Legitimate pydantic package. All findings are false positives: 'eval(' matches are in comments/function names for safe forward-ref handling; 'hardcoded IPs' are example timestamps and test data (e.g. 03:04:05, 123.45.67.8). No malicious behavior in the provided source.
AI breakdown
Plain-English summary of what this package does and how it behaves.
pydantic is a Python package for data validation using type hints, providing model definitions, parsing, and related utilities across its source files.
Capabilities
- Defines data models with validation
- Parses and validates input data
- Handles environment settings
Data access
- Environment variables
Network
- No network access observed
Widely used legitimate library with empty scripts and no dependencies. Multiple static findings report obfuscated files and hardcoded public IPs.
Dependency & execution chain
Every package this one pulls in, colored by verdict. Expand to walk the tree.
Security findings (16)
Static analysis rule matches, with the exact code that triggered them.
Multiple obfuscation patterns in pydantic/_internal/_generate_schema.py
Multiple obfuscation patterns in pydantic-2.13.5/pydantic/_internal/_generate_schema.py
Multiple obfuscation patterns in pydantic/_internal/_typing_extra.py
Multiple obfuscation patterns in pydantic-2.13.5/pydantic/_internal/_typing_extra.py
Multiple obfuscation patterns in tests/test_types.py
Multiple obfuscation patterns in pydantic-2.13.5/tests/test_types.py
File pydantic/functional_validators.py contains a hardcoded public IP (03:04:05) used in network code — review for hidden exfiltration or C2 endpoints.
File pydantic-2.13.5/pydantic/functional_validators.py contains a hardcoded public IP (03:04:05) used in network code — review for hidden exfiltration or C2 endpoints.
File tests/test_datetime.py contains a hardcoded public IP (09:15:00) used in network code — review for hidden exfiltration or C2 endpoints.
File pydantic-2.13.5/tests/test_datetime.py contains a hardcoded public IP (09:15:00) used in network code — review for hidden exfiltration or C2 endpoints.
File tests/test_json.py contains a hardcoded public IP (12:34:56) used in network code — review for hidden exfiltration or C2 endpoints.
File pydantic-2.13.5/tests/test_json.py contains a hardcoded public IP (12:34:56) used in network code — review for hidden exfiltration or C2 endpoints.
File tests/test_networks.py contains a hardcoded public IP (123.45.67.8) used in network code — review for hidden exfiltration or C2 endpoints.
File pydantic-2.13.5/tests/test_networks.py contains a hardcoded public IP (123.45.67.8) used in network code — review for hidden exfiltration or C2 endpoints.
File tests/test_types.py contains a hardcoded public IP (10:10:10) used in network code — review for hidden exfiltration or C2 endpoints.
File pydantic-2.13.5/tests/test_types.py contains a hardcoded public IP (10:10:10) used in network code — review for hidden exfiltration or C2 endpoints.
Package metadata
Data validation using Python type hints
Files in package (500)
How ShadowCanopy checks PyPI packages
ShadowCanopy blocks every dependency by default and only lets through what it can verify — against live malicious-package advisories, an AI behavior scan, and a byte-for-byte hash check. It protects installs across npm, PyPI, crates.io, pkg.go.dev, RubyGems, Maven Central, NuGet, Packagist, Hex, pub.dev, Swift Package Manager.
Other PyPI packages
This report reflects ShadowCanopy's threat intelligence at page load and is informational, not a warranty. Canonical URL: https://shadowcanopy.dev/packages/pypi/pydantic