ShadowCanopy
Log inGet started

crates.io package intelligence

regex — deep security report

ShadowCanopy's full breakdown of regex on crates.io: verdict, AI analysis, dependency chain, network behavior, prebuilds, and obfuscated code.

Safe to use
Deep-scanned by ShadowCanopy — no threats found in its code, dependencies, or network behavior.
Scanned 8/13/2026
Approvedregex@1.13.1View on registry ↗latest: 1.13.1

No malicious behavior detected in regex@1.13.1.

Protect your projects free

AI breakdown

Plain-English summary of what this package does and how it behaves.

regex is a crates package. No description was provided in its manifest.

Capabilities

  • Contains obfuscated/encoded code

Data access

  • None observed in static analysis

Network

  • No network access observed

Static analysis raised 6 finding(s). Review the details below before installing.

Obfuscated / hidden code

Encoded payloads decoded statically (without executing them) so you can see what they resolve to.

Obfuscated source filesrc/regex/bytes.rs

Multiple obfuscation patterns in src/regex/bytes.rs

Obfuscated source fileregex-1.13.1/src/regex/bytes.rs

Multiple obfuscation patterns in regex-1.13.1/src/regex/bytes.rs

Security findings (6)

Static analysis rule matches, with the exact code that triggered them.

mediumObfuscated source fileATK-023src/builders.rs

Multiple obfuscation patterns in src/builders.rs

mediumObfuscated source fileATK-023regex-1.13.1/src/builders.rs

Multiple obfuscation patterns in regex-1.13.1/src/builders.rs

mediumObfuscated source fileATK-023src/lib.rs

Multiple obfuscation patterns in src/lib.rs

mediumObfuscated source fileATK-023regex-1.13.1/src/lib.rs

Multiple obfuscation patterns in regex-1.13.1/src/lib.rs

mediumObfuscated source fileATK-023src/regex/bytes.rs

Multiple obfuscation patterns in src/regex/bytes.rs

mediumObfuscated source fileATK-023regex-1.13.1/src/regex/bytes.rs

Multiple obfuscation patterns in regex-1.13.1/src/regex/bytes.rs

Files in package (110)

.cargo_vcs_info.jsonregex-1.13.1/.cargo_vcs_info.jsonCHANGELOG.mdregex-1.13.1/CHANGELOG.mdCargo.lockregex-1.13.1/Cargo.lockCargo.tomlregex-1.13.1/Cargo.tomlCargo.toml.origregex-1.13.1/Cargo.toml.origLICENSE-APACHEregex-1.13.1/LICENSE-APACHELICENSE-MITregex-1.13.1/LICENSE-MITREADME.mdregex-1.13.1/README.mdUNICODE.mdregex-1.13.1/UNICODE.mdbench/README.mdregex-1.13.1/bench/README.mdsrc/builders.rsregex-1.13.1/src/builders.rssrc/bytes.rsregex-1.13.1/src/bytes.rssrc/error.rsregex-1.13.1/src/error.rssrc/find_byte.rsregex-1.13.1/src/find_byte.rssrc/lib.rsregex-1.13.1/src/lib.rssrc/pattern.rsregex-1.13.1/src/pattern.rssrc/regex/bytes.rsregex-1.13.1/src/regex/bytes.rssrc/regex/mod.rsregex-1.13.1/src/regex/mod.rssrc/regex/string.rsregex-1.13.1/src/regex/string.rssrc/regexset/bytes.rsregex-1.13.1/src/regexset/bytes.rs

How ShadowCanopy checks crates.io packages

ShadowCanopy blocks every dependency by default and only lets through what it can verify — against live malicious-package advisories, an AI behavior scan, and a byte-for-byte hash check. It protects installs across npm, PyPI, crates.io, pkg.go.dev, RubyGems, Maven Central, NuGet, Packagist, Hex, pub.dev, Swift Package Manager.

Protect your projects freeSee what's being blocked

Other crates.io packages

serdetokiorandclapreqwestsynloganyhowserde_jsonthiserrorfutures

This report reflects ShadowCanopy's threat intelligence at page load and is informational, not a warranty. Canonical URL: https://shadowcanopy.dev/packages/crates/regex