spider_firewall 2.40.0

Done dynamic on Linux job 113249 crates.io SBOM Findings (VEX) Compare with 2.39.0

The planted github_token_env left the VM.

100

critical

False positive. A person reviewed this verdict and found the crate benign. The evidence below is what the analysis saw.

Evidence

Points	Signal	Where	What
100	honeytoken_left_vm network	https://api.github.com	The planted github_token_env left the VM.
30	static:exfiltration_endpoint static · spider_firewall	build.rs:488	high severity exfiltration_endpoint in build_script code: ngrok.io
10	disk_outside_build disk	/work/home/.cargo/spider_firewall-buildcache	The build left /work/home/.cargo/spider_firewall-buildcache (dir).
10	network_lookup network · spider_firewall	api.github.com	The build looked up api.github.com.
10	network_lookup network · spider_firewall	raw.githubusercontent.com	The build looked up raw.githubusercontent.com.

4 without points

Signal	Where	What
static:build_script static · spider_firewall	build.rs	low severity build_script in build_script code: build.rs
static:network_access static · spider_firewall	build.rs:195	medium severity network_access in build_script code (6 places): reqwest::blocking::Client
static:secret_environment_variable static · spider_firewall	build.rs:29	high severity secret_environment_variable in build_script code (2 places): GITHUB_TOKEN
static:url_literal static · spider_firewall	build.rs:804	low severity url_literal in build_script code (54 places): https://

Behavior

Profile

disk:outside leak:github_token_env net:api.github.com net:raw.githubusercontent.com static:exfiltration_endpoint static:network_access static:secret_environment_variable

Static findings

high secret_environment_variable build_script 2

GITHUB_TOKEN build.rs:29
GH_TOKEN build.rs:29

high exfiltration_endpoint build_script 1

ngrok.io build.rs:488

medium network_access build_script 6

reqwest::blocking::Client build.rs:195 build.rs:270 build.rs:314 build.rs:722 build.rs:837
reqwest::blocking::Client::builder build.rs:916

low url_literal build_script 44

https:// build.rs:804
http:// build.rs:805
https://api.github.com/repos/ShadowWhisperer/BlockLists/contents/RAW build.rs:958
https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/{} build.rs:1001
https://api.github.com/repos/badmojr/1Hosts/contents/Lite/ build.rs:1049
https://raw.githubusercontent.com/badmojr/1Hosts/master/{} build.rs:1069
https://raw.githubusercontent.com/spider-rs/bad_websites/main/websites.txt build.rs:1103
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts build.rs:1122
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/malware-nl.txt build.rs:1134
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/phishing-nl.txt build.rs:1145
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/scam-nl.txt build.rs:1156
https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains.txt build.rs:1167
https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/porn/hosts build.rs:1181
https://malware-filter.gitlab.io/malware-filter/phishing-filter-hosts.txt build.rs:1194
https://lists.cyberhost.uk/malware.txt build.rs:1209
https://raw.githubusercontent.com/romainmarcoux/malicious-domains/main/full-domains-aa.txt build.rs:1226
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/ransomware-nl.txt build.rs:1241
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/fraud-nl.txt build.rs:1252
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/abuse-nl.txt build.rs:1263
https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-ACTIVE.txt build.rs:1274
https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/suspicious/domain.txt build.rs:1285
https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/domains.txt build.rs:1296
https://raw.githubusercontent.com/durablenapkin/scamblocklist/master/hosts.txt build.rs:1307
https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/tif.mini-onlydomains.txt build.rs:1321
https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/fake-onlydomains.txt build.rs:1337
https://threatfox.abuse.ch/downloads/hostfile/ build.rs:1354
https://hole.cert.pl/domains/v2/domains_hosts.txt build.rs:1370
https://raw.githubusercontent.com/PhishIndex/phishindex-blocklist/main/Data/Malicious%20Domains/txt/all_domains.txt build.rs:1385
https://raw.githubusercontent.com/sjhgvr/oisd/main/domainswild2_small.txt build.rs:1407
https://raw.githubusercontent.com/romainmarcoux/malicious-domains/main/full-domains-{}.txt build.rs:1424
https://phishunt.io/feed.txt build.rs:1444
https://api.tweetfeed.live/v1/blocklist/domains.txt build.rs:1464
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/redirect-nl.txt build.rs:1479
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/tracking-nl.txt build.rs:1490
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/ads-nl.txt build.rs:1501
https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/tif-onlydomains.txt build.rs:1513
https://urlhaus.abuse.ch/downloads/hostfile/ build.rs:1522
https://www.spamhaus.org/drop/drop.txt build.rs:1723
https://feodotracker.abuse.ch/downloads/ipblocklist.txt build.rs:1737
https://rules.emergingthreats.net/blockrules/compromised-ips.txt build.rs:1753
https://raw.githubusercontent.com/elliotwutingfeng/ThreatFox-IOC-IPs/main/ips.txt build.rs:1772
https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-dnscrypt-blocked-ips.txt build.rs:1788
https://raw.githubusercontent.com/stamparm/ipsum/master/levels/3.txt build.rs:1808
// Auto-generated by build.rs — known-bad IPv4 ranges (inclusive (start, end) u32),\u{a}// sorted and merged for binary-search lookup.\u{a}// Sources:\u{a}// Spamhaus DROP (https://www.spamhaus.or… build.rs:1845

low build_script build_script 1

build.rs build.rs

info url_literal library 9

https://URL-Evil.test/path?x=1 src/dynamic.rs:550
https:// src/lib.rs:236
http:// src/lib.rs:237
https://{host}/ src/lib.rs:477
https://www.veed.io/ms-MY/peralatan src/lib.rs:501
https://www.trustpilot.com/review/grey.co src/lib.rs:559
https://admissions.usask.ca/programs src/lib.rs:573
https://platform.openai.com/docs/api-reference src/lib.rs:599
https://www.sina.com.cn/news src/lib.rs:684

info url_literal binary 1

https://example.com/path/to/page benches/firewall_bench.rs:37

Run: check

failed

Honeytoken github_token_env left the VM through https://api.github.com

Ended: agent reported the end
Guest: exit code 101
Run time: 1 min 15 s
VM restore: 65 ms
Payload: 10582 files, 206.8 MiB
Files opened: 21082

Processes 396

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 372 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	check --locked --offline	5 ms	1 min 15 s	25856
└rustc /usr/local/bin/rustc ×30	--crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow	299 ms	702 ms	0
└toolchain /usr/bin/cc	-m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustc7sgrdX/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib	854 ms	144 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccGrjPpv.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustc7sgrdX/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L	861 ms	137 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccGrjPpv.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustc7sgrdX/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6	864 ms	132 ms	0
└build_script proc-macro2		1.0 s	89 ms	0
└rustc /usr/local/bin/rustc ×3	--version	1.0 s	7 ms	0
└rustc /usr/local/bin/rustc	--cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-4f3f927bd5485a92/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu	1.0 s	33 ms	256
└rustc /usr/local/bin/rustc ×135	--crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.26/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=f65c548d1bdebf35 -C extra-filename=-76fddff3086055f2 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow	1.2 s	49 ms	0
└build_script quote		1.7 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	1.7 s	8 ms	0
└build_script libc		4.6 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	4.6 s	7 ms	0
└build_script serde_core		11.4 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	11.4 s	7 ms	0
└build_script icu_normalizer_data		11.9 s	1 ms	0
└build_script icu_properties_data		11.9 s	1 ms	0
└build_script rustversion		19.2 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	19.2 s	7 ms	0
└build_script ring		19.2 s	1.7 s	0
└toolchain /usr/bin/cc ×2	-E /work/target/debug/build/ring-88f4c4b66b466fb5/out/131079954664299129detect_compiler_family.c	19.2 s	24 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-88f4c4b66b466fb5/out/131079954664299129detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 131079954664299129detect_compiler_family.c -dumpbase-ext .c	19.2 s	22 ms	0
└toolchain /usr/bin/cc ×2	-?	19.2 s	2 ms	256
└toolchain /usr/bin/cc ×30	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -I /cw/vendor/ring-0.17.14/include -I /cw/vendor/ring-0.17.14/pregenerated -Wall -Wextra -fvisibility=hidden -std=c1x -Wall -Wbad-function-cast -Wcast-align -Wcast-qual -Wconversion -Wmissing-field-initializers -Wmissing-include-dirs -Wnested-externs -Wredundant-decls -Wshadow -Wsign-compare -Wsign-conversion -Wstrict-prototypes -Wundef -Wuninitialized -g3 -DNDEBUG -o	19.2 s	251 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -I /cw/vendor/ring-0.17.14/include -I /cw/vendor/ring-0.17.14/pregenerated -imultiarch x86_64-linux-gnu -dD -D NDEBUG /cw/vendor/ring-0.17.14/crypto/curve25519/curve25519.c -quiet -dumpdir /work/target/debug/build/ring-88f4c4b66b466fb5/out/ -dumpbase 25ac62e5b3c53843-curve25519.c -dumpbase-ext .c -m64 -mtune=generic -march=x86-64 -g3 -O0 -Wextra -Wall -Wbad-function-cast -Wcast-align -Wcast-qual -Wconversion -Wmissing-field-initializers -Wmissing-include-dirs	19.2 s	200 ms	0
└toolchain /usr/bin/as	-I /cw/vendor/ring-0.17.14/include -I /cw/vendor/ring-0.17.14/pregenerated --gdwarf-5 --64 -o /work/target/debug/build/ring-88f4c4b66b466fb5/out/25ac62e5b3c53843-curve25519.o /tmp/cc7Untaz.s	19.4 s	46 ms	0
└toolchain /usr/bin/ar ×4	cqD /work/target/debug/build/ring-88f4c4b66b466fb5/out/libring_core_0_17_14_.a /work/target/debug/build/ring-88f4c4b66b466fb5/out/25ac62e5b3c53843-curve25519.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/0bbbd18bda93c05b-aes_nohw.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/00c879ee3285a50d-montgomery.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/00c879ee3285a50d-montgomery_inv.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/a0330e891e733f4e-ecp_nistz.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/a0330e891e733f4e-gfp_p256.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/a0330e891e733f4e-gfp_p384.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/a0330e891e733f4e-p256.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/aaa1ba3e455ee2e1-limbs.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/a4019cc0736b0423-mem.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/d5a9841f3dc6e253-poly1305.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/a4019cc0736b0423-crypt	20.8 s	18 ms	0
└build_script openssl-sys		20.9 s	23 ms	0
└other /usr/bin/pkg-config ×2	--libs --cflags openssl	20.9 s	2 ms	0
└toolchain /usr/bin/cc ×2	-E /work/target/debug/build/openssl-sys-0edbcb5e89bf38cc/out/16084787348810350744detect_compiler_family.c	20.9 s	7 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-0edbcb5e89bf38cc/out/16084787348810350744detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 16084787348810350744detect_compiler_family.c -dumpbase-ext .c	20.9 s	5 ms	0
└toolchain /usr/bin/cc	-?	20.9 s	2 ms	256
└build_script serde		24.9 s	11 ms	0
└rustc /usr/local/bin/rustc	--version	24.9 s	8 ms	0
└build_script zmij		24.9 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	24.9 s	7 ms	0
└build_script serde_json		32.7 s	1 ms	0
└build_script crc32fast		34.2 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	34.2 s	7 ms	0
└build_script rustls		39.0 s	1 ms	0
└build_script httparse		39.1 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	39.1 s	8 ms	0
└build_script openssl		39.1 s	2 ms	0
└build_script encoding_rs		39.9 s	1 ms	0
└build_script native-tls		48.5 s	2 ms	0
└build_script fst		59.8 s	2 ms	0
└build_script ua_generator		1 min 1 s	19 ms	0
└build_script spider_firewall		1 min 15 s	73 ms	25856

Network 5

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up api.github.com raw.githubusercontent.com

Destination	Protocol	What was sent	Bytes
:443	tls	SNI api.github.com, inside TLS: GET /repos/ShadowWhisperer/BlockLists/contents/RAW, host api.github.com, agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36	1.5 KiB
:443	tls	SNI api.github.com, inside TLS: GET /repos/badmojr/1Hosts/contents/Lite/, host api.github.com, agent Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36	1.5 KiB
:443	tls	SNI raw.githubusercontent.com, inside TLS: GET /spider-rs/bad_websites/main/websites.txt, host raw.githubusercontent.com, agent Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36	1.5 KiB

Sockets in the trace 3

When	Program	How	Address	Type
1 min 15 s	/work/target/debug/build/spider_firewall-bd806628f0c813c7/build-script-build	connect	unix:/var/run/nscd/socket	stream
1 min 15 s	/work/target/debug/build/spider_firewall-bd806628f0c813c7/build-script-build	connect	:53	datagram
1 min 15 s	/work/target/debug/build/spider_firewall-bd806628f0c813c7/build-script-build	connect	:443	stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 1

Files: 1309
Directories: 269
Size: 582.8 MiB
Compiled units: 274
Scan: stopped at a limit

Why	Path	Kind	Size	Mode
outside the build areas	/work/home/.cargo/spider_firewall-buildcache	dir	4.0 KiB	755

Output

Standard error

   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.26
   Compiling syn v3.0.6
   Compiling libc v0.2.190
   Compiling synstructure v0.14.0
   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.14
   Compiling cc v1.6.0
   Compiling zerofrom-derive v0.1.8
   Compiling zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling stable_deref_trait v1.2.1
   Compiling yoke v0.8.3
   Compiling zerovec-derive v0.11.6
   Compiling zerovec v0.11.8
   Compiling displaydoc v0.2.7
   Compiling cfg-if v1.0.5
   Compiling itoa v1.0.18
   Compiling tinystr v0.8.4
   Compiling serde_core v1.0.229
   Compiling writeable v0.6.4
   Compiling litemap v0.8.3
   Compiling smallvec v1.16.2
   Compiling icu_locale_core v2.3.0
   Compiling zerotrie v0.2.5
   Compiling potential_utf v0.1.6
   Compiling utf8_iter v1.0.4
   Compiling icu_properties_data v2.3.0
   Compiling icu_normalizer_data v2.3.0
   Compiling icu_collections v2.3.0
   Compiling icu_provider v2.3.1
   Compiling bytes v1.12.1
   Compiling percent-encoding v2.3.2
   Compiling memchr v2.8.3
   Compiling pin-project-lite v0.2.17
   Compiling zeroize v1.9.1
   Compiling pkg-config v0.3.34
   Compiling futures-core v0.3.34
   Compiling vcpkg v0.2.15
   Compiling once_cell v1.21.4
   Compiling openssl-sys v0.9.117
   Compiling rustls-pki-types v1.15.1
   Compiling icu_normalizer v2.3.0
   Compiling icu_properties v2.3.0
   Compiling ring v0.17.14
   Compiling rustversion v1.0.23
   Compiling log v0.4.34
   Compiling idna_adapter v1.2.2
   Compiling form_urlencoded v1.2.2
   Compiling mio v1.2.4
   Compiling socket2 v0.6.5
   Compiling syn v2.0.119
   Compiling zmij v1.0.23
   Compiling serde v1.0.229
   Compiling tokio v1.53.2
   Compiling idna v1.1.0
   Compiling http v1.5.0
   Compiling getrandom v0.2.17
   Compiling serde_derive v1.0.229
   Compiling crc32fast v1.5.2
   Compiling futures-sink v0.3.34
   Compiling untrusted v0.9.0
   Compiling serde_json v1.0.151
   Compiling http-body v1.1.0
   Compiling encoding_rs v0.8.42
   Compiling url v2.5.8
   Compiling openssl v0.10.81
   Compiling httparse v1.10.1
   Compiling adler2 v2.0.1
   Compiling foreign-types-shared v0.1.1
   Compiling rustls v0.23.45
   Compiling futures-task v0.3.34
   Compiling simd-adler32 v0.3.10
   Compiling alloc-no-stdlib v2.0.4
   Compiling slab v0.4.12
   Compiling bitflags v2.13.2
   Compiling futures-io v0.3.34
   Compiling futures-util v0.3.34
   Compiling alloc-stdlib v0.2.4
   Compiling miniz_oxide v0.9.1
   Compiling foreign-types v0.3.2
   Compiling rustls-webpki v0.103.15
   Compiling openssl-macros v0.1.1
   Compiling webpki-roots v1.0.9
   Compiling simdutf8 v0.1.5
   Compiling multiversion_no_op v1.0.0
   Compiling native-tls v0.2.18
   Compiling scopeguard v1.2.0
   Compiling core_detect v1.0.0
   Compiling base64 v0.22.1
   Compiling subtle v2.6.1
   Compiling try-lock v0.2.5
   Compiling tower-service v0.3.3
   Compiling winnow v1.0.4
   Compiling toml_parser v1.1.5+spec-1.1.0
   Compiling want v0.3.2
   Compiling webpki-roots v0.26.11
   Compiling flate2 v1.1.10
   Compiling brotli-decompressor v4.0.3
   Compiling tracing-core v0.1.36
   Compiling toml_datetime v0.7.5+spec-1.1.0
   Compiling serde_spanned v1.1.2
   Compiling openssl-probe v0.2.1
   Compiling fastrand v2.5.0
   Compiling toml_writer v1.1.3+spec-1.1.0
   Compiling winnow v0.7.15
   Compiling atomic-waker v1.1.2
   Compiling hyper v1.12.0
   Compiling toml v0.9.12+spec-1.1.0
   Compiling tracing v0.1.44
   Compiling ureq v2.12.1
   Compiling futures-channel v0.3.34
   Compiling sync_wrapper v1.0.2
   Compiling dotenvy v0.15.7
   Compiling tower-layer v0.3.3
   Compiling fst v0.4.7
   Compiling base64 v0.23.1
   Compiling ipnet v2.12.2
   Compiling hyper-util v0.1.21
   Compiling tower v0.5.3
   Compiling ua_generator v0.5.82
   Compiling tokio-native-tls v0.3.1
   Compiling http-body-util v0.1.5
   Compiling siphasher v1.0.4
   Compiling ryu v1.0.23
   Compiling serde_urlencoded v0.7.1
   Compiling phf_shared v0.13.1
   Compiling hyper-tls v0.6.0
   Compiling tower-http v0.6.11
   Compiling allocator-api2 v0.2.21
   Compiling foldhash v0.1.5
   Compiling psl-types v2.0.11
   Compiling equivalent v1.0.2
   Compiling hashbrown v0.15.5
   Compiling psl v2.1.241
   Compiling reqwest v0.12.28
   Compiling phf_generator v0.13.1
   Compiling spider_firewall v2.40.0
   Compiling phf_macros v0.13.1
    Checking phf v0.13.1
warning: spider_firewall@2.40.0: spider_firewall: GitHub listing fetch failed for https://api.github.com/repos/ShadowWhisperer/BlockLists/contents/RAW (HTTP 404 Not Found) — skipping this source
warning: spider_firewall@2.40.0: spider_firewall: GitHub listing fetch failed for https://api.github.com/repos/badmojr/1Hosts/contents/Lite/ (HTTP 404 Not Found) — skipping this source
error: failed to run custom build command for `spider_firewall v2.40.0`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/spider_firewall-bd806628f0c813c7/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-env-changed=SPIDER_FIREWALL_OFFLINE
  cargo:rerun-if-env-changed=SPIDER_FIREWALL_CACHE_DIR
  cargo:rerun-if-env-changed=SPIDER_FIREWALL_FETCH_RETRIES
  cargo:rerun-if-env-changed=SPIDER_FIREWALL_FETCH_TIMEOUT_SECS
  cargo:warning=spider_firewall: GitHub listing fetch failed for https://api.github.com/repos/ShadowWhisperer/BlockLists/contents/RAW (HTTP 404 Not Found) — skipping this source
  cargo:warning=spider_firewall: GitHub listing fetch failed for https://api.github.com/repos/badmojr/1Hosts/contents/Lite/ (HTTP 404 Not Found) — skipping this source

  --- stderr

  thread 'main' (2485) panicked at /cw/vendor/spider_firewall-2.40.0/build.rs:724:29:
  Failed to fetch https://raw.githubusercontent.com/spider-rs/bad_websites/main/websites.txt: HTTP 404 Not Found (after 4 attempt(s); no cached copy available)
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

When	From	To	Event	Worker
2026-10-09 13:29 UTC	Discovered	Fetched	fetched	fetcher-1896447
2026-10-09 13:29 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-1896495
2026-10-09 13:35 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-1898673-slot2
2026-10-09 13:37 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-1898673-slot2
2026-10-09 13:37 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-1898703
2026-10-09 13:37 UTC	Scored	Done	finalized	analyzer-1898703