Repository navigation
Conversation
The server's nightly maldet scan flagged test payloads in other Vahini repositories on 2026-10-16 and, through a constant-folded .pyc, on 2026-10-19. Nothing in this repository matches today; the new test keeps it that way by checking every tracked file and name, the constants of every compiled .py, and maldet's own signatures when hex.dat is readable. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The vahinitech.com server runs maldet nightly over home folders and
/tmp. It flagged our own test payloads in other repositories on 2026-10-16, and on 2026-10-19 found one in a.pyc: the source split it with+, but Python folds two literals into one constant when it compiles.tests/test_scanner_strings.pykeeps it that way: every tracked file and name, the constants of every compiled.py, and maldet'shex.datwhen it is readable (VAHINI_MALDET_SIGS=noneskips that part). Two self-tests show it catches a joined payload and a folded one.AGENTS.md(Security) carries the short rule and links to the shared skill in vahinitech/Umbrella#16.Checked locally:
pytest tests/test_scanner_strings.py4 passed;black --checkclean; pylint on the file rated 9.46 with only the missing-pytest import error of the bare tool environment.🤖 Generated with Claude Code