Skip to content
Open-Source Registry

cargo / baracuda-cutlass-sys / 0.0.1-alpha.116

baracuda-cutlass-sys 0.0.1-alpha.116

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnsnone
processes
222
operations
7.9K
packages
10
compiler runs
1
connections
2
job time
11s
capture
138 KB
records
15K
bytes / record
8.9

Build behaviourits build script reached github.comits build script ran gitundeclared fetchfetched outside crates.io

run 63264715-04ac-4279-9559-e0a3fb3eaba9 · built 2026-10-16 · complete View on crates.io

Graph

egress · medium · in libbaracuda_cutlass_sys.rlib
2

Checks

13 of 14 clear Network activity
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Build script reached github.com
    baracuda-cutlass-sys 0.0.1-alpha.116 › github.com:443
    medium

Detection

mediumwitnessed

Build script reached github.com

Unexpected network connection

Subject
baracuda-cutlass-sys 0.0.1-alpha.116
Destination
github.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by git-remote-http

    subject github.com:443

    by /usr/lib/git-core/git-remote-https origin https://github.com/NVIDIA/cutlass.git

  2. What a build script's fetch becamesupport

    29 files came down; nothing the build compiled, linked or ran

  3. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/baracuda/baracuda/target/release/build/baracuda-cutlass-sys-9edcd4e9288a0010/build_script_build-9edcd4e9288a0010

  4. Tool commandsupport

    Command: /usr/lib/git-core/git-remote-https origin https://github.com/NVIDIA/cutlass.git

    by /usr/lib/git-core/git-remote-https origin https://github.com/NVIDIA/cutlass.git

In libbaracuda_cutlass_sys.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›git›git›git-remote-https

Ran
/usr/lib/git-core/git-remote-https origin https://github.com/NVIDIA/cutlass.git
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 6 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2486
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2486
  3. build-script-build/home/runner/work/baracuda/baracuda/target/release/build/baracuda-cutlass-sys-9edcd4e9288a0010/build-script-build2555
  4. gitgit clone --depth 1 --filter=blob:none --sparse --no-recurse-submodules --branch v4.2.0 https://github.com/NVIDIA/cutlass.git /home/runner/.baracuda-cutlass-sys…2560
  5. git/usr/lib/git-core/git remote-https origin https://github.com/NVIDIA/cutlass.git2557
  6. git-remote-https/usr/lib/git-core/git-remote-https origin https://github.com/NVIDIA/cutlass.git2559

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

2 peers
  • github.com:443 baracuda-cutlass-sys's own build code · git-remote-http · GitHub, Inc. · 29 files undeclared
  • static.crates.io:8080 the package manager · cargo (baracuda) via crates.io · 3,668 files · went into an output ecosystem
Dependencies10Build behaviour
fs20.4.3
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
Versions67RiskVulnsPublished
0.0.1-alpha.1211d ago
0.0.1-alpha.1161d ago
0.0.1-alpha.1122d ago
0.0.1-alpha.1112d ago
0.0.1-alpha.1103d ago
0.0.1-alpha.945d ago
0.0.1-alpha.935d ago
0.0.1-alpha.8611d ago
0.0.1-alpha.85not analyzed13d ago
0.0.1-alpha.82not analyzed2026-09-26
0.0.1-alpha.81not analyzed2026-09-17
0.0.1-alpha.79not analyzed2026-08-15
0.0.1-alpha.78not analyzed2026-07-31
0.0.1-alpha.77not analyzed2026-07-09
0.0.1-alpha.76not analyzed2026-07-09
0.0.1-alpha.75not analyzed2026-07-08
0.0.1-alpha.74not analyzed2026-07-04
0.0.1-alpha.73not analyzed2026-07-04
0.0.1-alpha.72not analyzed2026-06-29
0.0.1-alpha.71not analyzed2026-06-29
0.0.1-alpha.70not analyzed2026-06-29
0.0.1-alpha.69not analyzed2026-06-20
0.0.1-alpha.68not analyzed2026-06-15
0.0.1-alpha.67not analyzed2026-06-10
0.0.1-alpha.66not analyzed2026-06-08
0.0.1-alpha.65not analyzed2026-06-05
0.0.1-alpha.64not analyzed2026-06-03
0.0.1-alpha.63not analyzed2026-06-01
0.0.1-alpha.62not analyzed2026-05-31
0.0.1-alpha.61not analyzed2026-05-31
0.0.1-alpha.60not analyzed2026-05-30
0.0.1-alpha.59not analyzed2026-05-29
0.0.1-alpha.58not analyzed2026-05-29
0.0.1-alpha.55not analyzed2026-05-28
0.0.1-alpha.54not analyzed2026-05-28
0.0.1-alpha.53not analyzed2026-05-27
0.0.1-alpha.52not analyzed2026-05-27
0.0.1-alpha.51not analyzed2026-05-27
0.0.1-alpha.50not analyzed2026-05-27
0.0.1-alpha.49not analyzed2026-05-27
0.0.1-alpha.48not analyzed2026-05-26
0.0.1-alpha.47not analyzed2026-05-26
0.0.1-alpha.46not analyzed2026-05-26
0.0.1-alpha.45not analyzed2026-05-26
0.0.1-alpha.44not analyzed2026-05-26
0.0.1-alpha.43not analyzed2026-05-26
0.0.1-alpha.42not analyzed2026-05-26
0.0.1-alpha.41not analyzed2026-05-26
0.0.1-alpha.40not analyzed2026-05-26
0.0.1-alpha.39not analyzed2026-05-26
0.0.1-alpha.38not analyzed2026-05-25
0.0.1-alpha.37not analyzed2026-05-25
0.0.1-alpha.36not analyzed2026-05-25
0.0.1-alpha.35not analyzed2026-05-24
0.0.1-alpha.34not analyzed2026-05-24
0.0.1-alpha.33not analyzed2026-05-24
0.0.1-alpha.32not analyzed2026-05-24
0.0.1-alpha.31not analyzed2026-05-23
0.0.1-alpha.30not analyzed2026-05-23
0.0.1-alpha.29not analyzed2026-05-20
0.0.1-alpha.28not analyzed2026-05-19
0.0.1-alpha.27not analyzed2026-05-18
0.0.1-alpha.26not analyzed2026-05-18
0.0.1-alpha.13not analyzed2026-05-11
0.0.1-alpha.7not analyzed2026-05-07
0.0.1-alpha.6not analyzed2026-05-07
0.0.1-alpha.126mediumnone

Raw data

capture
138 KB
records
15,446
bytes per record
8.9

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run 63264715-04ac-4279-9559-e0a3fb3eaba9

analysis 0.1.0 · 2026-10-16 · 0f8abb0 · graph v2