spider_firewall 2.38.0

Done dynamic on Linux job 42454 crates.io SBOM Findings (VEX)

The planted github_token_env left the VM.

100

critical

False positive. A person reviewed this verdict and found the crate benign. The evidence below is what the analysis saw.

Evidence

Points	Signal	Where	What
100	honeytoken_left_vm network	https://api.github.com	The planted github_token_env left the VM.
30	static:exfiltration_endpoint static · spider_firewall	build.rs:488	high severity exfiltration_endpoint in build_script code: ngrok.io
10	disk_outside_build disk	/work/home/.cargo/spider_firewall-buildcache	The build left /work/home/.cargo/spider_firewall-buildcache (dir).
10	network_lookup network · spider_firewall	api.github.com	The build looked up api.github.com.
10	network_lookup network · spider_firewall	raw.githubusercontent.com	The build looked up raw.githubusercontent.com.

4 without points

Signal	Where	What
static:build_script static · spider_firewall	build.rs	low severity build_script in build_script code: build.rs
static:network_access static · spider_firewall	build.rs:195	medium severity network_access in build_script code (6 places): reqwest::blocking::Client
static:secret_environment_variable static · spider_firewall	build.rs:29	high severity secret_environment_variable in build_script code (2 places): GITHUB_TOKEN
static:url_literal static · spider_firewall	build.rs:766	low severity url_literal in build_script code (51 places): https://

Behavior

Profile

disk:outside leak:github_token_env net:api.github.com net:raw.githubusercontent.com static:exfiltration_endpoint static:network_access static:secret_environment_variable

Static findings

high secret_environment_variable build_script 2

GITHUB_TOKEN build.rs:29
GH_TOKEN build.rs:29

high exfiltration_endpoint build_script 1

ngrok.io build.rs:488

medium network_access build_script 6

reqwest::blocking::Client build.rs:195 build.rs:270 build.rs:314 build.rs:709 build.rs:799
reqwest::blocking::Client::builder build.rs:878

low url_literal build_script 42

https:// build.rs:766
http:// build.rs:767
https://api.github.com/repos/ShadowWhisperer/BlockLists/contents/RAW build.rs:920
https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/{} build.rs:963
https://api.github.com/repos/badmojr/1Hosts/contents/Lite/ build.rs:1011
https://raw.githubusercontent.com/badmojr/1Hosts/master/{} build.rs:1031
https://raw.githubusercontent.com/spider-rs/bad_websites/main/websites.txt build.rs:1065
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts build.rs:1082
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/malware-nl.txt build.rs:1093
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/phishing-nl.txt build.rs:1104
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/scam-nl.txt build.rs:1115
https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains.txt build.rs:1126
https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/porn/hosts build.rs:1138
https://malware-filter.gitlab.io/malware-filter/phishing-filter-hosts.txt build.rs:1149
https://lists.cyberhost.uk/malware.txt build.rs:1164
https://raw.githubusercontent.com/romainmarcoux/malicious-domains/main/full-domains-aa.txt build.rs:1181
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/ransomware-nl.txt build.rs:1196
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/fraud-nl.txt build.rs:1207
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/abuse-nl.txt build.rs:1218
https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-ACTIVE.txt build.rs:1229
https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/suspicious/domain.txt build.rs:1240
https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/domains.txt build.rs:1251
https://raw.githubusercontent.com/durablenapkin/scamblocklist/master/hosts.txt build.rs:1262
https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/tif.mini-onlydomains.txt build.rs:1276
https://threatfox.abuse.ch/downloads/hostfile/ build.rs:1293
https://hole.cert.pl/domains/v2/domains_hosts.txt build.rs:1309
https://raw.githubusercontent.com/PhishIndex/phishindex-blocklist/main/Data/Malicious%20Domains/txt/all_domains.txt build.rs:1324
https://raw.githubusercontent.com/sjhgvr/oisd/main/domainswild2_small.txt build.rs:1346
https://raw.githubusercontent.com/romainmarcoux/malicious-domains/main/full-domains-{}.txt build.rs:1363
https://phishunt.io/feed.txt build.rs:1383
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/redirect-nl.txt build.rs:1398
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/tracking-nl.txt build.rs:1409
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/ads-nl.txt build.rs:1420
https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/tif-onlydomains.txt build.rs:1432
https://urlhaus.abuse.ch/downloads/hostfile/ build.rs:1441
https://www.spamhaus.org/drop/drop.txt build.rs:1642
https://feodotracker.abuse.ch/downloads/ipblocklist.txt build.rs:1656
https://rules.emergingthreats.net/blockrules/compromised-ips.txt build.rs:1672
https://raw.githubusercontent.com/elliotwutingfeng/ThreatFox-IOC-IPs/main/ips.txt build.rs:1691
https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-dnscrypt-blocked-ips.txt build.rs:1707
https://raw.githubusercontent.com/stamparm/ipsum/master/levels/3.txt build.rs:1727
// Auto-generated by build.rs — known-bad IPv4 ranges (inclusive (start, end) u32),\u{a}// sorted and merged for binary-search lookup.\u{a}// Sources:\u{a}// Spamhaus DROP (https://www.spamhaus.or… build.rs:1764

low build_script build_script 1

build.rs build.rs

info url_literal library 8

https://URL-Evil.test/path?x=1 src/dynamic.rs:550
https:// src/lib.rs:233
http:// src/lib.rs:234
https://www.veed.io/ms-MY/peralatan src/lib.rs:481
https://www.trustpilot.com/review/grey.co src/lib.rs:524
https://admissions.usask.ca/programs src/lib.rs:538
https://platform.openai.com/docs/api-reference src/lib.rs:564
https://www.sina.com.cn/news src/lib.rs:649

info url_literal binary 1

https://example.com/path/to/page benches/firewall_bench.rs:37

Run: check

failed

Honeytoken github_token_env left the VM through https://api.github.com

Ended: agent reported the end
Guest: exit code 101
Run time: 47.7 s
VM restore: 62 ms
Payload: 10532 files, 206.6 MiB
Files opened: 15845

Processes 286

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 268 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	check --locked --offline	5 ms	47.5 s	25856
└build_script libc		332 ms	110 ms	0
└rustc /usr/local/bin/rustc	--version	334 ms	107 ms	0
└unknown		441 ms	1 ms	32512
└rustc /usr/local/bin/rustc ×116	--crate-name libc --edition=2021 /cw/vendor/libc-0.2.189/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --allow=unused_qualifications --warn=clippy::unnecessary_semicolon --allow=clippy::unnecessary_cast --warn=clippy::ptr_as_ptr --allow=clippy::non_minimal_cfg --allow=clippy::missing_safety_doc --warn=clippy::map_unwrap_or --warn=clippy::manual_assert --allow=clippy::identity_op --warn=clippy::explicit_iter_loop --cfg feature="default" --cfg feature="std" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("align", "const-extern-fn", "default", "extra_traits", "rustc-dep-of-std", "rustc-std-workspace-core", "std", "use_std")) -C metadata=3945cfea6f6f778b	444 ms	1.0 s	0
└rustc /usr/local/bin/rustc ×11	--crate-name yoke_derive --edition=2021 /cw/vendor/yoke-derive-0.8.4/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type proc-macro --emit=dep-info,link -C prefer-dynamic -C embed-bitcode=no --warn=clippy::wildcard_dependencies --warn=clippy::useless_transmute --warn=unused_qualifications --warn=unused_macro_rules --warn=unused_lifetimes --warn=clippy::unnecessary_wraps --warn=unexpected_cfgs --deny=clippy::trivially_copy_pass_by_ref --deny=trivial_numeric_casts --warn=clippy::transmutes_expressible_as_ptr_casts --warn=clippy::transmute_undefined_repr --warn=clippy::transmute_ptr_to_ref --warn=clippy::transmute_ptr_to_ptr --warn=clippy::transmute_int_to_non_zero --warn=clippy::transmute_int_to_bool --warn=clippy::transmute_bytes_to_str --warn=clippy::todo --warn=clippy::same_functions_in_if_condition	1.5 s	629 ms	0
└toolchain /usr/bin/cc	-Wl,--version-script=/work/target/debug/deps/rustcbD6Ml8/list -Wl,--no-undefined-version -m64 /work/target/debug/deps/rustcbD6Ml8/symbols.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.0.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.1.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.2.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.3.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.4.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.5.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.6.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.7.rcgu.o /work/target/debug/deps/rustcbD6Ml8/rmeta.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.dp8vorady9p2aa8fks3jr2k	1.9 s	179 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc9JZiEb.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -shared -fuse-ld=lld -o /work/target/debug/deps/libyoke_derive-92110ac5a916ca72.so /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/deps/rustcbD6Ml8/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. --version-script=/work/target/debug/deps/rustcbD6Ml8/list --no-undefined-version /work/target/debug/deps/rust	2.0 s	172 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc9JZiEb.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -shared -o /work/target/debug/deps/libyoke_derive-92110ac5a916ca72.so /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/deps/rustcbD6Ml8/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. --version-script=/work/target/debug/deps/rustcbD6Ml8/list --no-undefined-version /work/target/d	2.0 s	168 ms	0
└build_script icu_normalizer_data		4.1 s	1 ms	0
└build_script icu_properties_data		4.4 s	1 ms	0
└build_script ring		8.4 s	1.3 s	0
└toolchain /usr/bin/cc ×2	-E /work/target/debug/build/ring-302b96543280299a/out/276701734161334895detect_compiler_family.c	8.4 s	22 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-302b96543280299a/out/276701734161334895detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 276701734161334895detect_compiler_family.c -dumpbase-ext .c	8.4 s	19 ms	0
└toolchain /usr/bin/cc ×2	-?	8.4 s	3 ms	256
└toolchain /usr/bin/cc ×30	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -I /cw/vendor/ring-0.17.14/include -I /cw/vendor/ring-0.17.14/pregenerated -Wall -Wextra -fvisibility=hidden -std=c1x -Wall -Wbad-function-cast -Wcast-align -Wcast-qual -Wconversion -Wmissing-field-initializers -Wmissing-include-dirs -Wnested-externs -Wredundant-decls -Wshadow -Wsign-compare -Wsign-conversion -Wstrict-prototypes -Wundef -Wuninitialized -g3 -DNDEBUG -o	8.4 s	212 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -I /cw/vendor/ring-0.17.14/include -I /cw/vendor/ring-0.17.14/pregenerated -imultiarch x86_64-linux-gnu -dD -D NDEBUG /cw/vendor/ring-0.17.14/crypto/curve25519/curve25519.c -quiet -dumpdir /work/target/debug/build/ring-302b96543280299a/out/ -dumpbase 25ac62e5b3c53843-curve25519.c -dumpbase-ext .c -m64 -mtune=generic -march=x86-64 -g3 -O0 -Wextra -Wall -Wbad-function-cast -Wcast-align -Wcast-qual -Wconversion -Wmissing-field-initializers -Wmissing-include-dirs	8.4 s	187 ms	0
└toolchain /usr/bin/as	-I /cw/vendor/ring-0.17.14/include -I /cw/vendor/ring-0.17.14/pregenerated --gdwarf-5 --64 -o /work/target/debug/build/ring-302b96543280299a/out/25ac62e5b3c53843-curve25519.o /tmp/cc3vmEGn.s	8.6 s	22 ms	0
└toolchain /usr/bin/ar ×4	cqD /work/target/debug/build/ring-302b96543280299a/out/libring_core_0_17_14_.a /work/target/debug/build/ring-302b96543280299a/out/25ac62e5b3c53843-curve25519.o /work/target/debug/build/ring-302b96543280299a/out/0bbbd18bda93c05b-aes_nohw.o /work/target/debug/build/ring-302b96543280299a/out/00c879ee3285a50d-montgomery.o /work/target/debug/build/ring-302b96543280299a/out/00c879ee3285a50d-montgomery_inv.o /work/target/debug/build/ring-302b96543280299a/out/a0330e891e733f4e-ecp_nistz.o /work/target/debug/build/ring-302b96543280299a/out/a0330e891e733f4e-gfp_p256.o /work/target/debug/build/ring-302b96543280299a/out/a0330e891e733f4e-gfp_p384.o /work/target/debug/build/ring-302b96543280299a/out/a0330e891e733f4e-p256.o /work/target/debug/build/ring-302b96543280299a/out/aaa1ba3e455ee2e1-limbs.o /work/target/debug/build/ring-302b96543280299a/out/a4019cc0736b0423-mem.o /work/target/debug/build/ring-302b96543280299a/out/d5a9841f3dc6e253-poly1305.o /work/target/debug/build/ring-302b96543280299a/out/a4019cc0736b0423-crypt	9.7 s	17 ms	0
└build_script openssl-sys		9.8 s	22 ms	0
└other /usr/bin/pkg-config ×2	--libs --cflags openssl	9.8 s	3 ms	0
└toolchain /usr/bin/cc ×2	-E /work/target/debug/build/openssl-sys-9df3017baf71da3f/out/14268691200223092399detect_compiler_family.c	9.8 s	6 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-9df3017baf71da3f/out/14268691200223092399detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 14268691200223092399detect_compiler_family.c -dumpbase-ext .c	9.8 s	4 ms	0
└toolchain /usr/bin/cc	-?	9.8 s	2 ms	256
└build_script crc32fast		16.1 s	8 ms	0
└rustc /usr/local/bin/rustc	--version	16.1 s	7 ms	0
└build_script httparse		17.6 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	17.6 s	6 ms	0
└build_script openssl		19.8 s	1 ms	0
└build_script rustls		19.9 s	1 ms	0
└build_script encoding_rs		20.5 s	1 ms	0
└build_script native-tls		23.5 s	1 ms	0
└build_script fst		35.4 s	2 ms	0
└build_script ua_generator		36.1 s	1 ms	0
└build_script spider_firewall		47.5 s	48 ms	25856

Network 5

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up api.github.com raw.githubusercontent.com

Destination	Protocol	What was sent	Bytes
:443	tls	SNI api.github.com, inside TLS: GET /repos/ShadowWhisperer/BlockLists/contents/RAW, host api.github.com, agent Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0	1.5 KiB
:443	tls	SNI api.github.com, inside TLS: GET /repos/badmojr/1Hosts/contents/Lite/, host api.github.com, agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36	1.5 KiB
:443	tls	SNI raw.githubusercontent.com, inside TLS: GET /spider-rs/bad_websites/main/websites.txt, host raw.githubusercontent.com, agent Mozilla/5.0 (Android 14; Mobile; rv:130.0) Gecko/130.0 Firefox/130.0	1.5 KiB

Sockets in the trace 3

When	Program	How	Address	Type
47.5 s	/work/target/debug/build/spider_firewall-ffcaf0b6170d5182/build-script-build	connect	unix:/var/run/nscd/socket	stream
47.5 s	/work/target/debug/build/spider_firewall-ffcaf0b6170d5182/build-script-build	connect	:53	datagram
47.5 s	/work/target/debug/build/spider_firewall-ffcaf0b6170d5182/build-script-build	connect	:443	stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 1

Files: 1031
Directories: 210
Size: 489.0 MiB
Compiled units: 231
Scan: stopped at a limit

Why	Path	Kind	Size	Mode
outside the build areas	/work/home/.cargo/spider_firewall-buildcache	dir	4.0 KiB	755

Output

Standard error

   Compiling libc v0.2.189
   Compiling zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling stable_deref_trait v1.2.1
   Compiling yoke v0.8.3
   Compiling zerovec v0.11.8
   Compiling cfg-if v1.0.5
   Compiling tinystr v0.8.4
   Compiling litemap v0.8.3
   Compiling writeable v0.6.4
   Compiling smallvec v1.16.2
   Compiling icu_locale_core v2.3.0
   Compiling zerotrie v0.2.5
   Compiling potential_utf v0.1.6
   Compiling utf8_iter v1.0.4
   Compiling icu_normalizer_data v2.3.0
   Compiling icu_collections v2.3.0
   Compiling icu_properties_data v2.3.0
   Compiling icu_provider v2.3.1
   Compiling memchr v2.8.3
   Compiling percent-encoding v2.3.2
   Compiling bytes v1.12.1
   Compiling pin-project-lite v0.2.17
   Compiling zeroize v1.9.0
   Compiling pkg-config v0.3.34
   Compiling vcpkg v0.2.15
   Compiling futures-core v0.3.34
   Compiling once_cell v1.21.4
   Compiling openssl-sys v0.9.117
   Compiling rustls-pki-types v1.15.1
   Compiling icu_normalizer v2.3.0
   Compiling icu_properties v2.3.0
   Compiling log v0.4.34
   Compiling ring v0.17.14
   Compiling idna_adapter v1.2.2
   Compiling form_urlencoded v1.2.2
   Compiling mio v1.2.3
   Compiling socket2 v0.6.5
   Compiling futures-sink v0.3.34
   Compiling tokio v1.53.1
   Compiling idna v1.1.0
   Compiling http v1.5.0
   Compiling getrandom v0.2.17
   Compiling untrusted v0.9.0
   Compiling crc32fast v1.5.2
   Compiling serde v1.0.229
   Compiling http-body v1.1.0
   Compiling encoding_rs v0.8.42
   Compiling url v2.5.8
   Compiling bitflags v2.13.2
   Compiling openssl v0.10.81
   Compiling adler2 v2.0.1
   Compiling alloc-no-stdlib v2.0.4
   Compiling foreign-types-shared v0.1.1
   Compiling futures-io v0.3.34
   Compiling futures-task v0.3.34
   Compiling slab v0.4.12
   Compiling simd-adler32 v0.3.10
   Compiling httparse v1.10.1
   Compiling miniz_oxide v0.9.1
   Compiling futures-util v0.3.34
   Compiling foreign-types v0.3.2
   Compiling alloc-stdlib v0.2.4
   Compiling rustls v0.23.45
   Compiling serde_json v1.0.151
   Compiling rustls-webpki v0.103.15
   Compiling openssl-macros v0.1.1
   Compiling webpki-roots v1.0.9
   Compiling multiversion_no_op v1.0.0
   Compiling base64 v0.22.1
   Compiling scopeguard v1.2.0
   Compiling subtle v2.6.1
   Compiling try-lock v0.2.5
   Compiling native-tls v0.2.18
   Compiling simdutf8 v0.1.5
   Compiling tower-service v0.3.3
   Compiling core_detect v1.0.0
   Compiling want v0.3.1
   Compiling webpki-roots v0.26.11
   Compiling flate2 v1.1.10
   Compiling brotli-decompressor v4.0.3
   Compiling futures-channel v0.3.34
   Compiling tracing-core v0.1.36
   Compiling atomic-waker v1.1.2
   Compiling openssl-probe v0.2.1
   Compiling fastrand v2.5.0
   Compiling hyper v1.11.1
   Compiling tracing v0.1.44
   Compiling ureq v2.12.1
   Compiling sync_wrapper v1.0.2
   Compiling base64 v0.23.1
   Compiling fst v0.4.7
   Compiling dotenvy v0.15.7
   Compiling tower-layer v0.3.3
   Compiling ipnet v2.12.2
   Compiling hyper-util v0.1.21
   Compiling tower v0.5.3
   Compiling ua_generator v0.5.81
   Compiling tokio-native-tls v0.3.1
   Compiling http-body-util v0.1.5
   Compiling siphasher v1.0.4
   Compiling ryu v1.0.23
   Compiling serde_urlencoded v0.7.1
   Compiling phf_shared v0.13.1
   Compiling hyper-tls v0.6.0
   Compiling tower-http v0.6.11
   Compiling equivalent v1.0.2
   Compiling allocator-api2 v0.2.21
   Compiling psl-types v2.0.11
   Compiling foldhash v0.1.5
   Compiling hashbrown v0.15.5
   Compiling psl v2.1.238
   Compiling reqwest v0.12.28
   Compiling phf_generator v0.13.1
   Compiling spider_firewall v2.38.0
   Compiling phf_macros v0.13.1
    Checking phf v0.13.1
warning: spider_firewall@2.38.0: spider_firewall: GitHub listing fetch failed for https://api.github.com/repos/ShadowWhisperer/BlockLists/contents/RAW (HTTP 404 Not Found) — skipping this source
warning: spider_firewall@2.38.0: spider_firewall: GitHub listing fetch failed for https://api.github.com/repos/badmojr/1Hosts/contents/Lite/ (HTTP 404 Not Found) — skipping this source
error: failed to run custom build command for `spider_firewall v2.38.0`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/spider_firewall-ffcaf0b6170d5182/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-env-changed=SPIDER_FIREWALL_OFFLINE
  cargo:rerun-if-env-changed=SPIDER_FIREWALL_CACHE_DIR
  cargo:rerun-if-env-changed=SPIDER_FIREWALL_FETCH_RETRIES
  cargo:rerun-if-env-changed=SPIDER_FIREWALL_FETCH_TIMEOUT_SECS
  cargo:warning=spider_firewall: GitHub listing fetch failed for https://api.github.com/repos/ShadowWhisperer/BlockLists/contents/RAW (HTTP 404 Not Found) — skipping this source
  cargo:warning=spider_firewall: GitHub listing fetch failed for https://api.github.com/repos/badmojr/1Hosts/contents/Lite/ (HTTP 404 Not Found) — skipping this source

  --- stderr

  thread 'main' (1968) panicked at /cw/vendor/spider_firewall-2.38.0/build.rs:711:29:
  Failed to fetch https://raw.githubusercontent.com/spider-rs/bad_websites/main/websites.txt: HTTP 404 Not Found (after 4 attempt(s); no cached copy available)
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

When	From	To	Event	Worker
2026-09-30 18:03 UTC	Discovered	Fetched	fetched	fetcher-627152
2026-09-30 18:03 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-450252
2026-09-30 18:03 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-639812-slot2
2026-09-30 18:04 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-639812-slot2
2026-09-30 18:04 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-523934
2026-09-30 18:04 UTC	Scored	Done	finalized	analyzer-523934