via n_past)
    648:             if (n_session_consumed < (int) session_tokens.size()) {
    649:                 size_t i = 0;

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    674:                     n_eval = params.n_batch;
    675:                 }
>>> 676:                 if (llama_eval(ctx, &embd[i], n_eval, n_past, params.n_threads)) {
    677:                     fprintf(stderr, "%s : failed to eval\n", __func__);
    678:                     return 1;

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    1053:             }
    1054: 
>>> 1055:             // try to reuse a matching prefix from the loaded session instead of re-eval (via n_past)
    1056:             if (n_session_consumed < (int) session_tokens.size()) {
    1057:                 size_t i = 0;

Report false positive

highSC-004Suspicious CommandsMedium ConfidenceLine 0

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    1082:                     n_eval = params.n_batch;
    1083:                 }
>>> 1084:                 if (llama_eval(ctx, &embd[i], n_eval, n_past, params.n_threads)) {
    1085:                     fprintf(stderr, "%s : failed to eval\n", __func__);
    1086:                     return 1;

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (5.0 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumNS-003Network SuspiciousMedium ConfidenceLine 0

JavaScript fetch() call

Detected by automated pattern matching (rule NS-003) with medium confidence. May be a false positive.

    1044: struct error_scope {
    1045:     PyObject *type, *value, *trace;
>>> 1046:     error_scope() { PyErr_Fetch(&type, &value, &trace); }
    1047:     ~error_scope() { PyErr_Restore(type, value, trace); }
    1048: };

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (5.1 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (5.1 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (5.2 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (5.0 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumNS-003Network SuspiciousMedium ConfidenceLine 0

JavaScript fetch() call

Detected by automated pattern matching (rule NS-003) with medium confidence. May be a false positive.

    382:     /// Python error indicator will be cleared.
    383:     error_already_set() : std::runtime_error(detail::error_string()) {
>>> 384:         PyErr_Fetch(&m_type.ptr(), &m_value.ptr(), &m_trace.ptr());
    385:     }
    386:

Report false positive

mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    441: inline void raise_from(PyObject *type, const char *message) {
    442:     // Based on _PyErr_FormatVFromCause:
>>> 443:     // https://github.com/python/cpython/blob/467ab194fc6189d9f7310c89937c51abeac56839/Python/errors.c#L405
    444:     // See https://github.com/pybind/pybind11/pull/2112 for details.
    445:     PyObject *exc = nullptr, *val = nullptr, *val2 = nullptr, *tb = nullptr;

Report false positive

mediumNS-003Network SuspiciousMedium ConfidenceLine 0

JavaScript fetch() call

Detected by automated pattern matching (rule NS-003) with medium confidence. May be a false positive.

    446: 
    447:     assert(PyErr_Occurred());
>>> 448:     PyErr_Fetch(&exc, &val, &tb);
    449:     PyErr_NormalizeException(&exc, &val, &tb);
    450:     if (tb != nullptr) {

Report false positive

mediumNS-003Network SuspiciousMedium ConfidenceLine 0

JavaScript fetch() call

Detected by automated pattern matching (rule NS-003) with medium confidence. May be a false positive.

    457:     PyErr_SetString(type, message);
    458: 
>>> 459:     PyErr_Fetch(&exc, &val2, &tb);
    460:     PyErr_NormalizeException(&exc, &val2, &tb);
    461:     Py_INCREF(val);

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

Scan History

Date	Risk	Findings	Files	Duration
Feb 25, 2026	low	72	93	0.00s
Feb 23, 2026	low	72	93	0.00s
Feb 22, 2026	low	72	93	0.00s