SafeDep
Install GitHub App
SafeDep
Install GitHub App

Summary

High entropy in a PNG file with low confidence is not sufficient evidence to classify werkzeug as malware. Single, weak signal.

Verification Record

No verification record available.

Details

The YARA rule 'very_high_entropy' matched a PNG file ('werkzeug/debug/shared/console.png'). High entropy in an image file is not necessarily indicative of malicious behavior. It could be due to compression or the nature of the image data itself. Additionally, the confidence level is low, and there is only one piece of evidence. Therefore, there's insufficient evidence to classify this package as malware.

werkzeug@3.1.4Clean
Unverified
Analysed at: 11/29/25, 2:15 AM
Source: https://files.pythonhosted.org/packages/2f/f9/9e082990c2585c744734f85bec79b5dae5df9c974ffee58fe421652c8e91/werkzeug-3.1.4-py3-none-any.whl
SHA256: 2ad50fb9ed09cc3af22c54698351027ace879a0b60a3b5edf5730b2f7d876905
Confidence: Medium