Skip to content
Open-Source Registry

cargo / reqtls / 0.4.0-alpha5

reqtls 0.4.0-alpha5

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnsnone
processes
168
operations
2.4K
packages
8
compiler runs
4
connections
2
job time
20s
capture
54 KB
records
4.8K
bytes / record
11.2

Build behaviourits build script reached ms.xllgl.topundeclared fetchfetched outside crates.io

run 5aadd39f-efa3-4892-9e38-08b0da1316f6 · built 2026-10-17 · complete View on crates.io

Graph

egress · medium · in libreqtls.rlib
2

Checks

13 of 14 clear Network activity
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Build script reached ms.xllgl.top
    reqtls 0.4.0-alpha5 › ms.xllgl.top:8080
    medium

Detection

mediumwitnessed

Build script reached ms.xllgl.top

Unexpected network connection

Subject
reqtls 0.4.0-alpha5
Destination
ms.xllgl.top:8080
Reaches
Jobs
build-test
Rule
egress · reqrio

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to ms.xllgl.top:8080, opened by build-script-mod

    subject ms.xllgl.top:8080

    by /home/runner/work/reqrio/reqrio/target/release/build/reqtls-84999fe1ea997ba1/build-script-mod

  2. What a build script's fetch becamesupport

    5 files came down; nothing the build compiled, linked or ran

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/reqrio/reqrio/target/release/build/reqtls-84999fe1ea997ba1/build-script-mod

In libreqtls.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-mod

Ran
/home/runner/work/reqrio/reqrio/target/release/build/reqtls-84999fe1ea997ba1/build-script-mod
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2488
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2488
  3. build-script-mod/home/runner/work/reqrio/reqrio/target/release/build/reqtls-84999fe1ea997ba1/build-script-mod2546

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

2 peers
  • ms.xllgl.top:8080 reqtls's own build code · build-script-mod (reqrio) · Shenzhen Tencent Computer Systems Company Limited · 5 files undeclared
  • static.crates.io:8080 the package manager · cargo (reqrio) via crates.io · 115 files · went into an output ecosystem
Dependencies8Build behaviour
bytemuck1.25.0
hex0.4.3
ld-linux-x86-64.so.2system library
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
urlencoding2.1.3
Versions45RiskVulnsPublished
0.4.0-alpha3not analyzed2026-10-02
0.4.0-alpha2not analyzed2026-09-30
0.4.0-alpha1not analyzed2026-09-24
0.3.1not analyzed2026-07-22
0.3.0not analyzed2026-06-30
0.3.0-rc4not analyzed2026-06-29
0.3.0-rc3not analyzed2026-06-26
0.3.0-rc2not analyzed2026-06-22
0.3.0-rc1not analyzed2026-06-20
0.3.0-beta1not analyzed2026-06-18
0.3.0-alpha4not analyzed2026-06-13
0.3.0-alpha3not analyzed2026-05-20
0.3.0-alpha2not analyzed2026-05-19
0.3.0-alpha1not analyzed2026-05-12
0.2.0not analyzed2026-03-31
0.2.0-beta2not analyzed2026-03-26
0.2.0-beta1not analyzed2026-03-23
0.2.0-alpha4not analyzed2026-03-18
0.2.0-alpha2not analyzed2026-03-14
0.2.0-alpha1not analyzed2026-03-09
0.1.5not analyzed2026-03-07
0.1.4not analyzed2026-03-06
0.1.3not analyzed2026-03-01
0.1.2not analyzed2026-02-27
0.1.1not analyzed2026-02-23
0.1.0not analyzed2026-02-14
0.1.0-rc1not analyzed2026-02-13
0.1.0-alpha1not analyzed2026-02-11
0.0.20not analyzed2026-02-10
0.0.19not analyzed2026-02-07
0.0.18not analyzed2026-02-03
0.0.17not analyzed2026-02-02
0.0.16not analyzed2026-01-26
0.0.15not analyzed2026-01-25
0.0.14not analyzed2026-01-12
0.0.13not analyzed2026-01-10
0.0.12not analyzed2026-01-09
0.0.11not analyzed2026-01-05
0.0.10not analyzed2026-01-03
0.0.9not analyzed2026-01-01
0.0.8not analyzed2025-12-31
0.0.7not analyzed2025-12-30
0.0.6not analyzed2025-12-27
0.0.5not analyzed2025-12-24
0.4.0-alpha5mediumnone

Raw data

capture
54 KB
records
4,816
bytes per record
11.2

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-17 · run 5aadd39f-efa3-4892-9e38-08b0da1316f6

analysis 0.1.0 · 2026-10-16 · e987d53 · graph v2