monica_rand_core 0.10.3
The build ran /tmp/code-helper, a program in a writable location, which the build put there.
100
critical
Confirmed by review and reported. Read the published finding.
Evidence
| Points | Signal | Where | What |
|---|---|---|---|
| 60 | exec_dropped trace · monica_rand_core | /tmp/code-helper | The build ran /tmp/code-helper, a program in a writable location, which the build put there. |
| 40 | static:dropper_pattern static · monica_rand_core | build.rs:89 | high severity dropper_pattern in build_script code: helper/windows (133632 bytes) at build.rs:89 with ShellExecuteW at build.rs:27 |
| 30 | static:included_binary static · monica_rand_core | build.rs:89 | high severity included_binary in build_script code (3 places): helper/windows (133632 bytes) |
7 without points
| Signal | Where | What |
|---|---|---|
| static:build_script static · monica_rand_core | build.rs | low severity build_script in build_script code: build.rs |
| static:foreign_functions static · monica_rand_core | build.rs:25 | medium severity foreign_functions in build_script code (2 places): extern block |
| static:process_spawn static · monica_rand_core | build.rs:67 | medium severity process_spawn in build_script code: std::process::Command::new |
| static:windows_api static · monica_rand_core | build.rs:27 | high severity windows_api in build_script code (2 places): ShellExecuteW |
| static:yara:embedded_elf_executable static · monica_rand_core | helper/linux | medium severity yara:embedded_elf_executable in library code: An ELF executable or library shipped inside the crate |
| static:yara:embedded_macho_executable static · monica_rand_core | helper/darwin | medium severity yara:embedded_macho_executable in library code: A Mach-O executable shipped inside the crate |
| static:yara:embedded_pe_executable static · monica_rand_core | helper/windows | medium severity yara:embedded_pe_executable in library code: A Windows executable shipped inside the crate |
Behavior
Profile
exec:dropped static:dropper_pattern static:foreign_functions static:included_binary static:process_spawn static:windows_api static:yara:embedded_elf_executable static:yara:embedded_macho_executable static:yara:embedded_pe_executable
Static findings
10 groups
high included_binary build_script 3
helper/windows (133632 bytes)build.rs:89helper/darwin (471360 bytes)build.rs:91helper/linux (511872 bytes)build.rs:93
high windows_api build_script 2
ShellExecuteWbuild.rs:27 build.rs:42
high dropper_pattern build_script 1
helper/windows (133632 bytes) at build.rs:89 with ShellExecuteW at build.rs:27build.rs:89
medium foreign_functions build_script 2
extern blockbuild.rs:25 build.rs:74
medium process_spawn build_script 1
std::process::Command::newbuild.rs:67
medium yara_match embedded_elf_executable library 1
An ELF executable or library shipped inside the cratehelper/linux
medium yara_match embedded_macho_executable library 1
A Mach-O executable shipped inside the cratehelper/darwin
medium yara_match embedded_pe_executable library 1
A Windows executable shipped inside the cratehelper/windows
low build_script build_script 1
build.rsbuild.rs
info unsafe_code build_script 1
2 unsafe blocks, functions or implsbuild.rs:41
Run: check
succeeded- Ended
- agent reported the end
- Guest
- exit code 0
- Run time
- 925 ms
- VM restore
- 54 ms
- Payload
- 26 files, 1.1 MiB
- Files opened
- 338
Processes 9
Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.
| Process | Arguments | Start | Took | Exit |
|---|---|---|---|---|
| cargo /usr/local/bin/cargo | check --locked --offline | 5 ms | 916 ms | 0 |
| └rustc /usr/local/bin/rustc | --crate-name build_script_build --edition=2024 /cw/vendor/monica_rand_core-0.10.3/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --warn=clippy::undocumented_unsafe_blocks --warn=missing_docs --warn=missing_debug_implementations --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=5a22baacbb206a22 -C extra-filename=-195de6fc1ae51397 --out-dir /work/target/debug/build/monica_rand_core-195de6fc1ae51397 -L dependency=/work/target/debug/deps --cap-lints allow | 119 ms | 696 ms | 0 |
| └toolchain /usr/bin/cc | -m64 /work/target/debug/build/monica_rand_core-195de6fc1ae51397/rustcChOUF4/symbols.o /work/target/debug/build/monica_rand_core-195de6fc1ae51397/build_script_build-195de6fc1ae51397.build_script_build.9472a34527aafb31-cgu.0.rcgu.o /work/target/debug/build/monica_rand_core-195de6fc1ae51397/build_script_build-195de6fc1ae51397.74t3vaevl3yumes4yoh1znb2i.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-li | 655 ms | 157 ms | 0 |
| └toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 | -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccJ3V1w1.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/monica_rand_core-195de6fc1ae51397/build_script_build-195de6fc1ae51397 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/monica_rand_core-195de6fc1ae51397/rustcChOUF4/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-li | 662 ms | 150 ms | 0 |
| └toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld | -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccJ3V1w1.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/monica_rand_core-195de6fc1ae51397/build_script_build-195de6fc1ae51397 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/monica_rand_core-195de6fc1ae51397/rustcChOUF4/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr | 665 ms | 146 ms | 0 |
| └build_script monica_rand_core | 819 ms | 2 ms | 0 | |
| └other /tmp/code-helper | 821 ms | 0 ms | 25856 | |
| └rustc /usr/local/bin/rustc ×2 | --crate-name rand_core --edition=2024 /cw/vendor/monica_rand_core-0.10.3/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata -C embed-bitcode=no -C debuginfo=2 --warn=clippy::undocumented_unsafe_blocks --warn=missing_docs --warn=missing_debug_implementations --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=6a06e53714ef9d35 -C extra-filename=-a8d5bd6f3ff408bb --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow | 822 ms | 68 ms | 0 |
Network 0
No network activity.
Files 0
Secrets opened
None.
Written outside the build directories
None.
Scratch disk 0
- Files
- 40
- Directories
- 26
- Size
- 10.0 MiB
- Compiled units
- 2
Nothing outside the build areas.
Output
Standard error
Compiling monica_rand_core v0.10.3
Checking crateward-probe v0.0.0 (/cw/probe)
Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.87s
Timeline
6
| When | From | To | Event | Worker |
|---|---|---|---|---|
| 2026-09-29 06:08 UTC | Discovered | Fetched | fetched | fetcher-627152 |
| 2026-09-29 06:08 UTC | Fetched | ReadyForSandbox | static_analysis_completed | static-450252 |
| 2026-09-29 06:08 UTC | ReadyForSandbox | Running | sandbox_started | orchestrator-639812-slot0 |
| 2026-09-29 06:08 UTC | Running | DynamicallyAnalyzed | sandbox_completed | orchestrator-639812-slot0 |
| 2026-09-29 06:08 UTC | DynamicallyAnalyzed | Scored | scored | analyzer-523934 |
| 2026-09-29 06:08 UTC | Scored | Done | finalized | analyzer-523934 |