ShadowCanopy
Log inGet started

crates.io package intelligence

regex — deep security report

ShadowCanopy's full breakdown of regex on crates.io: verdict, AI analysis, dependency chain, network behavior, prebuilds, and obfuscated code.

Safe to use
Deep-scanned by ShadowCanopy — no threats found in its code, dependencies, or network behavior.
Scanned 7/30/2026
Approvedregex@1.13.1View on registry ↗latest: 1.13.1

All findings are false positives from hex/Unicode escapes (\x00, \u0061, etc.) appearing inside documentation comments and regex examples. This is the legitimate, widely-used regex crate; the escapes are part of normal syntax documentation, not obfuscation or malice.

Protect your projects free

AI breakdown

Plain-English summary of what this package does and how it behaves.

The 'regex' package is the Rust regex crate (v1.13.1) providing regular expression matching for strings and byte sequences.

Capabilities

  • Regular expression compilation and matching
  • Support for string/bytes patterns and regex sets

Data access

  • None observed

Network

  • No network access observed

Standard regex library with no scripts or dependencies listed. Static findings report multiple obfuscated source files, which may warrant verification against the provided source samples.

Obfuscated / hidden code

Encoded payloads decoded statically (without executing them) so you can see what they resolve to.

Obfuscated source filesrc/regex/bytes.rs

Multiple obfuscation patterns in src/regex/bytes.rs

Obfuscated source fileregex-1.13.1/src/regex/bytes.rs

Multiple obfuscation patterns in regex-1.13.1/src/regex/bytes.rs

Security findings (6)

Static analysis rule matches, with the exact code that triggered them.

mediumObfuscated source fileATK-023src/builders.rs

Multiple obfuscation patterns in src/builders.rs

mediumObfuscated source fileATK-023regex-1.13.1/src/builders.rs

Multiple obfuscation patterns in regex-1.13.1/src/builders.rs

mediumObfuscated source fileATK-023src/lib.rs

Multiple obfuscation patterns in src/lib.rs

mediumObfuscated source fileATK-023regex-1.13.1/src/lib.rs

Multiple obfuscation patterns in regex-1.13.1/src/lib.rs

mediumObfuscated source fileATK-023src/regex/bytes.rs

Multiple obfuscation patterns in src/regex/bytes.rs

mediumObfuscated source fileATK-023regex-1.13.1/src/regex/bytes.rs

Multiple obfuscation patterns in regex-1.13.1/src/regex/bytes.rs

Files in package (110)

.cargo_vcs_info.jsonregex-1.13.1/.cargo_vcs_info.jsonCHANGELOG.mdregex-1.13.1/CHANGELOG.mdCargo.lockregex-1.13.1/Cargo.lockCargo.tomlregex-1.13.1/Cargo.tomlCargo.toml.origregex-1.13.1/Cargo.toml.origLICENSE-APACHEregex-1.13.1/LICENSE-APACHELICENSE-MITregex-1.13.1/LICENSE-MITREADME.mdregex-1.13.1/README.mdUNICODE.mdregex-1.13.1/UNICODE.mdbench/README.mdregex-1.13.1/bench/README.mdsrc/builders.rsregex-1.13.1/src/builders.rssrc/bytes.rsregex-1.13.1/src/bytes.rssrc/error.rsregex-1.13.1/src/error.rssrc/find_byte.rsregex-1.13.1/src/find_byte.rssrc/lib.rsregex-1.13.1/src/lib.rssrc/pattern.rsregex-1.13.1/src/pattern.rssrc/regex/bytes.rsregex-1.13.1/src/regex/bytes.rssrc/regex/mod.rsregex-1.13.1/src/regex/mod.rssrc/regex/string.rsregex-1.13.1/src/regex/string.rssrc/regexset/bytes.rsregex-1.13.1/src/regexset/bytes.rs

How ShadowCanopy checks crates.io packages

ShadowCanopy blocks every dependency by default and only lets through what it can verify — against live malicious-package advisories, an AI behavior scan, and a byte-for-byte hash check. It protects installs across npm, PyPI, crates.io, pkg.go.dev, RubyGems, Maven Central, NuGet, Packagist, Hex, pub.dev, Swift Package Manager.

Protect your projects freeSee what's being blocked

Other crates.io packages

serdetokiorandclapreqwestsynloganyhowserde_jsonthiserrorfutures

This report reflects ShadowCanopy's threat intelligence at page load and is informational, not a warranty. Canonical URL: https://shadowcanopy.dev/packages/crates/regex