spider_firewall 2.39.0

Done dynamic on Linux job 51214 crates.io SBOM Findings (VEX) Compare with 2.38.0

The planted github_token_env left the VM.

100

critical

False positive. A person reviewed this verdict and found the crate benign. The evidence below is what the analysis saw.

Evidence

Points	Signal	Where	What
100	honeytoken_left_vm network	https://api.github.com	The planted github_token_env left the VM.
30	static:exfiltration_endpoint static · spider_firewall	build.rs:488	high severity exfiltration_endpoint in build_script code: ngrok.io
10	disk_outside_build disk	/work/home/.cargo/spider_firewall-buildcache	The build left /work/home/.cargo/spider_firewall-buildcache (dir).
10	network_lookup network · spider_firewall	api.github.com	The build looked up api.github.com.
10	network_lookup network · spider_firewall	raw.githubusercontent.com	The build looked up raw.githubusercontent.com.

4 without points

Signal	Where	What
static:build_script static · spider_firewall	build.rs	low severity build_script in build_script code: build.rs
static:network_access static · spider_firewall	build.rs:195	medium severity network_access in build_script code (6 places): reqwest::blocking::Client
static:secret_environment_variable static · spider_firewall	build.rs:29	high severity secret_environment_variable in build_script code (2 places): GITHUB_TOKEN
static:url_literal static · spider_firewall	build.rs:779	low severity url_literal in build_script code (53 places): https://

Behavior

Profile

disk:outside leak:github_token_env net:api.github.com net:raw.githubusercontent.com static:exfiltration_endpoint static:network_access static:secret_environment_variable

Static findings

high secret_environment_variable build_script 2

GITHUB_TOKEN build.rs:29
GH_TOKEN build.rs:29

high exfiltration_endpoint build_script 1

ngrok.io build.rs:488

medium network_access build_script 6

reqwest::blocking::Client build.rs:195 build.rs:270 build.rs:314 build.rs:722 build.rs:812
reqwest::blocking::Client::builder build.rs:891

low url_literal build_script 44

https:// build.rs:779
http:// build.rs:780
https://api.github.com/repos/ShadowWhisperer/BlockLists/contents/RAW build.rs:933
https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/{} build.rs:976
https://api.github.com/repos/badmojr/1Hosts/contents/Lite/ build.rs:1024
https://raw.githubusercontent.com/badmojr/1Hosts/master/{} build.rs:1044
https://raw.githubusercontent.com/spider-rs/bad_websites/main/websites.txt build.rs:1078
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts build.rs:1095
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/malware-nl.txt build.rs:1106
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/phishing-nl.txt build.rs:1117
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/scam-nl.txt build.rs:1128
https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains.txt build.rs:1139
https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/porn/hosts build.rs:1151
https://malware-filter.gitlab.io/malware-filter/phishing-filter-hosts.txt build.rs:1162
https://lists.cyberhost.uk/malware.txt build.rs:1177
https://raw.githubusercontent.com/romainmarcoux/malicious-domains/main/full-domains-aa.txt build.rs:1194
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/ransomware-nl.txt build.rs:1209
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/fraud-nl.txt build.rs:1220
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/abuse-nl.txt build.rs:1231
https://raw.githubusercontent.com/mitchellkrogza/Phishing.Database/master/phishing-domains-ACTIVE.txt build.rs:1242
https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/suspicious/domain.txt build.rs:1253
https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/domains.txt build.rs:1264
https://raw.githubusercontent.com/durablenapkin/scamblocklist/master/hosts.txt build.rs:1275
https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/tif.mini-onlydomains.txt build.rs:1289
https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/fake-onlydomains.txt build.rs:1305
https://threatfox.abuse.ch/downloads/hostfile/ build.rs:1322
https://hole.cert.pl/domains/v2/domains_hosts.txt build.rs:1338
https://raw.githubusercontent.com/PhishIndex/phishindex-blocklist/main/Data/Malicious%20Domains/txt/all_domains.txt build.rs:1353
https://raw.githubusercontent.com/sjhgvr/oisd/main/domainswild2_small.txt build.rs:1375
https://raw.githubusercontent.com/romainmarcoux/malicious-domains/main/full-domains-{}.txt build.rs:1392
https://phishunt.io/feed.txt build.rs:1412
https://api.tweetfeed.live/v1/blocklist/domains.txt build.rs:1432
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/redirect-nl.txt build.rs:1447
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/tracking-nl.txt build.rs:1458
https://raw.githubusercontent.com/blocklistproject/Lists/master/alt-version/ads-nl.txt build.rs:1469
https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/tif-onlydomains.txt build.rs:1481
https://urlhaus.abuse.ch/downloads/hostfile/ build.rs:1490
https://www.spamhaus.org/drop/drop.txt build.rs:1691
https://feodotracker.abuse.ch/downloads/ipblocklist.txt build.rs:1705
https://rules.emergingthreats.net/blockrules/compromised-ips.txt build.rs:1721
https://raw.githubusercontent.com/elliotwutingfeng/ThreatFox-IOC-IPs/main/ips.txt build.rs:1740
https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-dnscrypt-blocked-ips.txt build.rs:1756
https://raw.githubusercontent.com/stamparm/ipsum/master/levels/3.txt build.rs:1776
// Auto-generated by build.rs — known-bad IPv4 ranges (inclusive (start, end) u32),\u{a}// sorted and merged for binary-search lookup.\u{a}// Sources:\u{a}// Spamhaus DROP (https://www.spamhaus.or… build.rs:1813

low build_script build_script 1

build.rs build.rs

info url_literal library 8

https://URL-Evil.test/path?x=1 src/dynamic.rs:550
https:// src/lib.rs:233
http:// src/lib.rs:234
https://www.veed.io/ms-MY/peralatan src/lib.rs:481
https://www.trustpilot.com/review/grey.co src/lib.rs:539
https://admissions.usask.ca/programs src/lib.rs:553
https://platform.openai.com/docs/api-reference src/lib.rs:579
https://www.sina.com.cn/news src/lib.rs:664

info url_literal binary 1

https://example.com/path/to/page benches/firewall_bench.rs:37

Run: check

failed

Honeytoken github_token_env left the VM through https://api.github.com

Ended: agent reported the end
Guest: exit code 101
Run time: 1 min 3 s
VM restore: 77 ms
Payload: 10532 files, 206.6 MiB
Files opened: 15845

Processes 286

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 268 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	check --locked --offline	5 ms	1 min 3 s	25856
└build_script libc		381 ms	107 ms	0
└rustc /usr/local/bin/rustc	--version	383 ms	104 ms	0
└unknown		488 ms	0 ms	32512
└rustc /usr/local/bin/rustc ×116	--crate-name libc --edition=2021 /cw/vendor/libc-0.2.189/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --allow=unused_qualifications --warn=clippy::unnecessary_semicolon --allow=clippy::unnecessary_cast --warn=clippy::ptr_as_ptr --allow=clippy::non_minimal_cfg --allow=clippy::missing_safety_doc --warn=clippy::map_unwrap_or --warn=clippy::manual_assert --allow=clippy::identity_op --warn=clippy::explicit_iter_loop --cfg feature="default" --cfg feature="std" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("align", "const-extern-fn", "default", "extra_traits", "rustc-dep-of-std", "rustc-std-workspace-core", "std", "use_std")) -C metadata=3945cfea6f6f778b	490 ms	1.2 s	0
└rustc /usr/local/bin/rustc ×11	--crate-name yoke_derive --edition=2021 /cw/vendor/yoke-derive-0.8.4/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type proc-macro --emit=dep-info,link -C prefer-dynamic -C embed-bitcode=no --warn=clippy::wildcard_dependencies --warn=clippy::useless_transmute --warn=unused_qualifications --warn=unused_macro_rules --warn=unused_lifetimes --warn=clippy::unnecessary_wraps --warn=unexpected_cfgs --deny=clippy::trivially_copy_pass_by_ref --deny=trivial_numeric_casts --warn=clippy::transmutes_expressible_as_ptr_casts --warn=clippy::transmute_undefined_repr --warn=clippy::transmute_ptr_to_ref --warn=clippy::transmute_ptr_to_ptr --warn=clippy::transmute_int_to_non_zero --warn=clippy::transmute_int_to_bool --warn=clippy::transmute_bytes_to_str --warn=clippy::todo --warn=clippy::same_functions_in_if_condition	1.7 s	755 ms	0
└toolchain /usr/bin/cc	-Wl,--version-script=/work/target/debug/deps/rustcRuScZy/list -Wl,--no-undefined-version -m64 /work/target/debug/deps/rustcRuScZy/symbols.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.0.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.1.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.2.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.3.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.4.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.5.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.6.rcgu.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.yoke_derive.e4cbed1edec505a7-cgu.7.rcgu.o /work/target/debug/deps/rustcRuScZy/rmeta.o /work/target/debug/deps/yoke_derive-92110ac5a916ca72.dp8vorady9p2aa8fks3jr2k	2.2 s	211 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc25hKyH.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -shared -fuse-ld=lld -o /work/target/debug/deps/libyoke_derive-92110ac5a916ca72.so /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/deps/rustcRuScZy/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. --version-script=/work/target/debug/deps/rustcRuScZy/list --no-undefined-version /work/target/debug/deps/rust	2.3 s	205 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc25hKyH.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -shared -o /work/target/debug/deps/libyoke_derive-92110ac5a916ca72.so /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/deps/rustcRuScZy/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. --version-script=/work/target/debug/deps/rustcRuScZy/list --no-undefined-version /work/target/d	2.3 s	201 ms	0
└build_script icu_normalizer_data		5.6 s	1 ms	0
└build_script icu_properties_data		5.6 s	2 ms	0
└build_script ring		10.9 s	1.6 s	0
└toolchain /usr/bin/cc ×2	-E /work/target/debug/build/ring-302b96543280299a/out/5187812984567796785detect_compiler_family.c	10.9 s	26 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-302b96543280299a/out/5187812984567796785detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 5187812984567796785detect_compiler_family.c -dumpbase-ext .c	10.9 s	24 ms	0
└toolchain /usr/bin/cc ×2	-?	11.0 s	3 ms	256
└toolchain /usr/bin/cc ×30	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -I /cw/vendor/ring-0.17.14/include -I /cw/vendor/ring-0.17.14/pregenerated -Wall -Wextra -fvisibility=hidden -std=c1x -Wall -Wbad-function-cast -Wcast-align -Wcast-qual -Wconversion -Wmissing-field-initializers -Wmissing-include-dirs -Wnested-externs -Wredundant-decls -Wshadow -Wsign-compare -Wsign-conversion -Wstrict-prototypes -Wundef -Wuninitialized -g3 -DNDEBUG -o	11.0 s	239 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -I /cw/vendor/ring-0.17.14/include -I /cw/vendor/ring-0.17.14/pregenerated -imultiarch x86_64-linux-gnu -dD -D NDEBUG /cw/vendor/ring-0.17.14/crypto/curve25519/curve25519.c -quiet -dumpdir /work/target/debug/build/ring-302b96543280299a/out/ -dumpbase 25ac62e5b3c53843-curve25519.c -dumpbase-ext .c -m64 -mtune=generic -march=x86-64 -g3 -O0 -Wextra -Wall -Wbad-function-cast -Wcast-align -Wcast-qual -Wconversion -Wmissing-field-initializers -Wmissing-include-dirs	11.0 s	209 ms	0
└toolchain /usr/bin/as	-I /cw/vendor/ring-0.17.14/include -I /cw/vendor/ring-0.17.14/pregenerated --gdwarf-5 --64 -o /work/target/debug/build/ring-302b96543280299a/out/25ac62e5b3c53843-curve25519.o /tmp/ccTqaaID.s	11.2 s	26 ms	0
└toolchain /usr/bin/ar ×4	cqD /work/target/debug/build/ring-302b96543280299a/out/libring_core_0_17_14_.a /work/target/debug/build/ring-302b96543280299a/out/25ac62e5b3c53843-curve25519.o /work/target/debug/build/ring-302b96543280299a/out/0bbbd18bda93c05b-aes_nohw.o /work/target/debug/build/ring-302b96543280299a/out/00c879ee3285a50d-montgomery.o /work/target/debug/build/ring-302b96543280299a/out/00c879ee3285a50d-montgomery_inv.o /work/target/debug/build/ring-302b96543280299a/out/a0330e891e733f4e-ecp_nistz.o /work/target/debug/build/ring-302b96543280299a/out/a0330e891e733f4e-gfp_p256.o /work/target/debug/build/ring-302b96543280299a/out/a0330e891e733f4e-gfp_p384.o /work/target/debug/build/ring-302b96543280299a/out/a0330e891e733f4e-p256.o /work/target/debug/build/ring-302b96543280299a/out/aaa1ba3e455ee2e1-limbs.o /work/target/debug/build/ring-302b96543280299a/out/a4019cc0736b0423-mem.o /work/target/debug/build/ring-302b96543280299a/out/d5a9841f3dc6e253-poly1305.o /work/target/debug/build/ring-302b96543280299a/out/a4019cc0736b0423-crypt	12.5 s	23 ms	0
└build_script openssl-sys		12.7 s	23 ms	0
└other /usr/bin/pkg-config ×2	--libs --cflags openssl	12.7 s	3 ms	0
└toolchain /usr/bin/cc ×2	-E /work/target/debug/build/openssl-sys-9df3017baf71da3f/out/5165554423751669773detect_compiler_family.c	12.7 s	6 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-9df3017baf71da3f/out/5165554423751669773detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 5165554423751669773detect_compiler_family.c -dumpbase-ext .c	12.7 s	4 ms	0
└toolchain /usr/bin/cc	-?	12.7 s	3 ms	256
└build_script crc32fast		19.1 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	19.1 s	8 ms	0
└build_script openssl		23.0 s	1 ms	0
└build_script rustls		25.8 s	1 ms	0
└build_script httparse		25.8 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	25.8 s	8 ms	0
└build_script encoding_rs		26.7 s	1 ms	0
└build_script native-tls		35.7 s	2 ms	0
└build_script fst		44.5 s	2 ms	0
└build_script ua_generator		47.7 s	2 ms	0
└build_script spider_firewall		1 min 3 s	60 ms	25856

Network 5

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up api.github.com raw.githubusercontent.com

Destination	Protocol	What was sent	Bytes
:443	tls	SNI api.github.com, inside TLS: GET /repos/ShadowWhisperer/BlockLists/contents/RAW, host api.github.com, agent Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.2 Safari/605.1.15	1.5 KiB
:443	tls	SNI api.github.com, inside TLS: GET /repos/badmojr/1Hosts/contents/Lite/, host api.github.com, agent Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36	1.5 KiB
:443	tls	SNI raw.githubusercontent.com, inside TLS: GET /spider-rs/bad_websites/main/websites.txt, host raw.githubusercontent.com, agent Mozilla/5.0 (X11; Linux x86_64; rv:154.0) Gecko/20100101 Firefox/154.0	1.5 KiB

Sockets in the trace 3

When	Program	How	Address	Type
1 min 3 s	/work/target/debug/build/spider_firewall-6eeb5bd96c59fedc/build-script-build	connect	unix:/var/run/nscd/socket	stream
1 min 3 s	/work/target/debug/build/spider_firewall-6eeb5bd96c59fedc/build-script-build	connect	:53	datagram
1 min 3 s	/work/target/debug/build/spider_firewall-6eeb5bd96c59fedc/build-script-build	connect	:443	stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 1

Files: 1031
Directories: 210
Size: 489.0 MiB
Compiled units: 231
Scan: stopped at a limit

Why	Path	Kind	Size	Mode
outside the build areas	/work/home/.cargo/spider_firewall-buildcache	dir	4.0 KiB	755

Output

Standard error

   Compiling libc v0.2.189
   Compiling zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling stable_deref_trait v1.2.1
   Compiling yoke v0.8.3
   Compiling zerovec v0.11.8
   Compiling cfg-if v1.0.5
   Compiling tinystr v0.8.4
   Compiling smallvec v1.16.2
   Compiling writeable v0.6.4
   Compiling litemap v0.8.3
   Compiling icu_locale_core v2.3.0
   Compiling zerotrie v0.2.5
   Compiling potential_utf v0.1.6
   Compiling utf8_iter v1.0.4
   Compiling icu_collections v2.3.0
   Compiling icu_normalizer_data v2.3.0
   Compiling icu_properties_data v2.3.0
   Compiling icu_provider v2.3.1
   Compiling bytes v1.12.1
   Compiling pin-project-lite v0.2.17
   Compiling percent-encoding v2.3.2
   Compiling memchr v2.8.3
   Compiling pkg-config v0.3.34
   Compiling vcpkg v0.2.15
   Compiling futures-core v0.3.34
   Compiling zeroize v1.9.0
   Compiling once_cell v1.21.4
   Compiling rustls-pki-types v1.15.1
   Compiling openssl-sys v0.9.117
   Compiling icu_normalizer v2.3.0
   Compiling icu_properties v2.3.0
   Compiling log v0.4.34
   Compiling ring v0.17.14
   Compiling idna_adapter v1.2.2
   Compiling form_urlencoded v1.2.2
   Compiling mio v1.2.3
   Compiling socket2 v0.6.5
   Compiling futures-sink v0.3.34
   Compiling tokio v1.53.1
   Compiling idna v1.1.0
   Compiling http v1.5.0
   Compiling getrandom v0.2.17
   Compiling untrusted v0.9.0
   Compiling crc32fast v1.5.2
   Compiling serde v1.0.229
   Compiling http-body v1.1.0
   Compiling encoding_rs v0.8.42
   Compiling url v2.5.8
   Compiling simd-adler32 v0.3.10
   Compiling futures-task v0.3.34
   Compiling bitflags v2.13.2
   Compiling adler2 v2.0.1
   Compiling slab v0.4.12
   Compiling foreign-types-shared v0.1.1
   Compiling alloc-no-stdlib v2.0.4
   Compiling futures-io v0.3.34
   Compiling openssl v0.10.81
   Compiling futures-util v0.3.34
   Compiling alloc-stdlib v0.2.4
   Compiling foreign-types v0.3.2
   Compiling miniz_oxide v0.9.1
   Compiling rustls v0.23.45
   Compiling httparse v1.10.1
   Compiling serde_json v1.0.151
   Compiling rustls-webpki v0.103.15
   Compiling openssl-macros v0.1.1
   Compiling webpki-roots v1.0.9
   Compiling scopeguard v1.2.0
   Compiling base64 v0.22.1
   Compiling native-tls v0.2.18
   Compiling tower-service v0.3.3
   Compiling simdutf8 v0.1.5
   Compiling multiversion_no_op v1.0.0
   Compiling subtle v2.6.1
   Compiling try-lock v0.2.5
   Compiling core_detect v1.0.0
   Compiling want v0.3.1
   Compiling webpki-roots v0.26.11
   Compiling flate2 v1.1.10
   Compiling brotli-decompressor v4.0.3
   Compiling futures-channel v0.3.34
   Compiling tracing-core v0.1.36
   Compiling atomic-waker v1.1.2
   Compiling fastrand v2.5.0
   Compiling openssl-probe v0.2.1
   Compiling hyper v1.11.1
   Compiling tracing v0.1.44
   Compiling ureq v2.12.1
   Compiling sync_wrapper v1.0.2
   Compiling ipnet v2.12.2
   Compiling tower-layer v0.3.3
   Compiling base64 v0.23.1
   Compiling dotenvy v0.15.7
   Compiling fst v0.4.7
   Compiling ua_generator v0.5.81
   Compiling hyper-util v0.1.21
   Compiling tower v0.5.3
   Compiling tokio-native-tls v0.3.1
   Compiling http-body-util v0.1.5
   Compiling siphasher v1.0.4
   Compiling ryu v1.0.23
   Compiling serde_urlencoded v0.7.1
   Compiling phf_shared v0.13.1
   Compiling hyper-tls v0.6.0
   Compiling tower-http v0.6.11
   Compiling allocator-api2 v0.2.21
   Compiling equivalent v1.0.2
   Compiling psl-types v2.0.11
   Compiling foldhash v0.1.5
   Compiling hashbrown v0.15.5
   Compiling psl v2.1.238
   Compiling reqwest v0.12.28
   Compiling phf_generator v0.13.1
   Compiling spider_firewall v2.39.0
   Compiling phf_macros v0.13.1
    Checking phf v0.13.1
warning: spider_firewall@2.39.0: spider_firewall: GitHub listing fetch failed for https://api.github.com/repos/ShadowWhisperer/BlockLists/contents/RAW (HTTP 404 Not Found) — skipping this source
warning: spider_firewall@2.39.0: spider_firewall: GitHub listing fetch failed for https://api.github.com/repos/badmojr/1Hosts/contents/Lite/ (HTTP 404 Not Found) — skipping this source
error: failed to run custom build command for `spider_firewall v2.39.0`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/spider_firewall-6eeb5bd96c59fedc/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-env-changed=SPIDER_FIREWALL_OFFLINE
  cargo:rerun-if-env-changed=SPIDER_FIREWALL_CACHE_DIR
  cargo:rerun-if-env-changed=SPIDER_FIREWALL_FETCH_RETRIES
  cargo:rerun-if-env-changed=SPIDER_FIREWALL_FETCH_TIMEOUT_SECS
  cargo:warning=spider_firewall: GitHub listing fetch failed for https://api.github.com/repos/ShadowWhisperer/BlockLists/contents/RAW (HTTP 404 Not Found) — skipping this source
  cargo:warning=spider_firewall: GitHub listing fetch failed for https://api.github.com/repos/badmojr/1Hosts/contents/Lite/ (HTTP 404 Not Found) — skipping this source

  --- stderr

  thread 'main' (1968) panicked at /cw/vendor/spider_firewall-2.39.0/build.rs:724:29:
  Failed to fetch https://raw.githubusercontent.com/spider-rs/bad_websites/main/websites.txt: HTTP 404 Not Found (after 4 attempt(s); no cached copy available)
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

When	From	To	Event	Worker
2026-10-01 15:46 UTC	Discovered	Fetched	fetched	fetcher-627152
2026-10-01 15:46 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-2280903
2026-10-01 15:46 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-639812-slot1
2026-10-01 15:48 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-639812-slot1
2026-10-01 15:48 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-523934
2026-10-01 15:48 UTC	Scored	Done	finalized	analyzer-523934