Skip to content
Open-Source Registry

cargo / zsuite-agent / 0.1.0

zsuite-agent 0.1.0

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnsnone
processes
553
operations
101K
packages
486
compiler runs
481
connections
2
job time
8m 25s
capture
1.4 MB
records
186K
bytes / record
7.4

Build behaviourfetch went into the outputlinked a downloaded binaryfetched outside crates.iocompiled C/C++

run 7e6dec2f-4e55-4eb0-99b5-59fdbeabd76d · built 2026-10-18 · complete View on crates.io

Graph

egress · medium · in libzsuite_agent.rlib
3

Checks

11 of 14 clear Network activity Data flow analysis +1 more
Build behavior▲✓✓✓✓▲✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

2
  • Build script reached parcel.pyke.io
    ort-sys 2.0.0-rc.9 › parcel.pyke.io:443
    medium
  • Prebuilt library downloaded by a build script from its documented source
    libonnxruntime.a › parcel.pyke.io
    medium

Detection

mediumwitnessed

Build script reached parcel.pyke.io

Unexpected network connection

Subject
ort-sys 2.0.0-rc.9
Destination
parcel.pyke.io:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to parcel.pyke.io:443, opened by build-script-build

    subject parcel.pyke.io:443

    by /home/runner/work/zsuite/zsuite/target/release/build/ort-sys-16d56c9844dec2df/build-script-build

  2. What a build script's fetch becamesupport

    1 file came down; the build compiled or linked libonnxruntime.a

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/zsuite/zsuite/target/release/build/ort-sys-16d56c9844dec2df/build-script-build

  4. Build script fetched what its crate documents it fetchessupport

    ort-sys's build script fetches a prebuilt ONNX Runtime from parcel.pyke.io: ort's default `download-binaries` feature fetches pyke's prebuilt from its CDN

In libzsuite_agent.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/zsuite/zsuite/target/release/build/ort-sys-16d56c9844dec2df/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2473
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2473
  3. build-script-build/home/runner/work/zsuite/zsuite/target/release/build/ort-sys-16d56c9844dec2df/build-script-build9850

Remediation

The crate's build script reached the network at compile time, outside the registry's checksums. Build it from what the registry ships (the crate's own environment variable or from-source feature), or record the download as accepted once it is reviewed.

Detection

mediumwitnessed

Prebuilt library downloaded by a build script from its documented source

Object file origin needs review

Subject
/home/runner/.cache/ort.pyke.io/dfbin/x86_64-unknown-linux-gnu/F88A8C1E4B4813A1CFA79AF3F35B23ADDF2F0F36E66C5CD7C88103CB9B30509D/onnxruntime/lib/libonnxruntime.awritten by build-script-build
Destination
parcel.pyke.io
Jobs
build-test
Rule
object-provenance

Witness chain

  1. /home/runner/.cache/ort.pyke.io/dfbin/x86_64-unknown-linux-gnu/F88A8C1E4B4813A1CFA79AF3F35B23ADDF2F0F36E66C5CD7C88103CB9B30509D/onnxruntime/lib/libonnxruntime.avia /home/runner/work/zsuite/zsuite/target/release/build/ort-sys-16d56c9844dec2df/build-script-build
    • Object written under a build script that downloadedfrom parcel.pyke.io

      written under the build script at /home/runner/work/zsuite/zsuite/target/release/build/ort-sys-16d56c9844dec2df/build-script-build, which downloaded from parcel.pyke.io

    • Obfuscated toolchain bypass

      Written by build-script-build from a network connection without a recorded source compilation

    • Asked for by the build's own declaration

      ort-sys asked the linker for it: static onnxruntime (target/release/build/ort-sys-30bc880bd84ec1ee/output)

    source
  2. dependency
    artifact

Evidence

  1. Build script fetched what its crate documents it fetchessupport

    ort-sys's build script fetches a prebuilt ONNX Runtime from parcel.pyke.io: ort's default `download-binaries` feature fetches pyke's prebuilt from its CDN

In libzsuite_agent.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/zsuite/zsuite/target/release/build/ort-sys-16d56c9844dec2df/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2473
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2473
  3. build-script-build/home/runner/work/zsuite/zsuite/target/release/build/ort-sys-16d56c9844dec2df/build-script-build9850

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Network

2 peers
  • parcel.pyke.io:443 build code of ort-sys · build-script-build · Cloudflare, Inc. · 1 file · went into an output documented
  • static.crates.io:8080 the package manager · cargo (zsuite) via crates.io · 26,730 files · went into an output ecosystem
Dependencies518Build behaviour
adler22.0.1
aes0.9.3
ahash0.8.12build script
aho-corasick1.1.5
alloc-no-stdlib2.0.4
alloc-stdlib0.2.4
anyhow1.0.104build script
apple-native-keyring-store1.0.2
approx0.5.1
ar_archive_writer0.5.3
arrayref0.3.9
arrayvec0.7.8
async-broadcast0.7.2
async-channel2.5.0
async-executor1.14.0
async-io2.6.0build script
async-lock3.4.2
async-process2.5.0
async-recursion1.2.0proc macro
async-signal0.2.14
async-task4.7.1
async-trait0.1.92proc macro
atomic-waker1.1.2
autocfg1.5.1
az1.3.0
base640.13.1
base640.22.1
base640.23.1
biblatex0.12.0
bincode1.3.3
bit-set0.8.0
bit-vec0.8.0
bitflags2.13.2
block-buffer0.10.4
block-buffer0.12.1
block-padding0.4.2
blocking1.7.0
brotli-decompressor5.0.3
bumpalo3.20.3
by_address1.2.1
bytemuck1.25.2
bytemuck_derive1.12.1proc macro
byteorder1.5.0
byteorder-lite0.1.0
castaway0.2.4
cbc0.2.1
cc1.8.0
cfg-if1.0.5
cfg_aliases0.2.2
chacha200.10.2
chinese-number0.7.8
chinese-variant1.1.6
ciborium0.2.2
ciborium-io0.2.2
ciborium-ll0.2.2
cipher0.5.2
citationberg0.7.0
cmov0.5.4
cobs0.3.0
codex0.3.0build script
color0.3.3
color_quant1.1.0
comemo0.5.1
comemo-macros0.5.1proc macro
compact_str0.9.1
concurrent-queue2.5.0
const-oid0.10.2
core-foundation0.10.1
core-foundation-sys0.8.7
core_detect1.0.0
core_maths0.1.1
cpubits0.1.1
cpufeatures0.2.17
cpufeatures0.3.1
crc32fast1.5.2build script
crossbeam-deque0.8.8build script
crossbeam-epoch0.9.21build script
crossbeam-utils0.8.23build script
crunchy0.2.4build script, not run
crypto-common0.1.7
crypto-common0.2.2
csv1.4.0
csv-core0.1.13
ctutils0.4.3
darling0.20.11
darling_core0.20.11
darling_macro0.20.11proc macro
dary_heap0.3.9
data-url0.3.2
deranged0.5.9
derive_builder0.20.2
derive_builder_core0.20.2
derive_builder_macro0.20.2proc macro
digest0.10.7
digest0.11.3
displaydoc0.2.7proc macro
ecb0.2.1
ecow0.2.6
either1.19.0
encoding_rs0.8.42build script
endi1.1.1
enum-ordinalize4.4.2
enum-ordinalize-derive4.4.2proc macro
enumflags20.7.12
enumflags2_derive0.7.12proc macro
equivalent1.0.3
errno0.3.14
esaxx-rs0.1.10build script
euclid0.22.14
event-listener5.4.2
event-listener-strategy0.5.4
fallible-iterator0.3.0
fallible-streaming-iterator0.1.9
fancy-regex0.14.0
fancy-regex0.16.2
fastrand2.5.0
fdeflate0.3.7
fearless_simd0.4.1
fearless_simd1.1.0
filetime0.2.29
find-msvc-tools0.1.14
flate21.1.10
float-cmp0.9.0
fnv1.0.7
foldhash0.2.0
font-types0.11.3
fontdb0.23.0
foreign-types0.3.2
foreign-types-shared0.1.1
form_urlencoded1.2.2
futures-core0.3.34
futures-io0.3.34
futures-lite2.6.1
futures-macro0.3.34proc macro
futures-task0.3.34
futures-util0.3.34
generic-array0.14.7build script
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.3build script
gif0.14.2
glidesort0.1.2
glifo0.1.1
guillotiere0.7.0
half2.7.1
hashbrown0.16.1
hashbrown0.17.1
hashlink0.12.2
hayagriva0.10.1
hayro0.7.1
hayro-ccitt0.3.0
hayro-ccitt0.4.0
hayro-cmap0.1.0
hayro-interpret0.7.0
hayro-jbig20.3.1
hayro-jpeg20000.3.5
hayro-postscript0.1.0
hayro-svg0.7.0
hayro-syntax0.7.2
heck0.5.0
hermit-abi0.5.3
hex0.4.3
hkdf0.13.0
hmac0.13.0
hybrid-array0.4.15
hypher0.1.8
icu_collator2.3.1
icu_collator_data2.3.0build script
icu_collections2.3.0
icu_locale2.3.1
icu_locale_core2.3.0
icu_locale_data2.3.0build script
icu_locale_fallback2.3.0
icu_locale_fallback_data2.3.0build script
icu_normalizer2.3.0
icu_normalizer_data2.3.0build script
icu_properties2.3.0
icu_properties_data2.3.0build script
icu_provider2.3.1
icu_provider_blob2.3.0
icu_segmenter2.3.0
icu_segmenter_data2.3.0build script
ident_case1.0.1
idna1.1.0
idna_adapter1.2.2
image0.25.10
image-webp0.2.4
imagesize0.14.0
indexmap2.14.2
inout0.2.3
itertools0.14.0
itoa1.0.18
js-sys0.3.106
json-event-parser0.2.3
kamadak-exif0.6.1
keyring4.2.0
keyring-core1.0.1
kurbo0.13.1
ld-linux-x86-64.so.2system library
libc0.2.190build script
libc.so.6system library
libgcc_s.so.1system library
libm0.2.16build script
libm.so.6system library
libmvec.so.1system library
libsqlite3-sys0.38.2build script
linebender_resource_handle0.1.1
linked-hash-map0.5.6
linux-raw-sys0.12.1
lipsum0.9.1
litemap0.8.3
lock_api0.4.14
log0.4.34
lopdf0.45.0
macro_rules_attribute0.2.3
macro_rules_attribute-proc_macro0.2.3proc macro
matrixmultiply0.3.11build script
md-50.11.0
memchr2.8.3
memoffset0.9.1build script, not run
minimal-lexical0.2.1
miniz_oxide0.8.9
miniz_oxide0.9.1
model2vec-rs0.3.0
monostate0.1.18
monostate-impl0.1.18proc macro
moxcms0.8.1
multiversion_no_op1.0.0proc macro
mutate_once0.1.2
native-tls0.2.18build script
ndarray0.15.6
ndarray0.16.1
nix0.31.3build script, not run
nom7.1.3
nom8.0.0
num0.4.3
num-bigint0.4.8
num-complex0.4.6
num-conv0.2.2
num-integer0.1.47
num-iter0.1.46
num-rational0.4.2
num-traits0.2.19build script
object0.39.1build script
once_cell1.21.4
openssl0.10.81build script
openssl-macros0.1.1proc macro
openssl-probe0.2.1
openssl-src300.6.1+3.6.3
openssl-sys0.9.117build script
ordered-stream0.2.0
ort2.0.0-rc.9
ort-sys2.0.0-rc.9build scriptnetworkparcel.pyke.io
oxilangtag0.1.6
oxiri0.2.11
oxjsonld0.2.6
oxrdf0.3.4
oxrdfio0.2.6
oxrdfxml0.2.4
oxttl0.2.4
palette0.7.7
palette_derive0.7.7proc macro
palette_math0.7.7
parking2.2.1
parking_lot0.12.5
parking_lot_core0.9.12build script
paste1.0.15build scriptproc macro
pastey0.2.3proc macro
peniko0.6.1
percent-encoding2.3.2
phf0.13.1
phf_generator0.13.1
phf_macros0.13.1proc macro
phf_shared0.13.1
pic-scale0.7.12
pico-args0.5.0
pin-project-lite0.2.17
piper0.2.5
pkg-config0.3.34
plist1.10.1
png0.18.1
polling3.11.0
polycool0.4.0
portable-atomic1.15.0build script
portable-atomic-util0.2.8build script, not run
postcard1.1.3
potential_utf0.1.6
powerfmt0.2.1
ppv-lite860.2.21
proc-macro-crate3.5.0
proc-macro-hack0.5.20+deprecatedbuild scriptproc macro
proc-macro21.0.107build script
psm0.1.32build scriptprebuilt objects
pxfm0.1.30
quick-error2.0.1
quick-xml0.37.5
quick-xml0.38.4
quick-xml0.42.0
quote1.0.47build script
r-efi5.3.0
r-efi6.0.0
rand0.10.3
rand0.8.8
rand0.9.5
rand_chacha0.3.1
rand_chacha0.9.0
rand_core0.10.1
rand_core0.6.4
rand_core0.9.5
rangemap1.8.0
rawpointer0.2.1
rayon1.12.0
rayon-cond0.4.0
rayon-core1.13.0build script
read-fonts0.39.2
redox_syscall0.5.18
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
ring0.17.14build scriptprebuilt objects
roman-numerals-rs3.1.0
roxmltree0.21.1
rsqlite-vfs0.1.1
rusqlite0.40.2
rust_decimal1.43.0build script
rustc-hash2.1.3
rustix1.1.5build script
rustls0.23.46build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
rustversion1.0.23build scriptproc macro
rustybuzz0.20.1
ryu1.0.23
ryu-js1.0.3
safetensors0.5.3
same-file1.0.6
schannel0.1.30
scopeguard1.2.0
secret-service5.2.0
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.28
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.154build script
serde_path_to_error0.1.20
serde_repr0.1.21proc macro
serde_spanned0.6.9
serde_yaml0.9.34+deprecated
sha20.10.9
sha20.11.1
shlex2.0.1
signal-hook-registry1.4.8
simd-adler320.3.10
simdutf80.1.5
simplecss0.2.2
siphasher1.0.4
skrifa0.42.1
slab0.4.12
slotmap1.1.1build script
smallvec1.16.3
socks0.3.4
spin0.9.9
spm_precompiled0.1.4
sqlite-wasm-rs0.5.5build script, not run
stable_deref_trait1.2.1
stacker0.1.25build script
static_assertions1.1.0
strict-num0.1.1
stringprep0.1.5
strsim0.11.1
strum0.27.2
strum_macros0.27.2proc macro
subtle2.6.1
svgtypes0.16.1
syn2.0.119
syn3.0.9
synstructure0.14.0
syntect5.3.0
tar0.4.46
tempfile3.27.0
thin-vec0.2.21
thiserror2.0.21build script
thiserror-impl2.0.21proc macro
time0.3.55
time-core0.1.9
time-macros0.2.32proc macro
tiny-skia-path0.12.0
tinystr0.8.4
tinyvec1.13.3
tokenizers0.21.4
toml0.8.23
toml_datetime0.6.11
toml_datetime1.1.2+spec-1.1.0
toml_edit0.22.27
toml_edit0.25.17+spec-1.1.0
toml_parser1.1.5+spec-1.1.0
toml_write0.1.2
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
ttf-parser0.25.1
two-face0.4.5
typed-arena2.0.2
typed-path0.12.3
typenum1.20.1
typst0.15.1
typst-assets0.15.1
typst-eval0.15.1
typst-html0.15.1
typst-layout0.15.1
typst-library0.15.1
typst-macros0.15.1proc macro
typst-realize0.15.1
typst-svg0.15.1
typst-syntax0.15.1
typst-timing0.15.1
typst-utils0.15.1build scriptruns toolsgit
uds_windows1.2.1
unic-langid0.9.6
unic-langid-impl0.9.6
unic-langid-macros0.9.6
unic-langid-macros-impl0.9.6proc macro
unicode-bidi0.3.18
unicode-bidi-mirroring0.4.0
unicode-ccc0.4.0
unicode-ident1.0.27
unicode-math-class0.1.0
unicode-normalization0.1.25
unicode-normalization-alignments0.1.12
unicode-properties0.1.4
unicode-script0.5.8
unicode-segmentation1.13.3
unicode-vo0.1.0
unicode_categories0.1.1
unsafe-libyaml0.2.11
unscanny0.1.0
untrusted0.9.0
ureq2.12.1
url2.5.8
usvg0.47.0
utf16_iter1.0.5
utf8_iter1.0.4
uuid1.28.0
vcpkg0.2.15prebuilt objects
vello_common0.0.8
vello_common0.0.9
vello_cpu0.0.8
version_check0.9.5
walkdir2.5.0
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.129build script, not run
wasm-bindgen-macro0.2.129proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129build script, not run
wasmi1.1.0
wasmi_collections1.1.0
wasmi_core1.1.0
wasmi_ir1.1.0
wasmparser0.239.0build script
webpki-roots0.26.11
webpki-roots1.0.9
weezl0.1.12
weezl0.2.1
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-util0.1.11
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-link0.2.1
windows-native-keyring-store1.1.0
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
winnow0.7.15
winnow1.0.4
wit-bindgen0.57.1build script, not runprebuilt objects
write161.0.0
writeable0.6.4
xattr1.6.1
xmlwriter0.1.0
yaml-rust0.4.5
yoke0.8.3
yoke-derive0.8.4proc macro
zbus5.19.0
zbus-secret-service-keyring-store1.0.1
zbus_macros5.19.0proc macro
zbus_names4.3.5
zcheapstr1.1.0
zerocopy0.8.63build script
zerocopy-derive0.8.63proc macro
zerofrom0.1.8
zerofrom-derive0.1.8proc macro
zeroize1.9.1
zerotrie0.2.5
zerovec0.11.8
zerovec-derive0.11.6proc macro
zip9.0.4
zlib-rs0.6.8
zmij1.0.23build script
zopfli0.8.4
zsuite-finder0.1.0
zsuite-sealed0.1.0
zsuite-veil0.1.0build script
zune-core0.5.3
zune-jpeg0.5.15
zvariant5.15.1
zvariant_derive5.15.1proc macro
zvariant_utils4.2.0
Versions1RiskVulnsPublished
0.1.0mediumnone2d ago

Raw data

capture
1.4 MB
records
186,269
bytes per record
7.4

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

2 of 2 jobs captured: build-test unknown, build-test success · Generated 2026-10-18 · run 7e6dec2f-4e55-4eb0-99b5-59fdbeabd76d

analysis 0.1.0 · 2026-10-17 · 0abbde9 · graph v2