python3-development
Warn
Audited by Socket on Sep 21, 2026
1 alert found:
AnomalyAnomalyassets/hatch_build.py
LOWAnomalyLOW
assets/hatch_build.py
The fragment is a conventional build hook for compiling native binaries, but it intentionally executes repository-provided scripts during package builds. This creates a significant supply-chain execution point; the shown code contains no direct evidence of credential theft, exfiltration, persistence, or other malware. The risk depends primarily on the unseen build scripts and the integrity of the package source.
Confidence: 97%Severity: 58%
Audit Metadata