search

DataDog / guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages
https://securitylabs.datadoghq.com/articles/guarddog-identify-malicious-pypi-packages/
Apache License 2.0
625 stars 44 forks source link

Enhance exfiltrate-sensitive-data rule #475

Closed ikretz closed 1 month ago

ikretz commented 1 month ago

This PR adds os.environ (the mapping object) to the list of sources for the Python exfiltrate-sensitive-data rule.

No new false positives were observed in a test against the top 500 Python packages.