PyPI / charset-normalizer / 3.5.2
charset-normalizer 3.5.2
- Source
- https://github.com/jawah/charset_normalizer
- Tag scanned
3.5.2- Compared with
3.5.1(0 signals introduced since)- Files
- 74 scanned, 11 skipped (binary, oversized, or unrecognised)
- Signals
- 0 critical · 0 warn · 99 info
- Scan time
- 32.9 s
- LLM review
- Reviewed by claude-haiku-5-5 (Anthropic): 36 of 36 warn and critical signals; 36 demoted to info.
- Disclude version
- 4.1.0
- Scanned (UTC)
- 2026-10-21 20:20
Signals
Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.
-
7 replaced the historical LGPL-licensed implementation with an AI-assisted rewrite, initially distributed under MIT and later under 0BSD. The original author [contests](https://github.com/chardet/chardet/issues/327) that the rewrite was sufficiently independent to permit relicensing, while Chardet's maintlikely benign A long footnote paragraph in a README about the Chardet library's relicensing history.Reasoning
A long markdown footnote line about the Chardet licensing dispute is prose, not code. Long lines in documentation are a weak raw-pass signal with no obfuscation or malicious content.
-
-
-
1. Bсеки човек има право на образование. Oбразованието трябва да бъде безплатно, поне що се отнася до началното и основното образование. Hачалното образование трябва да бъде задlikely benign A Bulgarian sample text containing a Latin 'B' and a Cyrillic 'с' in one word.Reasoning
The file is a Bulgarian prose sample. The Latin lookalike letter in 'Bсеки' appears in running text, not in code or an identifier. The pattern looks like a deliberately seeded homoglyph test fixture, which is more plausibly a scanner test corpus than an attack.
-
1. Bсеки човек има право на образование. Oбразованието трябва да бъде безплатно, поне що се отнася до началното и основното образование. Hачалното образование трябва да бъде задlikely benign Same word as the prior finding, flagged for mixing Latin and Cyrillic scripts.Reasoning
This is the mixed-script companion to the same word in a Bulgarian prose sample. The mixing is real, but it sits in running text in a data file, which weakens any attack reading.
-
право на образование. Oбразованието трябва да бъде безплатно, поне що се отнася до началното и основното образование. Hачалното образование трябва да бъде задължително. Tехничlikely benign A Bulgarian sample sentence with a Latin 'O' substituted into a Cyrillic word.Reasoning
'Oбразованието' is a sentence-initial word in Bulgarian prose with a Latin 'O' in place of Cyrillic. This looks like a seeded homoglyph test fixture in a sample data file, not executable code.
-
право на образование. Oбразованието трябва да бъде безплатно, поне що се отнася до началното и основното образование. Hачалното образование трябва да бъде задължително. Tехничlikely benign Same word as the prior finding, flagged for mixing Latin and Cyrillic scripts.Reasoning
This is the mixed-script companion to the 'Oбразованието' prose finding. It is a text sample, not an identifier in code, so the risk is low.
-
�новното образование. Hачалното образование трябва да бъде задължително. Tехническото и професионалното образование трябва да бъдат общодостъпни, а висшето образование тря… (340 bytes total)likely benign A Bulgarian sample sentence with multiple Latin lookalike letters in a Cyrillic word.Reasoning
'Hачалното' is a Bulgarian prose word with a Latin 'H' substituted, repeated across several letters. This looks like a deliberately seeded homoglyph test sample rather than an attack payload.
-
�новното образование. Hачалното образование трябва да бъде задължително. Tехническото и професионалното образование трябва да бъдат общодостъпни, а висшето образование тря… (340 bytes total)likely benign Same word as the prior finding, flagged for mixing Latin and Cyrillic scripts.Reasoning
This is the mixed-script companion to the 'Hачалното' prose finding, in a text sample with no code execution context.
-
да бъде задължително. Tехническото и професионалното образование трябва да бъдат общодостъпни, а висшето образование трябва да бъде еднакво достъпно за всички на основата наlikely benign A Bulgarian sample sentence with several Latin lookalike letters in a Cyrillic word.Reasoning
'Tехническото' is Bulgarian prose with a Latin 'T' and Latin 'e', 'x', 'c' letters mixed in. The pattern is consistent with a seeded test fixture in a sample text file, not a code-level deception.
-
да бъде задължително. Tехническото и професионалното образование трябва да бъдат общодостъпни, а висшето образование трябва да бъде еднакво достъпно за всички на основата наlikely benign Same word as the prior finding, flagged for mixing Latin and Cyrillic scripts.Reasoning
This is the mixed-script companion to the 'Tехническото' prose finding, in a text sample with no executable context.
-
2. Oбразованието трябва да бъде насочено към цялостно развитие на човешката личност и заcилване на уважението към правата на човека и основните свободи. Tо трябва да съдейства … (340 bytes total)likely benign A second Bulgarian sample line with a Latin 'O' in a Cyrillic word.Reasoning
'Oбразованието' on line 3 is a repeat of the homoglyph pattern in the same Bulgarian sample text. It is prose in a data file, consistent with a seeded test fixture.
-
2. Oбразованието трябва да бъде насочено към цялостно развитие на човешката личност и заcилване на уважението към правата на човека и основните свободи. Tо трябва да съдейства … (340 bytes total)likely benign Bulgarian prose sentence in a data text file where the word 'Oбразованието' has a Latin O in place of a Cyrillic letter.Reasoning
A raw-pass mixed-script flag on a Latin 'O' inside a Bulgarian word in a plain-text data file. This is natural-language prose, not code, so nothing executes and no identifier is being hidden. Such stray Latin lookalikes are typical of copy-paste or typing artifacts, and the raw pass has a high false-positive rate.
-
а човешката личност и заcилване на уважението към правата на човека и основните свободи. Tо трябва да съдейства за разбирателството, тъпримостта и приятелството между всички … (340 bytes total)likely benign Bulgarian text in which the word 'заcилване' contains Latin lookalike letters.Reasoning
Raw homoglyph flag on Latin 'a' and 'c' mixed into a Bulgarian word in running text. There is no code, identifier binding or execution path here, so the lookalike characters have no way to hide behaviour. The pattern fits a typo or a test fixture.
-
а човешката личност и заcилване на уважението към правата на човека и основните свободи. Tо трябва да съдейства за разбирателството, тъпримостта и приятелството между всички … (340 bytes total)likely benign Second signal for the same mixed Cyrillic/Latin word 'заcилване' in the Bulgarian text.Reasoning
Same word and same underlying lookalike characters as the homoglyph finding at this position, reported again as a mixed-script signal. It is a duplicate with no separate evidence.
-
� и основните свободи. Tо трябва да съдейства за разбирателството, тъпримостта и приятелството между всички народи, расови или религиозни групи, както и за осъществяване дейн… (341 bytes total)likely benign Bulgarian sentence where 'Tо' contains a Cyrillic о mixed with a Latin T.Reasoning
A Latin 'o' in the Bulgarian word 'Tо' in plain prose. The text is a human-rights article in a .txt data file with no executable context, so this is a lookalike typo rather than an obfuscated identifier.
-
� и основните свободи. Tо трябва да съдейства за разбирателството, тъпримостта и приятелството между всички народи, расови или религиозни групи, както и за осъществяване дейн… (341 bytes total)likely benign Second mixed-script signal for the 'Tо' token in the Bulgarian text.Reasoning
Duplicate mixed-script signal for the same 'Tо' token. It adds no independent evidence.
-
�твяване дейността на Oрганизацията на Oбединените нации за поддържане на мира.⟨U+000D⟩likely benign Bulgarian text where 'Oрганизацията' mixes a Latin O with Cyrillic letters, as in the phrase about the United Nations.Reasoning
Several lookalike letters inside 'Oрганизацията' and related words, in running prose. The file is non-code text, so there is no identifier to exploit. The pattern matches a document typed or pasted with mixed keyboard layouts.
-
�твяване дейността на Oрганизацията на Oбединените нации за поддържане на мира.⟨U+000D⟩likely benign Second mixed-script signal for 'Oрганизацията' in the Bulgarian text.Reasoning
Duplicate mixed-script signal for the same 'Oрганизацията' token, with no new evidence.
-
�а на Oрганизацията на Oбединените нации за поддържане на мира.⟨U+000D⟩likely benign Bulgarian text where 'Oбединените' contains a Latin O and Cyrillic е characters.Reasoning
Lookalike Cyrillic 'е' characters mixed with a Latin 'O' in 'Oбединените', within a plain-text Bulgarian sentence. Nothing here is code or an identifier that could be bound or executed.
-
�а на Oрганизацията на Oбединените нации за поддържане на мира.⟨U+000D⟩likely benign Second mixed-script signal for 'Oбединените' in the Bulgarian text.Reasoning
Duplicate mixed-script signal for the same 'Oбединените' token.
-
3. Pодителите имат право, с приоритет, да избират вида образование, което да получат техните деца.⟨U+000D⟩ Член 27likely benign Bulgarian text where 'Pодителите' starts with a Latin P before Cyrillic letters.Reasoning
A Latin 'P' mixed with Cyrillic letters in 'Pодителите' at the start of an article in a plain-text data file. The lookalike characters are harmless here and match a typing or copy artifact.
-
3. Pодителите имат право, с приоритет, да избират вида образование, което да получат техните деца.⟨U+000D⟩ Член 27likely benign Second mixed-script signal for 'Pодителите' in the Bulgarian text.Reasoning
Duplicate mixed-script signal for the same 'Pодителите' token.
-
1. Bсеки човек има право свободно да участва в културния живот на обществото, да се наслаждава на изкуствата, да участва в научния напредък и да се ползва от неговите достиженияlikely benign A Bulgarian sample sentence in a text data file has a Latin B mixed with Cyrillic letters.Reasoning
Raw-pass homoglyph flag on a Latin 'B' fused with Cyrillic 'еки' inside a Bulgarian sample sentence in a data file. The token is prose inside a text sample, not an identifier that runs code, and the mix looks like a typo or test-fixture artifact. No execution or concealment purpose is visible.
-
1. Bсеки човек има право свободно да участва в културния живот на обществото, да се наслаждава на изкуствата, да участва в научния напредък и да се ползва от неговите достиженияlikely benign The same Latin-plus-Cyrillic token in the Bulgarian sample sentence.Reasoning
Same mixed-script observation as the homoglyph finding on the same token. It is a prose sample in a data file, so the script mix is most likely an authoring or fixture artifact rather than obfuscation.
-
2. Bсеки човек има право на закрила на моралните и материалните си интереси, които са резултат от каквото и да е научно, литературно или художествено произведение, на което той … (340 bytes total)likely benign A second Bulgarian sample sentence with the same Latin B mixed into a Cyrillic word.Reasoning
Repeat of the same Latin B / Cyrillic mix in the second sentence of a Bulgarian text sample. It appears in running prose, so it reads as a sample-data quirk, not a code identifier.
-
2. Bсеки човек има право на закрила на моралните и материалните си интереси, които са резултат от каквото и да е научно, литературно или художествено произведение, на което той … (340 bytes total)likely benign The same Latin-plus-Cyrillic token in the second Bulgarian sample sentence.Reasoning
Mixed-script flag on the same token as the homoglyph finding. Prose in a text sample, not a sensitive identifier.
-
� �������� �������� �� ������� ������ ������� 12 ������������ ��������, ������ ���� ������ ��� ���� �����. �������� ����… (339 bytes total) -
� �������� �������� �� ������� ������ ������� 12 ������������ ��������, ������ ���� ������ ��� ���� �����. �������� ����… (339 bytes total) -
"source";"target"⟨U+000D⟩ "⟨U+FEFF⟩REF.-2";"POLISH"⟨U+000D⟩ "KW-P00-01";"SYSTEM VIDEODOMOFONOWY MEET"⟨U+000D⟩ "KW-P00-02";"URZĄDZENIE"dismissed A BOM precedes the first field of a Polish CSV data file.Reasoning
A UTF-8 byte order mark at the start of a semicolon-separated CSV is a common Excel/export artifact. It is harmless and does not conceal logic or code.
-
������ 1895 �. ������� �������� ������ � ���������, ����� ����� ������������� �������� � ������ ����������� ������� (�����… (341 bytes total) -
likely benign A docs example encodes a Bulgarian string literal containing a mixed Latin/Cyrillic word.
Reasoning
In reStructuredText docs, a Python example encodes a Bulgarian sentence with cp1251. The homoglyph sits inside a string literal used to demonstrate encoding detection, not in an identifier. The Latin/Cyrillic mix is likely a documentation example artifact.
-
likely benign The same mixed-script token in the docs example string.
Reasoning
Mixed-script observation on the same docs string literal. It is a demonstration string in a charset-detection example, so this is not evidence of obfuscation.
-
likely benign A tutorial example repeats the mixed Latin/Cyrillic Bulgarian string literal.
Reasoning
The same docs example string appears in a result-handling tutorial. The mixed script sits inside a demonstration literal, so it reads as a sample-text artifact.
-
likely benign The same mixed-script token in the tutorial example string.
Reasoning
Mixed-script flag on the same tutorial string literal. It is an example value with no execution or concealment role.
-
likely benign A miscellaneous docs example repeats the mixed-script Bulgarian literal.
Reasoning
Another docs example with the same Bulgarian sample literal, used to show encoding behavior. The homoglyph is inside a string and reflects sample-text authoring.
-
likely benign The same mixed-script token in the miscellaneous docs example.
Reasoning
Mixed-script flag on the same docs example literal. It is an illustrative string, not an identifier used to hide code.
-
likely benign A docs comment shows expected printed output containing the mixed-script Bulgarian string.
Reasoning
A comment and print call in the docs show the expected printed output. The homoglyph is in a comment-quoted string, so it is documentation text, not executable obfuscation.
-
likely benign The same mixed-script token in the docs comment.
Reasoning
Mixed-script flag on the same comment text in the docs. It is prose in a comment, not code that conceals intent.
-
likely benign Documentation example showing a byte-to-Cyrillic-character mapping in an encoding table.
Reasoning
The file is RST documentation explaining an encoding example. The Cyrillic letter appears inside a string literal escape and a comment illustrating a byte-to-character mapping, not as an identifier used to hide code. The homoglyph finding is a raw-pass false positive from documentation prose.
-
likely benign Documentation example mapping another byte to a Cyrillic character in an illustrative decoding table.
Reasoning
Same documentation context: the Cyrillic В appears in an illustrative table entry and comment within an RST doc about a new encoding. No executable identifier is being spoofed, so this is a benign example rather than obfuscation.
-
>>> >>> = >>> = >>> -
>>> >>> = >>> = >>> -
>>> >>> = >>> = >>> -
>>> >>> = >>> = >>> -
>>> and - -
>>> and - -
>>> and - -
>>> and - -
: -
, , , , -
, , , , -
, , , , -
, , , , -
, , , , -
, , , , -
: -
, , , , -
, , , , -
, , , , -
, , , , -
, , , , -
, , , , -
, , , , -
: -
, , , , -
, , , , -
, , , , -
, , , , -
, , , , -
: -
, , , , -
, , , , -
, , , , -
, , , , -
, , , , -
, , ], : -
: -
, , , , -
, , , , -
, , , , -
, , , , -
, , , , -
: -
, , , , -
, , , , -
, , , , -
, , , , -
, , , , -
, , , , -
, -
, -
, -
, -
, -
, , """["Financiën", "La France"]""", -
, , """["Financiën", "La France"]""", -
= -
=
Reproduce This Scan
Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.
&&