msgpack 1.2.3

Source: https://github.com/msgpack/msgpack-python
Artifact scanned: msgpack-1.2.3.tar.gz (sdist · 191.9 KB · SHA-256 32edb81a2b5e…)
Compared with: msgpack-1.2.2.tar.gz (117 signals introduced since)
Files: 35 scanned, 9 skipped (binary, oversized, or unrecognised)
Signals: 0 critical · 22 warn · 106 info
Scan time: 107.1 s
LLM review: Reviewed by claude-haiku-5-5 (Anthropic): the 100 most severe of 121 warn and critical signals (100 with a verdict); 99 demoted to info. The rest are unreviewed.
Disclude version: 4.3.0
Scanned (UTC): 2026-10-23 06:39

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

warn embedded-nul-in-string msgpack/_cmsgpack.c:19870:1310 new in this release

string literal contains an embedded NUL followed by 716 more bytes of source (token pass, confidence 0.85)
```
static const char cstring[] = "x\332\265V\315s\333\306\0257\033\331\241m\306\026U9M\233V\263l\354\306\256k\326l\2548u\047\315\260\2262\323Cb\321\226\247=t\006^\001\013\n\021\270Kb\027\022\351\364\303G\036\367\210#\2168\342\310\243\216>\362\310#\377\004\377\t}o\001\202\244(O\342\351\224C\t\273\357\275}\373>~\357\007\336
```
likely benign LLM, confidence 0.65 A static C string holding zlib-compressed binary data with an embedded NUL, inside msgpack's generated extension source.
Reasoning
The string begins with a zlib header ('x\332'), so it is a compressed binary constant embedded in C. That is somewhat unusual in source code, but in a generated Cython-style extension file from msgpack it is most plausibly bundled data, not a payload. The token-pass signal alone does not show intent, and the blob is not shown being decompressed and executed.

warn encoding-octal msgpack/_cmsgpack.c:19888:4971 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)

\360\016\000\t\014\2104\210q\330\014\022\220,\230a\330\020\021\360\006\000\t\014\2104\210{\230\047\240\021\330\014\022\220.\240\001\330\024\025\340\010\034\230A\230\\\250\021\250(\260!\2605\270\001\270\021\330\010\t\330\014\020\220\016\230a\230u\240A\340\014\034\230A\230Q\230a\200A\360\016\000\t\020\210t\2208\2301\230A

warn encoding-octal msgpack/_cmsgpack.c:19888:5011 new in this release

8 consecutive `\NNN` octal escapes (entropy 3.0 bits/byte) (raw pass, confidence 0.65)

\220,\230a\330\020\021\360\006\000\t\014\2104\210{\230\047\240\021\330\014\022\220.\240\001\330\024\025\340\010\034\230A\230\\\250\021\250(\260!\2605\270\001\270\021\330\010\t\330\014\020\220\016\230a\230u\240A\340\014\034\230A\230Q\230a\200A\360\016\000\t\020\210t\2208\2301\230A\200A\360\020\000\t\r\210O\2301\330\010\

warn encoding-octal msgpack/_cmsgpack.c:19888:5044 new in this release

9 consecutive `\NNN` octal escapes (entropy 3.2 bits/byte) (raw pass, confidence 0.65)

0\t\014\2104\210{\230\047\240\021\330\014\022\220.\240\001\330\024\025\340\010\034\230A\230\\\250\021\250(\260!\2605\270\001\270\021\330\010\t\330\014\020\220\016\230a\230u\240A\340\014\034\230A\230Q\230a\200A\360\016\000\t\020\210t\2208\2301\230A\200A\360\020\000\t\r\210O\2301\330\010\017\210s\220!\2201\330\010\013\21

warn encoding-octal msgpack/_cmsgpack.c:19888:5136 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)

\\250\021\250(\260!\2605\270\001\270\021\330\010\t\330\014\020\220\016\230a\230u\240A\340\014\034\230A\230Q\230a\200A\360\016\000\t\020\210t\2208\2301\230A\200A\360\020\000\t\r\210O\2301\330\010\017\210s\220!\2201\330\010\013\2105\220\002\220!\330\014\022\220*\230A\230Q\330\010\030\230\001\230\021\230$\230e\2401\330\01

warn encoding-octal msgpack/_cmsgpack.c:19888:5565 new in this release

8 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)

4\022\320\022+\2501\250D\260\003\2606\270\024\270S\300\001\330\014\020\220\003\220:\230Q\330\014\023\2201\320\000\036\320\0367\260q\330\014 \320 0\3200A\300\021\330\014\r\330\014-\250Q\330\014\r\330\014\r\330\014\r\330\014\r\330\014\r\360\036\000\005\033\230!\360\010\000\005\026\220Q\340\004\034\230A\340\004\007\200\17

warn encoding-octal msgpack/_cmsgpack.c:19888:5749 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)

\330\014\r\330\014\r\330\014\r\330\014\r\330\014\r\360\036\000\005\033\230!\360\010\000\005\026\220Q\340\004\034\230A\340\004\007\200\177\220g\230Q\330\010\017\210q\340\004\030\230\001\230\030\240\021\240&\250\001\250\025\250a\250q\340\004\007\200|\2204\220q\330\010\026\220a\330\004\007\200|\2204\220q\330\010\026\220a\

warn encoding-octal msgpack/_cmsgpack.c:19888:5774 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)

014\r\330\014\r\330\014\r\360\036\000\005\033\230!\360\010\000\005\026\220Q\340\004\034\230A\340\004\007\200\177\220g\230Q\330\010\017\210q\340\004\030\230\001\230\030\240\021\240&\250\001\250\025\250a\250q\340\004\007\200|\2204\220q\330\010\026\220a\330\004\007\200|\2204\220q\330\010\026\220a\330\004""\007\200~\220T\2

warn encoding-octal msgpack/_cmsgpack.c:19888:5816 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)

033\230!\360\010\000\005\026\220Q\340\004\034\230A\340\004\007\200\177\220g\230Q\330\010\017\210q\340\004\030\230\001\230\030\240\021\240&\250\001\250\025\250a\250q\340\004\007\200|\2204\220q\330\010\026\220a\330\004\007\200|\2204\220q\330\010\026\220a\330\004""\007\200~\220T\230\021\330\010\030\230\001\330\004\007\200

warn encoding-octal msgpack/_cmsgpack.c:19888:5863 new in this release

10 consecutive `\NNN` octal escapes (entropy 2.7 bits/byte) (raw pass, confidence 0.65)

30A\340\004\007\200\177\220g\230Q\330\010\017\210q\340\004\030\230\001\230\030\240\021\240&\250\001\250\025\250a\250q\340\004\007\200|\2204\220q\330\010\026\220a\330\004\007\200|\2204\220q\330\010\026\220a\330\004""\007\200~\220T\230\021\330\010\030\230\001\330\004\007\200|\2204\220q\330\010\026\220g\230R\230q\330\004\

warn encoding-octal msgpack/_cmsgpack.c:19888:6042 new in this release

11 consecutive `\NNN` octal escapes (entropy 3.1 bits/byte) (raw pass, confidence 0.65)

2204\220q\330\010\026\220a\330\004""\007\200~\220T\230\021\330\010\030\230\001\330\004\007\200|\2204\220q\330\010\026\220g\230R\230q\330\004\007\200|\2204\220q\330\010\026\220a\340\004\005\330\010\020\220\001\220\021\220%\220}\320$7\260{\300!\330\021\033\2305\240\013\320+;\2701\330\021\036\230m\250?\270-\300q\330\010\0

warn encoding-octal msgpack/_cmsgpack.c:19888:6168 new in this release

11 consecutive `\NNN` octal escapes (entropy 3.0 bits/byte) (raw pass, confidence 0.65)

R\230q\330\004\007\200|\2204\220q\330\010\026\220a\340\004\005\330\010\020\220\001\220\021\220%\220}\320$7\260{\300!\330\021\033\2305\240\013\320+;\2701\330\021\036\230m\250?\270-\300q\330\010\016\320\016\036\230a\230q\240\005\240U\250)\2601\260A\330\010\013\2104\210s\220!\330\014\022\320\022$\240A\240Q\240a\330\014\01

warn encoding-octal msgpack/_cmsgpack.c:19888:6302 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)

240\013\320+;\2701\330\021\036\230m\250?\270-\300q\330\010\016\320\016\036\230a\230q\240\005\240U\250)\2601\260A\330\010\013\2104\210s\220!\330\014\022\320\022$\240A\240Q\240a\330\014\017\210t\2202\220Q\360\006\000\021\027\220i\230q\240\005\320%>\270a\270s\300!\3005\310\007\310q\320PQ\330\014\023\2201\340\010\024\220A\

warn encoding-octal msgpack/_cmsgpack.c:19888:6454 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)

320\022$\240A\240Q\240a\330\014\017\210t\2202\220Q\360\006\000\021\027\220i\230q\240\005\320%>\270a\270s\300!\3005\310\007\310q\320PQ\330\014\023\2201\340\010\024\220A\220Q\220a\330\010\030\230\001\230\021\230!\340\004\007\200t\2103\210a\330\010\016\210j\230\001\230\021\330\t\r\210T\220\021\330\010\016\210a\330\t\r\210

warn embedded-nul-in-string msgpack/_cmsgpack.c:19888:6462 new in this release

string literal contains an embedded NUL followed by 326 more bytes of source (token pass, confidence 0.85)

200|\2204\220q\330\010\026\220a\330\004""\007\200~\220T\230\021\330\010\030\230\001\330\004\007\200|\2204\220q\330\010\026\220g\230R\230q\330\004\007\200|\2204\220q\330\010\026\220a\340\004\005\330\010\020\220\001\220\021\220%\220}\320$7\260{\300!\330\021\033\2305\240\013\320+;\2701\330\021\036\230m\250?\270-\300q\330\

warn encoding-octal msgpack/_cmsgpack.c:19888:6687 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)

210a\330\010\016\210j\230\001\230\021\330\t\r\210T\220\021\330\010\016\210a\330\t\r\210T\220\021\330\010\016\210a\340\010\016\210j\230\001\320\0318\270\001";

warn encoding-octal msgpack/_cmsgpack.c:19888:6725 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
330\t\r\210T\220\021\330\010\016\210a\330\t\r\210T\220\021\330\010\016\210a\340\010\016\210j\230\001\320\0318\270\001";
```

warn macro-keyword-override msgpack/_cmsgpack.c:1653:1

`#define __pyx_atomic_int_type int` aliases a C reserved keyword behind a non-keyword macro name (ast pass, confidence 0.85)

#define __PYX_GET_CYTHON_COMPILING_IN_CPYTHON_FREETHREADING() CYTHON_COMPILING_IN_CPYTHON_FREETHREADING
#define __pyx_atomic_int_type int
#define __pyx_nonatomic_int_type int
#if CYTHON_ATOMICS && (defined(__STDC_VERSION__) &&\

warn macro-keyword-override msgpack/_cmsgpack.c:1654:1

`#define __pyx_nonatomic_int_type int` aliases a C reserved keyword behind a non-keyword macro name (ast pass, confidence 0.85)

#define __pyx_atomic_int_type int
#define __pyx_nonatomic_int_type int
#if CYTHON_ATOMICS && (defined(__STDC_VERSION__) &&\
                        (__STDC_VERSION__ >= 201112L) &&\

warn encoding-hex test/test_case.py:114:15

16 consecutive `\xNN` escapes (entropy 4.0 bits/byte) (raw pass, confidence 0.65)

            tuple(range(15)),
            b"\x9f\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e",
        ),
        (

warn encoding-hex test/test_case.py:118:15

19 consecutive `\xNN` escapes (entropy 4.1 bits/byte) (raw pass, confidence 0.65)

            tuple(range(16)),
            b"\xdc\x00\x10\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f",
        ),
        ({}, b"\x80"),

warn payload-bytes-literal test/test_format.py:73:9

concatenated bytes literal contains 37 `\xNN` escapes (100% of content) — binary payload shape (ast pass, confidence 0.85)
```
    check(
        b"\x96"
        b"\xde\x00\x00"
        b"\xde\x00\x01\xc0\xc2"
```

info long-line msgpack/_cmsgpack.c:19864:1 new in this release

line length 879 characters (raw pass, confidence 0.50)

    const struct { const unsigned int length: 7; } str_length_index[] = {{15},{1},{1},{44},{61},{21},{50},{26},{23},{35},{34},{23},{31},{68},{67},{63},{69},{36},{31},{15},{36},{27},{17},{7},{6},{18},{28},{25},{2},{14},{9},{17},{29},{29},{13},{14},{23},{18},{11},{19},{21},{50},{31},{57},{37},{52},{25},{60},{22},{27},{55

info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:517 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
246\016\205#\311\311\241\3473B9\021\007\3371[\021O\022\217\333\242\323\365\231b\273\177\337\047\016U\024\245J\010\342\323\240\315v\373\236T\350\202\365\273\"P\222\010\327\030=\"{\340\233\005\304\316\256<`\304>\244\274\315\234\277r\305\332\2408\246~\310\210\010\025\036\tP\365\255 \035\021\260\354\022%\362\370\352\3179=\
```
likely benign LLM, confidence 0.85 Long run of octal-escaped high bytes inside a generated msgpack C source string literal.
Reasoning
Raw-pass octal escapes in a long binary-looking C string literal inside the msgpack package's generated extension source. Consecutive high-byte escapes are typical of compiled or serialized binary data embedded in generated C, and the file is a known msgpack artifact. Raw findings have a high false-positive rate, and nothing here is executed or decoded by surrounding logic visible in the snippet.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:645 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
5v\373\236T\350\202\365\273\"P\222\010\327\030=\"{\340\233\005\304\316\256<`\304>\244\274\315\234\277r\305\332\2408\246~\310\210\010\025\036\tP\365\255 \035\021\260\354\022%\362\370\352\3179=\200\250@@}_\330T1\010J\261\200S\237\034\204\256\313\202\005\023\306MX\347X\240/\342RH\320yDX\020\210\200|I\316\210\347\311\302\2
```
likely benign LLM, confidence 0.85 Continuation of the same octal-escaped binary blob in the msgpack generated C file.
Reasoning
Same continuous binary blob as the other octal-escape findings in this literal; the content is embedded binary data in a generated extension file, not an obfuscated instruction sequence.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:818 new in this release

9 consecutive `\NNN` octal escapes (entropy 3.2 bits/byte) (raw pass, confidence 0.65)
```
\362\370\352\3179=\200\250@@}_\330T1\010J\261\200S\237\034\204\256\313\202\005\023\306MX\347X\240/\342RH\320yDX\020\210\200|I\316\210\347\311\302\262\033\252L\275\234\005\004\001\345\r\230\035\006\322;f\376 \257\332\274\232\246j\244\033\210v\300\244\234\371\250[\226\307=eY\267\357\254\272\373\221.\\\306\234\377\341x\30
```
likely benign LLM, confidence 0.85 Another segment of the same escaped binary data literal in msgpack's generated C source.
Reasoning
Part of the same long escaped byte string, consistent with embedded binary or compressed data in generated code from a widely used package. The raw pass flags byte patterns, which is weak evidence of malice.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:893 new in this release

8 consecutive `\NNN` octal escapes (entropy 3.0 bits/byte) (raw pass, confidence 0.65)
```
005\023\306MX\347X\240/\342RH\320yDX\020\210\200|I\316\210\347\311\302\262\033\252L\275\234\005\004\001\345\r\230\035\006\322;f\376 \257\332\274\232\246j\244\033\210v\300\244\234\371\250[\226\307=eY\267\357\254\272\373\221.\\\306\234\377\341x\300\250c\035\014\024\223\357\356\344\205\013Z\313\367\216\230q\363\202tBiNSs\
```
likely benign LLM, confidence 0.85 Segment of the escaped binary blob embedded in the msgpack generated C file.
Reasoning
Continuation of the same escaped binary blob; the surrounding bytes look like serialized or compressed data (including a 'BiNSs' fragment resembling a serialized archive marker), typical of generated code and not of a dropper.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:926 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
yDX\020\210\200|I\316\210\347\311\302\262\033\252L\275\234\005\004\001\345\r\230\035\006\322;f\376 \257\332\274\232\246j\244\033\210v\300\244\234\371\250[\226\307=eY\267\357\254\272\373\221.\\\306\234\377\341x\300\250c\035\014\024\223\357\356\344\205\013Z\313\367\216\230q\363\202tBiNSs\036\353_\247A@\007Dz/Y\241\345\20
```
likely benign LLM, confidence 0.85 Further octal-escaped binary data inside the generated msgpack C literal.
Reasoning
Same embedded binary data run as the adjacent findings; octal escapes of arbitrary bytes are the normal way a C compiler emits binary constants.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:1041 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
\246j\244\033\210v\300\244\234\371\250[\226\307=eY\267\357\254\272\373\221.\\\306\234\377\341x\300\250c\035\014\024\223\357\356\344\205\013Z\313\367\216\230q\363\202tBiNSs\036\353_\247A@\007Dz/Y\241\345\202\337\343\254M\025\224*S\027\320\311\003\010\363\026\004\242\003\247|\345\335\303\010s\004:\314\245 ;\3572\307\313\
```
likely benign LLM, confidence 0.85 Another stretch of the escaped binary blob in the msgpack generated C source.
Reasoning
Continuation of the embedded binary data run; the entropy values reported are consistent with compressed or serialized bytes rather than encoded code, and the context is a legitimate generated artifact.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:1094 new in this release

9 consecutive `\NNN` octal escapes (entropy 3.2 bits/byte) (raw pass, confidence 0.65)
```
7\357\254\272\373\221.\\\306\234\377\341x\300\250c\035\014\024\223\357\356\344\205\013Z\313\367\216\230q\363\202tBiNSs\036\353_\247A@\007Dz/Y\241\345\202\337\343\254M\025\224*S\027\320\311\003\010\363\026\004\242\003\247|\345\335\303\010s\004:\314\245 ;\3572\307\313\000Z\370s<\211\nf\260\000s0\303Q\256\006\211u(\304\32
```
likely benign LLM, confidence 0.85 Segment of the long escaped binary literal in the msgpack generated C file.
Reasoning
Same binary run; the flagged octal escapes sit inside one large data literal and do not show decoding or execution in the snippet.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:1185 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
\367\216\230q\363\202tBiNSs\036\353_\247A@\007Dz/Y\241\345\202\337\343\254M\025\224*S\027\320\311\003\010\363\026\004\242\003\247|\345\335\303\010s\004:\314\245 ;\3572\307\313\000Z\370s<\211\nf\260\000s0\303Q\256\006\211u(\304\321y\276\262\376#~@d\207>b\314a\276\242m\273\000\222\201\214\0473\367\216\017\260_\272\035\00
```
likely benign LLM, confidence 0.85 Further octal-escaped bytes in the msgpack generated C binary constant.
Reasoning
Part of the same embedded binary data literal. Octal escapes for non-printable bytes are standard compiler-generated output for binary constants.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:1220 new in this release

11 consecutive `\NNN` octal escapes (entropy 3.3 bits/byte) (raw pass, confidence 0.65)
```
_\247A@\007Dz/Y\241\345\202\337\343\254M\025\224*S\027\320\311\003\010\363\026\004\242\003\247|\345\335\303\010s\004:\314\245 ;\3572\307\313\000Z\370s<\211\nf\260\000s0\303Q\256\006\211u(\304\321y\276\262\376#~@d\207>b\314a\276\242m\273\000\222\201\214\0473\367\216\017\260_\272\035\005o\365\337\241\335\267\227\005\225\
```
likely benign LLM, confidence 0.85 Tail segment of the escaped binary data literal in the msgpack generated C file.
Reasoning
Continuation of the same embedded binary literal; no executable or network behavior is visible, and the file is a known msgpack generated source.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:1402 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
211u(\304\321y\276\262\376#~@d\207>b\314a\276\242m\273\000\222\201\214\0473\367\216\017\260_\272\035\005o\365\337\241\335\267\227\005\225\205\233b\303\314\216\301@\014\216=v\262tWG\266\315d\260\276\315\272\312\023\\\316%*_\376\336\312\233\336\035\364\013Q\310\347B.\310\254\272\226\0250\047\264\231e\021\0474c\204\361\25
```
likely benign LLM, confidence 0.75 A run of octal-escaped bytes inside a large generated string constant in msgpack's C extension source.
Reasoning
The octal escapes sit inside one very long C string literal in a Cython-generated C file from the msgpack package. Generators like Cython emit binary constant tables this way. The byte run looks random, which is expected for compressed or binary constant data, and the snippet shows no decoding or execution. The raw pass has a high false-positive rate, so this is most likely a benign generated artifact.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:1457 new in this release

10 consecutive `\NNN` octal escapes (entropy 3.3 bits/byte) (raw pass, confidence 0.65)
```
000\222\201\214\0473\367\216\017\260_\272\035\005o\365\337\241\335\267\227\005\225\205\233b\303\314\216\301@\014\216=v\262tWG\266\315d\260\276\315\272\312\023\\\316%*_\376\336\312\233\336\035\364\013Q\310\347B.\310\254\272\226\0250\047\264\231e\021\0474c\204\361\251\300;\366 q\313\2623\340f-yk\222\271\272K\275@fF\224;d
```
likely benign LLM, confidence 0.75 A longer run of octal-escaped bytes within the same generated constant in msgpack's C source.
Reasoning
This is the same long generated byte-string literal as the other findings on this line, flagged for a longer run of octal escapes. Nothing in the snippet decodes, executes or reaches the network. The pattern matches a generated binary constant rather than a hand-written obfuscated payload.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:1541 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
05\233b\303\314\216\301@\014\216=v\262tWG\266\315d\260\276\315\272\312\023\\\316%*_\376\336\312\233\336\035\364\013Q\310\347B.\310\254\272\226\0250\047\264\231e\021\0474c\204\361\251\300;\366 q\313\2623\340f-yk\222\271\272K\275@fF\224;d\361\020\r\260\002*\204\023\003 \014\333\017q\202\3169x\216w\203]SCy(B\337A\265\017\
```
likely benign LLM, confidence 0.75 A segment of octal-escaped binary data inside the generated constant in msgpack's C extension.
Reasoning
This is another segment of the same generated C byte-string literal. The escapes are consistent with Cython emitting binary constant data. No executable logic is visible in the snippet, and the file context is a known third-party extension.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:1574 new in this release

8 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
v\262tWG\266\315d\260\276\315\272\312\023\\\316%*_\376\336\312\233\336\035\364\013Q\310\347B.\310\254\272\226\0250\047\264\231e\021\0474c\204\361\251\300;\366 q\313\2623\340f-yk\222\271\272K\275@fF\224;d\361\020\r\260\002*\204\023\003 \014\333\017q\202\3169x\216w\203]SCy(B\337A\265\017\270$0\307\254\007.1\354\016\355[\
```
likely benign LLM, confidence 0.75 Another stretch of octal-escaped binary bytes in the generated msgpack C literal.
Reasoning
The snippet is a further piece of the same generated binary constant. The escape density and entropy fit arbitrary binary data embedded by a code generator. The snippet shows no decoding or execution path.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:1861 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
270$0\307\254\007.1\354\016\355[\331\300\033\323|H\005\047\276\327\361\024^\t\003\304\234\272d\276[\267U\177q\010\004?f\201\312P@\311\336\000\030\261\340A\027.\351z\366\221\017s\241\274\016\223\212v\272E\224\367\353\365""\317B\356\031\376\225P\265lv\212n\205g\246\027t\371\2353\322\neN\325\363!{Q\377\213\311\343\353\320
```
likely benign LLM, confidence 0.75 Octal-escaped binary data continuing the generated constant in msgpack's C source.
Reasoning
This segment continues the same generated binary literal. Octal escapes of random-looking bytes are typical of Cython output for bytes constants. The snippet contains no executable or network behavior.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:1940 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
03\304\234\272d\276[\267U\177q\010\004?f\201\312P@\311\336\000\030\261\340A\027.\351z\366\221\017s\241\274\016\223\212v\272E\224\367\353\365""\317B\356\031\376\225P\265lv\212n\205g\246\027t\371\2353\322\neN\325\363!{Q\377\213\311\343\353\320\367w\373j\0378\034\036\001\335\001L\177-\202\016U\273\210\307\047\241z\342\242
```
likely benign LLM, confidence 0.75 A further octal-escaped binary run within the generated msgpack C literal.
Reasoning
Same generated byte-string literal, flagged on the escape density and entropy. The file is a known msgpack C extension built by Cython, and the snippet has no suspicious calls.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:2107 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
5lv\212n\205g\246\027t\371\2353\322\neN\325\363!{Q\377\213\311\343\353\320\367w\373j\0378\034\036\001\335\001L\177-\202\016U\273\210\307\047\241z\342\242,c\333\275\031\323\344\375\264M\026\226U\310%S\020\273Z\321\030R\310\327m\246\262\032\346{\214~ai\2311\266\016\241\037K&\026\016\030\276k\026e\000\347s,Qj\272\2757\343
```
likely benign LLM, confidence 0.75 Octal-escaped bytes in the generated msgpack C string constant.
Reasoning
This is the same generated binary constant. The escape runs are consistent with machine-generated byte data. No decoding, execution or process-spawning code is visible.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:2212 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
\001L\177-\202\016U\273\210\307\047\241z\342\242,c\333\275\031\323\344\375\264M\026\226U\310%S\020\273Z\321\030R\310\327m\246\262\032\346{\214~ai\2311\266\016\241\037K&\026\016\030\276k\026e\000\347s,Qj\272\2757\343%\210\353\231\202\215Ij\177V\341\031q-P\350\231\304\0264+\251-\261\3462\007.\246p\016;.\213\3469\024ry\34
```
likely benign LLM, confidence 0.80 A run of octal-escaped bytes inside msgpack's generated Cython C source, most likely an embedded binary constant.
Reasoning
Raw-pass octal-escape run inside a generated C file in the msgpack package. Long runs of high-entropy octal escapes are typical of Cython-emitted binary string constants (marshalled code or interned data), and the raw pass has a high false-positive rate. Nothing in the snippet shows execution or decoding, so this looks like a benign embedded binary literal rather than a dropper.
info ~~warn~~ → info by review embedded-nul-in-string msgpack/_cmsgpack.c:19870:2352 new in this release

string literal contains an embedded NUL followed by 1675 more bytes of source (token pass, confidence 0.85)
```
1\274\016\223\212v\272E\224\367\353\365""\317B\356\031\376\225P\265lv\212n\205g\246\027t\371\2353\322\neN\325\363!{Q\377\213\311\343\353\320\367w\373j\0378\034\036\001\335\001L\177-\202\016U\273\210\307\047\241z\342\242,c\333\275\031\323\344\375\264M\026\226U\310%S\020\273Z\321\030R\310\327m\246\262\032\346{\214~ai\231
```
likely benign LLM, confidence 0.70 A long C string literal with an embedded NUL, consistent with a generated binary constant in msgpack's C extension.
Reasoning
The token pass flags an embedded NUL followed by about 1675 bytes in one string literal. Generated C from Cython encodes binary constants as such literals, and embedded NULs are expected in binary tables. The surrounding snippet is the same generated data. Confidence is slightly lower because the token pass could in principle hide a payload, but nothing here shows that.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:2479 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)
```
0264+\251-\261\3462\007.\246p\016;.\213\3469\024ry\344\025\301\325\025\363\375b\2235\033\352:\350\303\337\016p\224\365-\024\346)s-\313`\r#\204\217\033r\033\237\355Y\324\360\351P\217\233\247pB\337H8\355\230\047\214\253\225\233\341\362X!rP\201\300\237\031\315fx\245H\205\200\365q\003\205*\034\313\205\353W\nhYP\013\230{\31
```
likely benign LLM, confidence 0.75 A final octal-escaped binary segment of the generated msgpack C literal.
Reasoning
This last segment is part of the same generated binary constant in msgpack's C source. The random-looking escapes are consistent with binary data from a code generator, and the snippet shows no executable or network behavior.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:2626 new in this release

9 consecutive `\NNN` octal escapes (entropy 3.2 bits/byte) (raw pass, confidence 0.65)
```
033r\033\237\355Y\324\360\351P\217\233\247pB\337H8\355\230\047\214\253\225\233\341\362X!rP\201\300\237\031\315fx\245H\205\200\365q\003\205*\034\313\205\353W\nhYP\013\230{\313\223\226-\002xU{\234Q9\340\266\047\352\205@\322P\t\323A@\r|-\237q|\340\000\232j\332\300\2346L\016\203\367\237\005\020\266\331\001\224\010\247\005&
```
likely benign LLM, confidence 0.80 Another octal-escaped byte run from the same generated msgpack C blob.
Reasoning
Same generated binary blob as the neighbouring findings in this file, with the same raw-pass signal and no execution, network or decoding calls visible. This is consistent with a Cython-emitted byte constant.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:2843 new in this release

13 consecutive `\NNN` octal escapes (entropy 3.5 bits/byte) (raw pass, confidence 0.65)
```
\322P\t\323A@\r|-\237q|\340\000\232j\332\300\2346L\016\203\367\237\005\020\266\331\001\224\010\247\005&\320A\222\206?\206c\225\363Q\376\260L\365g?h\014\264\346\204\207\342\234\320\261\275\305\334\024\340\365\024\320\344Q\301\312\310\014Y\327!<C\023\020\314l9g\014\334\242\337\\\203\255\317\2270\330f\231\023\255e\347+N\2
```
likely benign LLM, confidence 0.80 Continuation of the embedded binary constant in msgpack's generated C file.
Reasoning
Continuation of the same high-entropy octal-escaped constant in generated code. The snippet contains only data bytes, with no call sites that would indicate a payload being run.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:2940 new in this release

18 consecutive `\NNN` octal escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
7\005&\320A\222\206?\206c\225\363Q\376\260L\365g?h\014\264\346\204\207\342\234\320\261\275\305\334\024\340\365\024\320\344Q\301\312\310\014Y\327!<C\023\020\314l9g\014\334\242\337\\\203\255\317\2270\330f\231\023\255e\347+N\271\220\360\373\212;\222\233t9\236\317V\230\0000\310\002\005\256P\235p]\364\2622XK\023uf\224\226g\
```
likely benign LLM, confidence 0.80 Longer octal-escape byte run within the same generated msgpack C constant.
Reasoning
Longer octal-escape run from the same generated constant, with entropy in the range typical of compressed or marshalled data. The snippet shows no code that consumes it.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:3209 new in this release

8 consecutive `\NNN` octal escapes (entropy 3.0 bits/byte) (raw pass, confidence 0.65)
```
0\310\002\005\256P\235p]\364\2622XK\023uf\224\226g\310\000\317\311\226\242\333\035`6\001=\301\273W\260>\207\370\031d\027\354j\032\031\000\022\262\224\220(A\220w\004\r\020\372Hr\220\005\036?b\203|\207\201J\234\205\202 q\361Rp6\373\001\232s\244e\336\2442\233\224\354\377\0010\240\351\010\232\342\032\373\206O\td\n\235u}AU\
```
likely benign LLM, confidence 0.80 Further octal-escaped data from the generated msgpack C file.
Reasoning
Same blob, same raw signal, no executable context in the snippet. Pattern matches Cython-generated binary data in a legitimate package.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:3284 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
333\035`6\001=\301\273W\260>\207\370\031d\027\354j\032\031\000\022\262\224\220(A\220w\004\r\020\372Hr\220\005\036?b\203|\207\201J\234\205\202 q\361Rp6\373\001\232s\244e\336\2442\233\224\354\377\0010\240\351\010\232\342\032\373\206O\td\n\235u}AU\250\354c\363\243Q\342\013\361Ui\262vexW\267\314b|\345WQk\274\365\315\353\24
```
likely benign LLM, confidence 0.80 Octal-escaped byte run from msgpack's generated C source.
Reasoning
Raw-pass encoding finding on a generated C data literal. The snippet is pure byte data with no surrounding execution primitives shown, consistent with benign embedded binary content.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:3432 new in this release

8 consecutive `\NNN` octal escapes (entropy 3.0 bits/byte) (raw pass, confidence 0.65)
```
p6\373\001\232s\244e\336\2442\233\224\354\377\0010\240\351\010\232\342\032\373\206O\td\n\235u}AU\250\354c\363\243Q\342\013\361Ui\262vexW\267\314b|\345WQk\274\365\315\353\247\257{\257\232\323re\370$jL\312W\207\237\r\351\360X?\325\275IeC\3776jF\255I\371\243\250\024U\243\233\021\213\037%\317\322RZ\235\224\341tD#\025o\047\
```
likely benign LLM, confidence 0.80 Another segment of the embedded binary constant in msgpack's generated C file.
Reasoning
Continuation of the same generated binary literal. Nothing in the snippet indicates decoding into executable code or a network action.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:3535 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
4c\363\243Q\342\013\361Ui\262vexW\267\314b|\345WQk\274\365\315\353\247\257{\257\232\323re\370$jL\312W\207\237\r\351\360X?\325\275IeC\3776jF\255I\371\243\250\024U\243\233\021\213\037%\317\322RZ\235\224\341tD#\025o\047\227\022;\255\2465<\373`\210\247\306\033w\223F\262\223\276\227~>\332\034=;-M*\353\372=\375\010<U~\252\03
```
likely benign LLM, confidence 0.80 Octal-escaped binary data from the msgpack generated C source.
Reasoning
Same generated data blob flagged by the raw pass. The entropy and escape pattern fit compiled or marshalled constants rather than hand-written obfuscated logic.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:3833 new in this release

10 consecutive `\NNN` octal escapes (entropy 3.3 bits/byte) (raw pass, confidence 0.65)
```
372=\375\010<U~\252\033K\267m\353\237\350\332\302M\253\222\371\335\215\377\327\025\277\210jQ#\332\211/\306\255w\270\342\315\245\013\227?\310.\271\214\316nj\027\334=\217k\323\271\341\007\350\257\201\332\337A\265z\357\350}}|\375vRJ6\241\346\227Rg\364""\311\250\005\362\362\205\313\225\334\311\242S\245\377\030=\216\026\233
```
likely benign LLM, confidence 0.80 Octal-escaped byte sequence within msgpack's generated C code.
Reasoning
Raw-pass octal run inside the generated msgpack extension source. The snippet has no dynamic execution or process-spawning context, so it reads as a data literal.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:3894 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
1\335\215\377\327\025\277\210jQ#\332\211/\306\255w\270\342\315\245\013\227?\310.\271\214\316nj\027\334=\217k\323\271\341\007\350\257\201\332\337A\265z\357\350}}|\375vRJ6\241\346\227Rg\364""\311\250\005\362\362\205\313\225\334\311\242S\245\377\030=\216\026\233\006n\364Nt%\376u\274\223\\M!\312k\343k\237\306\275d-\331M7\3
```
likely benign LLM, confidence 0.80 Trailing octal-escaped data from the generated msgpack C file.
Reasoning
Final segment of the same generated binary constant. No call or loader in the snippet ties it to execution, and the file is a known msgpack build artifact.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:3952 new in this release

9 consecutive `\NNN` octal escapes (entropy 3.2 bits/byte) (raw pass, confidence 0.65)
```
\315\245\013\227?\310.\271\214\316nj\027\334=\217k\323\271\341\007\350\257\201\332\337A\265z\357\350}}|\375vRJ6\241\346\227Rg\364""\311\250\005\362\362\205\313\225\334\311\242S\245\377\030=\216\026\233\006n\364Nt%\376u\274\223\\M!\312k\343k\237\306\275d-\331M7\322\007\351\367\247\320\263\312\360\233\250\212\036>\327\03
```
likely benign LLM, confidence 0.70 A long run of octal byte escapes in a string literal of the msgpack C extension, most likely embedded binary test or table data.
Reasoning
This is a raw-pass hit on a run of octal escapes inside a C string literal in a bundled C source file of the msgpack library. The byte run looks like test data or a serialized blob rather than executable payload. The pass has a high false-positive rate, and nothing in the snippet shows decoding, execution, or network access. The snippet is short, so an embedded payload can't be fully ruled out, which keeps confidence below 0.9.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:4033 new in this release

11 consecutive `\NNN` octal escapes (entropy 3.1 bits/byte) (raw pass, confidence 0.65)
```
2\337A\265z\357\350}}|\375vRJ6\241\346\227Rg\364""\311\250\005\362\362\205\313\225\334\311\242S\245\377\030=\216\026\233\006n\364Nt%\376u\274\223\\M!\312k\343k\237\306\275d-\331M7\322\007\351\367\247\320\263\312\360\233\250\212\036>\327\033\372!\224\331\211\357&\177K\233\030\305\003\3752\276\021\323\370$9H!\276M\375X\3
```
likely benign LLM, confidence 0.85 A long run of octal-escaped binary bytes in a C string literal of the msgpack Cython extension.
Reasoning
Raw-pass octal-escape run inside a long C string literal in a Cython-generated extension source. Cython embeds binary constant data (marshalled code or bytes) this way, and the high-entropy run is consistent with that. Raw findings have a high false-positive rate and nothing here shows execution or decoding.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:4162 new in this release

13 consecutive `\NNN` octal escapes (entropy 3.7 bits/byte) (raw pass, confidence 0.65)
```
Nt%\376u\274\223\\M!\312k\343k\237\306\275d-\331M7\322\007\351\367\247\320\263\312\360\233\250\212\036>\327\033\372!\224\331\211\357&\177K\233\030\305\003\3752\276\021\323\370$9H!\276M\375X\367\242\022\234\031W\266\":)_\037\002r\336\\\2018\207/\241E5\330T\212\222T\206\217Q\232\311\326!\274\306|\371\005T\273\t\333k\313\
```
likely benign LLM, confidence 0.85 Continuation of the same octal-escaped binary data literal in the msgpack C extension.
Reasoning
Same contiguous binary-looking octal-escape literal as the other findings in this file, consistent with embedded constant data in generated C. No decoding or execution is visible in the snippet.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:4471 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
t\333k\313\251L\326\253\2305\212\276\217>\215\253(\256\307\245\311\346\215i\371\227\220\323?\222jr;\255\245\333\243\322\250j\212\276\256\257A\005\302\2709\255\240\001 2\363\272x\311z\021\322\365\241\3245\335\370A\220a\350\241n\242\373K\232\342 \314\026?\266}\343\013[\343\255\207)X\2221\271?\276\337<\255\"\026*\367\022\
```
likely benign LLM, confidence 0.85 Another segment of the escaped binary constant in the msgpack C extension.
Reasoning
Part of the same contiguous escaped byte blob in generated Cython C source. Raw-pass signal on a binary constant in a known library extension, with no call sites shown that run it.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:4520 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
(\256\307\245\311\346\215i\371\227\220\323?\222jr;\255\245\333\243\322\250j\212\276\256\257A\005\302\2709\255\240\001 2\363\272x\311z\021\322\365\241\3245\335\370A\220a\350\241n\242\373K\232\342 \314\026?\266}\343\013[\343\255\207)X\2221\271?\276\337<\255\"\026*\367\022\203\211\205\357\233\255\013\027?\216j\320\325\213
```
likely benign LLM, confidence 0.85 Overlapping segment of the same escaped binary string literal in the msgpack extension.
Reasoning
Overlapping window of the same escaped binary literal. The pattern is the generated-constant-data shape typical of Cython output, not a dropper.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:4732 new in this release

10 consecutive `\NNN` octal escapes (entropy 3.3 bits/byte) (raw pass, confidence 0.65)
```
3\013[\343\255\207)X\2221\271?\276\337<\255\"\026*\367\022\203\211\205\357\233\255\013\027?\216j\320\325\213\037\352\326t\r\322\230\256\275\377\352?\272\215aA\205\247k\030\333Gq5\376\r@\341FB\223\036\032\374\023\272\003\361|\250\351de\367o\275\217=\205sK\272v\364\024\360\261d=]\2738)\257\353\222\256\352[\372_\343\233\0
```
likely benign LLM, confidence 0.85 Further escaped binary bytes within the msgpack Cython-generated string constant.
Reasoning
Same escaped byte run inside the generated C string literal. The file is a msgpack Cython build artifact, and the raw octal-escape signal alone does not indicate malicious intent.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:4778 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
026*\367\022\203\211\205\357\233\255\013\027?\216j\320\325\213\037\352\326t\r\322\230\256\275\377\352?\272\215aA\205\247k\030\333Gq5\376\r@\341FB\223\036\032\374\023\272\003\361|\250\351de\367o\275\217=\205sK\272v\364\024\360\261d=]\2738)\257\353\222\256\352[\372_\343\233\017\r(\252\037G\333\361\325\361\335?\215\032\22
```
likely benign LLM, confidence 0.85 Continuation of the escaped binary constant in the msgpack C extension.
Reasoning
Continuation of the same generated binary literal. No code that decodes or executes it is shown, and the context matches Cython's embedded constant data.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:4805 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
7\233\255\013\027?\216j\320\325\213\037\352\326t\r\322\230\256\275\377\352?\272\215aA\205\247k\030\333Gq5\376\r@\341FB\223\036\032\374\023\272\003\361|\250\351de\367o\275\217=\205sK\272v\364\024\360\261d=]\2738)\257\353\222\256\352[\372_\343\233\017\r(\252\037G\333\361\325\361\335?\215\032\223\352V\324I\276\032\335;\35
```
likely benign LLM, confidence 0.85 Overlapping segment of the escaped binary literal in the msgpack extension source.
Reasoning
Overlapping window of the same escaped byte blob. The pattern is consistent with generated constant data in a known library's C source.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:4873 new in this release

8 consecutive `\NNN` octal escapes (entropy 3.0 bits/byte) (raw pass, confidence 0.65)
```
77\352?\272\215aA\205\247k\030\333Gq5\376\r@\341FB\223\036\032\374\023\272\003\361|\250\351de\367o\275\217=\205sK\272v\364\024\360\261d=]\2738)\257\353\222\256\352[\372_\343\233\017\r(\252\037G\333\361\325\361\335?\215\032\223\352V\324I\276\032\335;\355\031\374l!\340`N\236\047w\322\006\240\304\024D\232R\2167n\306\315\2
```
likely benign LLM, confidence 0.85 Further escaped binary constant bytes in the msgpack Cython-generated C file.
Reasoning
Same contiguous escaped binary data in generated C. The raw pass flags entropy and escape density, which is expected for embedded binary constants.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:5159 new in this release

8 consecutive `\NNN` octal escapes (entropy 3.0 bits/byte) (raw pass, confidence 0.65)
```
\240\304\024D\232R\2167n\306\315\270\025\323I\345:\224\377\017\272\005\315\254\376L{x`|\353\317#:\222\247\265\323\355\327\357\277\356\215\367\262:M\313\233\272\251[\020v\336\201\032\346\246\220\203\340\272\341w(\233@\373\366u\025\367tq=\315\014\306?\377bT\372/a\267\032\230";
```
likely benign LLM, confidence 0.85 Another section of the escaped binary data literal in the msgpack C extension.
Reasoning
Part of the same generated binary literal. The snippet shows only data bytes with no execution, network or process behavior, and the file belongs to a known library.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:5206 new in this release

12 consecutive `\NNN` octal escapes (entropy 3.6 bits/byte) (raw pass, confidence 0.65)
```
45:\224\377\017\272\005\315\254\376L{x`|\353\317#:\222\247\265\323\355\327\357\277\356\215\367\262:M\313\233\272\251[\020v\336\201\032\346\246\220\203\340\272\341w(\233@\373\366u\025\367tq=\315\014\306?\377bT\372/a\267\032\230";
```
likely benign LLM, confidence 0.85 Escaped binary data continuing inside the msgpack Cython C string literal.
Reasoning
Same contiguous escaped byte run in generated Cython output. Nothing in the snippet suggests obfuscated logic rather than embedded constant data.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19870:5278 new in this release

10 consecutive `\NNN` octal escapes (entropy 3.3 bits/byte) (raw pass, confidence 0.65)
```
27\357\277\356\215\367\262:M\313\233\272\251[\020v\336\201\032\346\246\220\203\340\272\341w(\233@\373\366u\025\367tq=\315\014\306?\377bT\372/a\267\032\230";
```
likely benign LLM, confidence 0.85 Final segment of the escaped binary string constant in the msgpack C extension.
Reasoning
Tail of the same embedded binary literal. The raw signal reflects the byte content of generated constant data in a legitimate msgpack extension, not malicious code.
info ~~warn~~ → info by review embedded-nul-in-string msgpack/_cmsgpack.c:19879:142 new in this release

string literal contains an embedded NUL followed by 1886 more bytes of source (token pass, confidence 0.85)
```
static const char cstring[] = "\377(tree fr\377agment).\377?Cannot \377decode e\377xtended \377type wit\271h\005\002\030\001=%d%\004s\376\025\000ch unpa\377cking me\377thods wh\377ile an o\377bject is\377 incompl\377eteEXT d\367ata\022\001too \377largeExi\373st?\001expor\337ts of \002: \275PY\000er c\231\003b\377e chan
```
likely benign LLM, confidence 0.88 A large embedded-bytes C string literal in msgpack's Cython-generated extension source, holding marshalled Python constants and docstrings.
Reasoning
The string is a long C literal of binary-looking bytes with octal escapes, and the readable fragments are Cython/msgpack text such as 'Cannot decode extended type', '__init__()', 'reduce__' and 'ExtType'. That matches Cython embedding marshalled constants for a compiled .pyx module, a standard build artifact. The embedded NUL is a byte-encoding side effect, not a dropper or hidden payload.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:471 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
00all\337ocate\222\000te\377rnal buf7fer\030\010en\222\002\017\020\356\350\001 fa\336\000d: \377error = \343Un\n\n\343\007\365\000put\360\031\003\270\013\202\000\334 recu\177rsively\257$\374\304\047\261\" progr\367ess<\005.__i\177nit__()\211)xI\003\363#\"\036feed\0048\377read_byt\333esR/`f\230`_l\357ike.C\001` m\257ust
```
likely benign LLM, confidence 0.88 Octal-escaped bytes inside a generated msgpack C string constant containing readable Python identifiers.
Reasoning
Raw-pass octal escapes inside the same Cython-generated constant blob. The decoded text is readable msgpack identifiers and error messages, and the raw pass has a high false-positive rate. No execution or decoding logic is visible in the snippet.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:554 new in this release

8 consecutive `\NNN` octal escapes (entropy 3.0 bits/byte) (raw pass, confidence 0.65)
```
36\000d: \377error = \343Un\n\n\343\007\365\000put\360\031\003\270\013\202\000\334 recu\177rsively\257$\374\304\047\261\" progr\367ess<\005.__i\177nit__()\211)xI\003\363#\"\036feed\0048\377read_byt\333esR/`f\230`_l\357ike.C\001` m\257ust \324@a\340@l\375l\237A.array\337 size\025\006no\177n-negat\250 \360\031\003\262f\2
```
likely benign LLM, confidence 0.88 Another run of octal escapes in the msgpack Cython constant blob, with readable msgpack text between the bytes.
Reasoning
Same generated marshal-style constant as the neighbouring findings. The escapes encode binary framing around readable names like 'array size', 'non-negative' and 'read_bytes', which is typical of compiled Python constant data.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:1062 new in this release

9 consecutive `\NNN` octal escapes (entropy 2.9 bits/byte) (raw pass, confidence 0.65)
```
d\256bisY\003\037dlist\374\204\n\r\001G\026\207map\375\027\031\001\307\205\006\004\006e\376\332\205\001memoryvwiew\350\205\nmsg\266\206\001\377.excepti\327ons\010\007t\026\004/_~\331\206\001er.pyx\n\006\334\354\206\003\017\003no \326%__\377reduce__\317 due\203!\263Atr\377ivial __\341c\263\204\003\217\207\003\2546\030\0
```
likely benign LLM, confidence 0.88 Octal-escaped byte run in the generated msgpack constant blob, interleaved with msgpack and Cython identifiers.
Reasoning
Within the same generated constant data. The readable parts are msgpack/Cython names like 'memoryview', 'exceptions', 'reduce' and '_pyx' paths, consistent with embedded compiled-module constants rather than obfuscated malicious code.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:1210 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)
```
pti\327ons\010\007t\026\004/_~\331\206\001er.pyx\n\006\334\354\206\003\017\003no \326%__\377reduce__\317 due\203!\263Atr\377ivial __\341c\263\204\003\217\207\003\2546\030\004pai{rs\344#and )\t\373ar\225atuall[y \272\000lu\276\205\001.\047\017\370\311p\267\204\002\326bshoul\375d\367aless o\317r eqP\000\272Ama\313x_\215\
```
likely benign LLM, confidence 0.88 Octal escapes in the msgpack generated constant data, next to msgpack-specific identifiers and comments.
Reasoning
Same generated Cython constant blob. The visible text ('reduce__', 'trivial', 'limited', 'FullExtType') is msgpack-specific documentation and identifiers, so this is ordinary serialized constant data.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:1297 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)
```
_\377reduce__\317 due\203!\263Atr\377ivial __\341c\263\204\003\217\207\003\2546\030\004pai{rs\344#and )\t\373ar\225atuall[y \272\000lu\276\205\001.\047\017\370\311p\267\204\002\326bshoul\375d\367aless o\317r eqP\000\272Ama\313x_\215\207\003_\202\204\001\236\206\004on\277 limito\001e\377eded.sel\337f.ctx\222\210\ton\357
```
likely benign LLM, confidence 0.88 A run of octal-escaped bytes in the msgpack generated constant data, with readable documentation strings.
Reasoning
Same generated constant blob with readable msgpack documentation text. Nothing in the snippet decodes or executes a payload; the octal runs are binary framing of string constants.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:1488 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
\367aless o\317r eqP\000\272Ama\313x_\215\207\003_\202\204\001\236\206\004on\277 limito\001e\377eded.sel\337f.ctx\222\210\ton\357vert\266\211\001o a\277 Pytho\377\210\006f\377or pickl\377ingtimes\357tamp\371\204\0060..\2573uni\373\211\002s\263 nqg\226\211\n\354&\267\206\004is \255\212\001\314\267\205\001\321\210\004us\
```
likely benign LLM, confidence 0.88 Octal escapes in the generated msgpack constant blob, with readable docstring fragments.
Reasoning
Same generated constant data. The readable fragments ('timestamp', 'pickling', 'unions', 'limited') are msgpack docstrings, which fits compiled-module constants rather than hidden instructions.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:1715 new in this release

10 consecutive `\NNN` octal escapes (entropy 3.1 bits/byte) (raw pass, confidence 0.65)
```
373\211\002s\263 nqg\226\211\n\354&\267\206\004is \255\212\001\314\267\205\001\321\210\004us\244\212\004\333\205\007`.\375B\326\210\002FullEx\337tType\004\000ra\377DataForm\367atE\277\210\001OutOQf\020\001\350\211\003\356\211\003.\307Fc\301\002\273__\017\006set\271\000t\343e_\013\014\220\207\0027\004get\320\321\211\003
```
likely benign LLM, confidence 0.88 Octal-escaped byte run in the msgpack generated constant blob, with msgpack API identifiers in the readable text.
Reasoning
Same generated constant data. The visible text ('FullExtType', 'DataFormat', 'OutOfData', 'get', 'set') matches msgpack's API names, so this is ordinary embedded constant data.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:1757 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
6\004is \255\212\001\314\267\205\001\321\210\004us\244\212\004\333\205\007`.\375B\326\210\002FullEx\337tType\004\000ra\377DataForm\367atE\277\210\001OutOQf\020\001\350\211\003\356\211\003.\307Fc\301\002\273__\017\006set\271\000t\343e_\013\014\220\207\0027\004get\320\321\211\003G\004\241\213\001\000\010_\341\206\002_h\0
```
likely benign LLM, confidence 0.88 Octal escapes in the msgpack generated constant blob, next to msgpack API identifiers.
Reasoning
Same generated constant data with msgpack API names visible. No decoding or execution logic appears in the snippet, and the escapes look like binary framing of string constants.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:1862 new in this release

8 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)
```
ype\004\000ra\377DataForm\367atE\277\210\001OutOQf\020\001\350\211\003\356\211\003.\307Fc\301\002\273__\017\006set\271\000t\343e_\013\014\220\207\0027\004get\320\321\211\003G\004\241\213\001\000\010_\341\206\002_h\037ead""er\014\t\335\205\001\362\213\001\016 \tmap\027\020\022\001\242b\251\004\373re\225\000Stack\002\320
```
likely benign LLM, confidence 0.88 A run of octal escapes in the msgpack generated constant blob, with readable msgpack identifiers.
Reasoning
Same generated constant data, with readable msgpack names like 'header', 'map' and 'Stack' between the escapes. This is consistent with embedded marshalled Python constants in a Cython-built extension.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:1986 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
343e_\013\014\220\207\0027\004get\320\321\211\003G\004\241\213\001\000\010_\341\206\002_h\037ead""er\014\t\335\205\001\362\213\001\016 \tmap\027\020\022\001\242b\251\004\373re\225\000Stack\002\320\002T\332%\367\211\005\270\211\010\242\204\004\321\005\322\211\010\000\312\016\360\211\006\262\211\001\375\211\006\377\210\0
```
likely benign LLM, confidence 0.72 Octal-escaped binary blob inside a large string literal in a generated C source file.
Reasoning
A long string literal of octal escapes in a generated C file reads like marshalled Python bytecode or Cython constants. The text fragments (_PyDict, _NextRef, asyncio, traceback, items) look like embedded module-level names, not a payload being decoded and run. Octal-escaped binary blobs are common in Cython output, so this is most likely a legitimate generated constant. Raw-pass findings have a higher false-positive rate.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:2042 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)
```
41\213\001\000\010_\341\206\002_h\037ead""er\014\t\335\205\001\362\213\001\016 \tmap\027\020\022\001\242b\251\004\373re\225\000Stack\002\320\002T\332%\367\211\005\270\211\010\242\204\004\321\005\322\211\010\000\312\016\360\211\006\262\211\001\375\211\006\377\210\002\267\t\014\013\231\211\002x\037\013\272\007\302\212\00
```
likely benign LLM, confidence 0.72 Another octal-escaped segment of the same embedded binary constant in the generated C file.
Reasoning
Same literal as the neighbouring finding, a run of binary-looking octal escapes that matches generated marshalled constants. Nothing in the snippet shows decoding, execution or network activity, so the verdict matches the surrounding blob.
info ~~warn~~ → info by review embedded-nul-in-string msgpack/_cmsgpack.c:19879:2115 new in this release

string literal contains an embedded NUL followed by 1914 more bytes of source (token pass, confidence 0.85)
```
1\213\001\000\010_\341\206\002_h\037ead""er\014\t\335\205\001\362\213\001\016 \tmap\027\020\022\001\242b\251\004\373re\225\000Stack\002\320\002T\332%\367\211\005\270\211\010\242\204\004\321\005\322\211\010\000\312\016\360\211\006\262\211\001\375\211\006\377\210\002\267\t\014\013\231\211\002x\037\013\272\007\302\212\006
```
likely benign LLM, confidence 0.70 String literal with an embedded NUL byte, part of the generated binary constant.
Reasoning
An embedded NUL inside a long string literal is expected in serialized binary data such as marshalled code objects, and it is consistent with the same generated blob. The token pass flags it, but the snippet alone does not show any obfuscated identifier construction or malicious use.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:2142 new in this release

30 consecutive `\NNN` octal escapes (entropy 4.2 bits/byte) (raw pass, confidence 0.65)
```
\242b\251\004\373re\225\000Stack\002\320\002T\332%\367\211\005\270\211\010\242\204\004\321\005\322\211\010\000\312\016\360\211\006\262\211\001\375\211\006\377\210\002\267\t\014\013\231\211\002x\037\013\272\007\302\212\006skip\317\212\006\217tell\334\212\006\316\215\003\357 y\377x_PyDict\377_NextRef\353__\244\216\002a\3
```
likely benign LLM, confidence 0.70 Longer run of octal escapes within the embedded binary constant.
Reasoning
A 30-escape run with higher entropy fits serialized binary data embedded as a C literal. The visible tokens are names and bytes rather than a payload stage, so this reads as generated constant data, though the blob cannot be fully decoded from the snippet.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:2285 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
375\211\006\377\210\002\267\t\014\013\231\211\002x\037\013\272\007\302\212\006skip\317\212\006\217tell\334\212\006\316\215\003\357 y\377x_PyDict\377_NextRef\353__\244\216\002a\372 ___ofunc\004\000_g\211E\336\021\000main\020\001mo\357dule\032\001nam\322\003\002pK\000\262C_\007\001vt\200\216\215\001;\001\365\204\001\035\
```
likely benign LLM, confidence 0.72 Octal-escaped binary segment in the generated C string literal.
Reasoning
Octal-escape segment of the same generated binary literal, containing names like __NextRef and module. Consistent with serialized constants and without any sign of runtime decoding or execution.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:2337 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
37\013\272\007\302\212\006skip\317\212\006\217tell\334\212\006\316\215\003\357 y\377x_PyDict\377_NextRef\353__\244\216\002a\372 ___ofunc\004\000_g\211E\336\021\000main\020\001mo\357dule\032\001nam\322\003\002pK\000\262C_\007\001vt\200\216\215\001;\001\365\204\001\035\005\274\206\005\355N\326\206\006e)xo\001\201`_Q\005s
```
likely benign LLM, confidence 0.72 Octal-escaped binary segment within the same generated string constant.
Reasoning
Continuation of the same marshalled-looking literal. Its contents are identifiers and binary bytes, which matches Cython-embedded constants, and no execution path is visible.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:2534 new in this release

10 consecutive `\NNN` octal escapes (entropy 2.9 bits/byte) (raw pass, confidence 0.65)
```
322\003\002pK\000\262C_\007\001vt\200\216\215\001;\001\365\204\001\035\005\274\206\005\355N\326\206\006e)xo\001\201`_Q\005st\010\213n\277__test\252\000i\377s_corout\377ineasync\367io.\010\006saut\375o\275Bbufbuf\217_len\003\001\203\213\001\347\213\002c_errcl8\000_\334\000\377tracebac\275k\252\220\001ctxd\316\217\001dGa
```
likely benign LLM, confidence 0.72 Octal-escaped binary segment including embedded identifier-like text.
Reasoning
Same generated literal, with identifiers such as __test, corout and traceback mixed into binary bytes. This fits serialized Python constants and does not show a dropper or runtime decode.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:2703 new in this release

8 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)
```
neasync\367io.\010\006saut\375o\275Bbufbuf\217_len\003\001\203\213\001\347\213\002c_errcl8\000_\334\000\377tracebac\275k\252\220\001ctxd\316\217\001dGate\323\205\001\347\212\004\356\212\004_\252\214\002\002\311\220\005_\315\220\001\347\210\007\344\220\001\312\212\004\221\215\001\224\214\006~\264\204\006itemsk\215\212\0
```
likely benign LLM, confidence 0.72 Octal-escaped binary segment of the generated literal.
Reasoning
Another segment of the generated binary constant. The fragments resemble names and marshal opcodes, consistent with a legitimate embedded blob in a compiled extension source.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:2806 new in this release

9 consecutive `\NNN` octal escapes (entropy 2.7 bits/byte) (raw pass, confidence 0.65)
```
\377tracebac\275k\252\220\001ctxd\316\217\001dGate\323\205\001\347\212\004\356\212\004_\252\214\002\002\311\220\005_\315\220\001\347\210\007\344\220\001\312\212\004\221\215\001\224\214\006~\264\204\006itemsk\215\212\006\000\226\207\001\263\204\003\234\000\242\207\002\351 \003\005\300\217\002\255\207\002\340\275\207\001
```
likely benign LLM, confidence 0.72 Octal-escaped binary segment of the generated C string literal.
Reasoning
Same embedded literal of binary bytes and identifiers, with no visible decoding, execution or network use in the snippet. Consistent with generated constant data.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:2843 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)
```
\217\001dGate\323\205\001\347\212\004\356\212\004_\252\214\002\002\311\220\005_\315\220\001\347\210\007\344\220\001\312\212\004\221\215\001\224\214\006~\264\204\006itemsk\215\212\006\000\226\207\001\263\204\003\234\000\242\207\002\351 \003\005\300\217\002\255\207\002\340\275\207\001\245\213\001\036\004\273\204\001)\004
```
likely benign LLM, confidence 0.72 Final octal-escaped segment of the embedded binary constant.
Reasoning
Last octal segment of the same literal. It matches the pattern of serialized constants in a generated extension source, with nothing in the snippet indicating malicious behaviour.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:2872 new in this release

18 consecutive `\NNN` octal escapes (entropy 3.8 bits/byte) (raw pass, confidence 0.65)
```
\212\004\356\212\004_\252\214\002\002\311\220\005_\315\220\001\347\210\007\344\220\001\312\212\004\221\215\001\224\214\006~\264\204\006itemsk\215\212\006\000\226\207\001\263\204\003\234\000\242\207\002\351 \003\005\300\217\002\255\207\002\340\275\207\001\245\213\001\036\004\273\204\001)\004str\354\326\001\363\211\005_c
```
likely benign LLM, confidence 0.88 Embedded binary constant data in a generated msgpack C extension source, containing a serialized blob of Python-related names.
Reasoning
The snippet is a run of octal byte escapes in a generated C source file. The surrounding text (names like items, seconds, nanoseconds, zone, singledispatch, and a Python-like code layout) indicates an embedded marshalled or serialized constant blob, a common pattern in Cython-generated C. This is a raw-pass pattern with a high false-positive rate and no execution or network signal.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:2963 new in this release

16 consecutive `\NNN` octal escapes (entropy 3.8 bits/byte) (raw pass, confidence 0.65)
```
212\004\221\215\001\224\214\006~\264\204\006itemsk\215\212\006\000\226\207\001\263\204\003\234\000\242\207\002\351 \003\005\300\217\002\255\207\002\340\275\207\001\245\213\001\036\004\273\204\001)\004str\354\326\001\363\211\005_c\376\211\004nan\377oseconds\305n\326\215\002n\345\213\001\004\003\354\215\001ob9j\255\211\0
```
likely benign LLM, confidence 0.88 Continuation of the same embedded serialized constant blob in the generated C source.
Reasoning
This is a contiguous continuation of the same octal-escaped embedded blob as the other findings in this file. It contains only data bytes and identifier-like strings, with no decoding or execution logic visible.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:3028 new in this release

20 consecutive `\NNN` octal escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
0\226\207\001\263\204\003\234\000\242\207\002\351 \003\005\300\217\002\255\207\002\340\275\207\001\245\213\001\036\004\273\204\001)\004str\354\326\001\363\211\005_c\376\211\004nan\377oseconds\305n\326\215\002n\345\213\001\004\003\354\215\001ob9j\255\211\010\223\211\016off\201\222\001\205\222\001\000\314\205\n\014\002\3
```
likely benign LLM, confidence 0.88 Another segment of the embedded serialized constant data in the generated C file.
Reasoning
The snippet is a further segment of the same generated byte-string constant. Its content is structured serialized data with recognizable Python identifiers, consistent with compiled Cython or marshal output rather than hidden malicious logic.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:3116 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
75\207\001\245\213\001\036\004\273\204\001)\004str\354\326\001\363\211\005_c\376\211\004nan\377oseconds\305n\326\215\002n\345\213\001\004\003\354\215\001ob9j\255\211\010\223\211\016off\201\222\001\205\222\001\000\314\205\n\014\002\312\205\005\031\002\301\205\007\006\006\346\211\002\342\212\002\275d\005\003oppy\217\221\
```
likely benign LLM, confidence 0.87 Part of the same embedded generated byte literal, with lower entropy and identifier-like fragments.
Reasoning
This is the same contiguous generated byte-literal region. Its lower entropy and string-like fragments (off, oppy, ret, key) fit serialized metadata, not obfuscated code.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:3187 new in this release

8 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
005_c\376\211\004nan\377oseconds\305n\326\215\002n\345\213\001\004\003\354\215\001ob9j\255\211\010\223\211\016off\201\222\001\205\222\001\000\314\205\n\014\002\312\205\005\031\002\301\205\007\006\006\346\211\002\342\212\002\275d\005\003oppy\217\221\001r\003aw\350\216\001\333\204\016\367\216\007\206\217\002\224\206\007\
```
likely benign LLM, confidence 0.87 Segment of the generated embedded serialized data within the msgpack C extension.
Reasoning
The finding sits inside the same generated embedded data blob. The content is consistent with serialized Python names and small integer opcodes typical of marshalled data.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:3250 new in this release

9 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)
```
004\003\354\215\001ob9j\255\211\010\223\211\016off\201\222\001\205\222\001\000\314\205\n\014\002\312\205\005\031\002\301\205\007\006\006\346\211\002\342\212\002\275d\005\003oppy\217\221\001r\003aw\350\216\001\333\204\016\367\216\007\206\217\002\224\206\007\325\211\006\316\206\206\002ret\314\004\245\211\001se\341t\200\2
```
likely benign LLM, confidence 0.87 Another slice of the embedded serialized constant in the generated C source.
Reasoning
This is another piece of the same contiguous generated blob. The raw-pass octal-escape signal fires on ordinary binary constant encoding and nothing in the snippet is executable or networked.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:3288 new in this release

19 consecutive `\NNN` octal escapes (entropy 3.6 bits/byte) (raw pass, confidence 0.65)
```
3\211\016off\201\222\001\205\222\001\000\314\205\n\014\002\312\205\005\031\002\301\205\007\006\006\346\211\002\342\212\002\275d\005\003oppy\217\221\001r\003aw\350\216\001\333\204\016\367\216\007\206\217\002\224\206\007\325\211\006\316\206\206\002ret\314\004\245\211\001se\341t\200\216\004\326\216\001\367\204\001\341\210
```
likely benign LLM, confidence 0.87 Continuation of the embedded generated byte literal in the msgpack C extension.
Reasoning
The snippet continues the generated byte literal with mixed identifiers and opcode-like bytes. This matches compiled or marshalled Python data embedded by the code generator, not malicious payload handling.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:3396 new in this release

22 consecutive `\NNN` octal escapes (entropy 3.8 bits/byte) (raw pass, confidence 0.65)
```
02\342\212\002\275d\005\003oppy\217\221\001r\003aw\350\216\001\333\204\016\367\216\007\206\217\002\224\206\007\325\211\006\316\206\206\002ret\314\004\245\211\001se\341t\200\216\004\326\216\001\367\204\001\341\210\001ct_N\331\206\001key\007\004\355\223\001s\210\205\001<\230\211\006\246\211\001zone\207\224\001\231\224\00
```
likely benign LLM, confidence 0.87 Segment of the generated embedded constant blob in the C extension source.
Reasoning
The snippet is part of the same generated constant data. The octal escapes encode ordinary binary and identifier content typical of embedded bytecode or serialized metadata.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:3514 new in this release

12 consecutive `\NNN` octal escapes (entropy 3.0 bits/byte) (raw pass, confidence 0.65)
```
\006\316\206\206\002ret\314\004\245\211\001se\341t\200\216\004\326\216\001\367\204\001\341\210\001ct_N\331\206\001key\007\004\355\223\001s\210\205\001<\230\211\006\246\211\001zone\207\224\001\231\224\001\312\235\211\004_\370\221\002s\370\223\003\376\223\003bu\357se_b\233aype\370\010\001\333\215\001\020\001singl\377e_fl
```
likely benign LLM, confidence 0.87 Further portion of the embedded generated data, containing Python-related identifiers.
Reasoning
This is the same contiguous generated blob continuing with identifier fragments (single, float, zone). Nothing indicates decoding into execution or a dropper; the signal reflects generated binary data encoding.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:3643 new in this release

10 consecutive `\NNN` octal escapes (entropy 2.9 bits/byte) (raw pass, confidence 0.65)
```
\223\001s\210\205\001<\230\211\006\246\211\001zone\207\224\001\231\224\001\312\235\211\004_\370\221\002s\370\223\003\376\223\003bu\357se_b\233aype\370\010\001\333\215\001\020\001singl\377e_floatu\327tcv\260\223\002s\215\215\001\200\001\177\330\004\n\210+\220Q\004\002\377\320\n\035\230Q\320\036M\377\310R\310q\200A\340\0
```
likely benign LLM, confidence 0.87 Final segment of the embedded generated byte literal in the msgpack C extension.
Reasoning
The final segment in this series is the same generated embedded constant data. The content is serialized identifiers and opcode-like bytes consistent with Cython-embedded marshal output, with no execution or network behaviour visible.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:3808 new in this release

8 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)
```
5\001\020\001singl\377e_floatu\327tcv\260\223\002s\215\215\001\200\001\177\330\004\n\210+\220Q\004\002\377\320\n\035\230Q\320\036M\377\310R\310q\200A\340\010\377\014\210O\2301\330\010\013\377\2103\210a\210v\220R\377\220q\330\014\022\220*\230\377A\230Q\330\010\030\230\001\377""\230\021\230$\230e\240:\377\250S\260\001\26
```
likely benign LLM, confidence 0.80 A long octal-escaped binary blob inside a C string literal, most likely the bundled Lua cmsgpack bytecode.
Reasoning
Raw-pass octal-escape run inside a large string literal in msgpack's vendored _cmsgpack.c. The escapes decode to a binary blob with Lua-bytecode-like fragments ('singl', 'e_float'), consistent with the embedded lua-cmsgpack library. This is a known shape of legitimate vendored binary data. The raw pass has a high false-positive rate, and nothing here runs or fetches anything by itself.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:4009 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
\210v\220R\377\220q\330\014\022\220*\230\377A\230Q\330\010\030\230\001\377""\230\021\230$\230e\240:\377\250S\260\001\260\021\330\010\376;\000\230a\230t\2405\250\177\006\250c\260\021\260!8\001\3734\2102\001\320\022+\2501\377\250D\260\003\2606\270\024\377\270S\300\001\330\014\020\220\367\003\220:G\000\014\023\2201\276a\n
```
likely benign LLM, confidence 0.80 Another segment of the same octal-escaped binary blob in the vendored C source.
Reasoning
Same contiguous binary literal as the other findings in this file, a continuation of the same embedded blob. Octal escapes in a compiled-bytecode string are expected and the snippet alone shows no execution or network behaviour.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:4067 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)
```
\030\230\001\377""\230\021\230$\230e\240:\377\250S\260\001\260\021\330\010\376;\000\230a\230t\2405\250\177\006\250c\260\021\260!8\001\3734\2102\001\320\022+\2501\377\250D\260\003\2606\270\024\377\270S\300\001\330\014\020\220\367\003\220:G\000\014\023\2201\276a\n5\220\002\220!_\010\013\351\210\002\rr\0071\013U\032\230!\
```
likely benign LLM, confidence 0.80 Further octal-escaped binary data from the same embedded literal.
Reasoning
Continuation of the same embedded binary literal. The entropy is moderate and the byte patterns match serialized bytecode rather than a payload that decodes and executes at runtime, as far as the snippet shows.
info ~~warn~~ → info by review embedded-nul-in-string msgpack/_cmsgpack.c:19879:4096 new in this release

string literal contains an embedded NUL followed by 1931 more bytes of source (token pass, confidence 0.85)
```
*\230\377A\230Q\330\010\030\230\001\377""\230\021\230$\230e\240:\377\250S\260\001\260\021\330\010\376;\000\230a\230t\2405\250\177\006\250c\260\021\260!8\001\3734\2102\001\320\022+\2501\377\250D\260\003\2606\270\024\377\270S\300\001\330\014\020\220\367\003\220:G\000\014\023\2201\276a\n5\220\002\220!_\010\013\351\210\002
```
likely benign LLM, confidence 0.75 A string literal containing NUL bytes, consistent with the same embedded binary blob.
Reasoning
The token pass flags an embedded NUL in a string literal. This is expected for a binary blob such as serialized Lua bytecode, where \0 bytes are normal. It is not a string-construction trick targeting a sensitive identifier.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:4217 new in this release

9 consecutive `\NNN` octal escapes (entropy 2.9 bits/byte) (raw pass, confidence 0.65)
```
0\022+\2501\377\250D\260\003\2606\270\024\377\270S\300\001\330\014\020\220\367\003\220:G\000\014\023\2201\276a\n5\220\002\220!_\010\013\351\210\002\rr\0071\013U\032\230!\377\2301\230D\240\005\240Q\276\233\200(\360\006\000\t\r\260#\t\356\250!$\220f\253 U\240!U\340\345\007\r\316!1\306!,\253 \375q/,\020\320\017(\250\001\3
```
likely benign LLM, confidence 0.80 Continuation of the embedded binary blob with moderately higher entropy.
Reasoning
Same embedded binary literal, with slightly higher entropy. Nothing in the snippet indicates a dropper, decoding routine, or runtime execution inside the C source.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:4854 new in this release

10 consecutive `\NNN` octal escapes (entropy 2.9 bits/byte) (raw pass, confidence 0.65)
```
\025\240a\337\240w\250b\260\301@\024\220\377C\220q\230\001\330\010\014\377\320\014\036\230a\330\010\017\375\210\267`\360\n\000\t\020\210\325z\234`!\232\000\014\212&\014\210\271C\022\001\016\003\020\210t\364A\360T\034\000\007\0018\353 A\310\000\016\275\013\347\330\020\021\320!\332\001{\230\047\373\240\021\375a.\240\001\
```
likely benign LLM, confidence 0.80 A further run of octal-escaped binary data from the embedded blob.
Reasoning
Contiguous octal-escaped binary data within the same vendored literal. The pattern is consistent with compiled Lua bytecode from the cmsgpack library, a legitimate use.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:4895 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
377C\220q\230\001\330\010\014\377\320\014\036\230a\330\010\017\375\210\267`\360\n\000\t\020\210\325z\234`!\232\000\014\212&\014\210\271C\022\001\016\003\020\210t\364A\360T\034\000\007\0018\353 A\310\000\016\275\013\347\330\020\021\320!\332\001{\230\047\373\240\021\375a.\240\001\330\024\377\025\340\010\034\230A\230\\\37
```
likely benign LLM, confidence 0.80 Another octal-escape segment of the same vendored binary blob.
Reasoning
Continuation of the same embedded literal. The snippet shows only data bytes, with no calls, decoding, or execution logic.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:4981 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
t\020\210\325z\234`!\232\000\014\212&\014\210\271C\022\001\016\003\020\210t\364A\360T\034\000\007\0018\353 A\310\000\016\275\013\347\330\020\021\320!\332\001{\230\047\373\240\021\375a.\240\001\330\024\377\025\340\010\034\230A\230\\\377\250\021\250(\260!\2605\347\270\001\270\377`\362 \020\220\016\377\230a\230u\240A\340\
```
likely benign LLM, confidence 0.80 Continuation of the embedded octal-escaped binary data.
Reasoning
Same vendored binary literal. The byte sequences are consistent with bytecode constants rather than shellcode or an encoded command.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:5039 new in this release

10 consecutive `\NNN` octal escapes (entropy 3.3 bits/byte) (raw pass, confidence 0.65)
```
\016\003\020\210t\364A\360T\034\000\007\0018\353 A\310\000\016\275\013\347\330\020\021\320!\332\001{\230\047\373\240\021\375a.\240\001\330\024\377\025\340\010\034\230A\230\\\377\250\021\250(\260!\2605\347\270\001\270\377`\362 \020\220\016\377\230a\230u\240A\340\014N\035\001Q\230aP\003Y\t\020\235F?\017\210s\220!\220\340
```
likely benign LLM, confidence 0.80 A higher-entropy segment of the same embedded binary literal.
Reasoning
Higher entropy (3.3) within the same literal. Compiled bytecode or compressed-looking constant data in a vendored C library is plausible. The snippet shows no execution path.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:5089 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
\310\000\016\275\013\347\330\020\021\320!\332\001{\230\047\373\240\021\375a.\240\001\330\024\377\025\340\010\034\230A\230\\\377\250\021\250(\260!\2605\347\270\001\270\377`\362 \020\220\016\377\230a\230u\240A\340\014N\035\001Q\230aP\003Y\t\020\235F?\017\210s\220!\220\340\204\002\310z\366\267\001u\220\200 \020\220\006\22
```
likely benign LLM, confidence 0.80 Final visible octal-escape segment of the embedded binary literal.
Reasoning
Continuation of the same vendored binary blob. Nothing in the snippet suggests obfuscated control flow or a dropper.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:5115 new in this release

10 consecutive `\NNN` octal escapes (entropy 3.3 bits/byte) (raw pass, confidence 0.65)
```
30\020\021\320!\332\001{\230\047\373\240\021\375a.\240\001\330\024\377\025\340\010\034\230A\230\\\377\250\021\250(\260!\2605\347\270\001\270\377`\362 \020\220\016\377\230a\230u\240A\340\014N\035\001Q\230aP\003Y\t\020\235F?\017\210s\220!\220\340\204\002\310z\366\267\001u\220\200 \020\220\006\220\271a\205\205\001\001\005
```
likely benign LLM, confidence 0.90 A long octal-escaped byte string in msgpack's generated C extension source, most likely embedded serialized bytecode or constant data.
Reasoning
The line is a long run of octal escapes inside a C string literal in a Cython-generated extension source. The byte patterns look like marshalled Python bytecode or constant data, and the same run continues through the neighbouring findings. Packed binary data in generated C is a normal pattern, and raw-pass byte patterns are known to over-flag, so this is most likely benign.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:5365 new in this release

10 consecutive `\NNN` octal escapes (entropy 2.9 bits/byte) (raw pass, confidence 0.65)
```
02\310z\366\267\001u\220\200 \020\220\006\220\271a\205\205\001\001\005\010\013\210\276\204\"\320\377\000\036\320\0367\260q\330\377\014 \320 0\3200A\375\300\312\000\r\330\014-\250Q\313\330\014\005\000\r\000\003\t\000\360\036\337\000\005\033\230!\323@\005\026\357\220Q\340\004\345\000\340\004\007\317\200\177\220g\364\205\
```
likely benign LLM, confidence 0.90 Another segment of the same octal-escaped binary blob in msgpack's generated C source.
Reasoning
This is a continuation of the same octal-escaped binary blob in the generated C file. It has no executable or network behaviour of its own, and the entropy is consistent with compiled data rather than a hidden payload.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:5526 new in this release

8 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
00\r\330\014-\250Q\313\330\014\005\000\r\000\003\t\000\360\036\337\000\005\033\230!\323@\005\026\357\220Q\340\004\345\000\340\004\007\317\200\177\220g\364\205\001\337 \340\004\276\371\205\001\030\240\021\240&\210`\025\357\250a\250q\035\001|\2204=\220\314`\026\220a\330,\000\000\013\227~\220T\320A\030\251@\020\tg\363\230
```
likely benign LLM, confidence 0.90 A further octal-escaped segment of the embedded binary data in msgpack's generated C file.
Reasoning
The snippet continues the same embedded binary byte string in a generated C extension. Nothing in it decodes or runs code, and it is consistent with precompiled data tables.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:5581 new in this release

11 consecutive `\NNN` octal escapes (entropy 3.1 bits/byte) (raw pass, confidence 0.65)
```
360\036\337\000\005\033\230!\323@\005\026\357\220Q\340\004\345\000\340\004\007\317\200\177\220g\364\205\001\337 \340\004\276\371\205\001\030\240\021\240&\210`\025\357\250a\250q\035\001|\2204=\220\314`\026\220a\330,\000\000\013\227~\220T\320A\030\251@\020\tg\363\230R\235`!\n\340\004\005\330\377\010\020\220\001\220\021\2
```
likely benign LLM, confidence 0.90 Octal-escaped binary constant data inside msgpack's generated C extension source.
Reasoning
This is the same generated binary constant data within a C string literal. The flagged pattern is a byte-level artifact of how the data is encoded, and the file is a standard msgpack extension source.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:5643 new in this release

10 consecutive `\NNN` octal escapes (entropy 3.1 bits/byte) (raw pass, confidence 0.65)
```
\000\340\004\007\317\200\177\220g\364\205\001\337 \340\004\276\371\205\001\030\240\021\240&\210`\025\357\250a\250q\035\001|\2204=\220\314`\026\220a\330,\000\000\013\227~\220T\320A\030\251@\020\tg\363\230R\235`!\n\340\004\005\330\377\010\020\220\001\220\021\220%\337\220}\320$7\220b\021\033\377\2305\240\013\320+;\270\377
```
likely benign LLM, confidence 0.90 Another piece of the same embedded binary data in the generated msgpack C source.
Reasoning
The run is part of the same embedded binary literal. There is no evidence of a dropper, a decoding step, or a process spawn, and the context is a compiled C extension.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:5805 new in this release

12 consecutive `\NNN` octal escapes (entropy 3.2 bits/byte) (raw pass, confidence 0.65)
```
13\227~\220T\320A\030\251@\020\tg\363\230R\235`!\n\340\004\005\330\377\010\020\220\001\220\021\220%\337\220}\320$7\220b\021\033\377\2305\240\013\320+;\270\3771\330\021\036\230m\250\077\077\270-\300q\330\010\275`\365@\377\230q\240\005\240U\250)\323\2601\243`\214\"s\275\206\002""\320\022\377$\240A\240Q\240a\330\373\014\0
```
likely benign LLM, confidence 0.90 A continuation of the octal-escaped binary literal in msgpack's generated C extension.
Reasoning
The escapes continue the same generated byte string. The raw pass flags byte sequences like this by pattern alone, and the surrounding file is an ordinary Cython output for a serialization library.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19879:6088 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
022\377$\240A\240Q\240a\330\373\014\017\354@2\220Q\360\006\337\000\021\027\220i-\001\320%\377>\270a\270s\300!\300\1775\310\007\310q\320P\205 \377\023\2201\340\010\024\220AS\220Q\302\000\334\207\004!\371\001t\200\210\001\366l\000\210j\363\207\001\330\t\r\210\327T\220\021\014\001a\000\t\340\010}\016\035\001\320\0318\270\
```
likely benign LLM, confidence 0.90 Final octal-escaped segment of the embedded binary block in msgpack's generated C source.
Reasoning
This is the tail of the same embedded binary data block. It contains only data bytes, and no code execution or network activity is visible in the snippet.
info ~~warn~~ → info by review embedded-nul-in-string msgpack/_cmsgpack.c:19879:6100 new in this release

string literal contains an embedded NUL followed by 257 more bytes of source (token pass, confidence 0.85)
```
U\250)\323\2601\243`\214\"s\275\206\002""\320\022\377$\240A\240Q\240a\330\373\014\017\354@2\220Q\360\006\337\000\021\027\220i-\001\320%\377>\270a\270s\300!\300\1775\310\007\310q\320P\205 \377\023\2201\340\010\024\220AS\220Q\302\000\334\207\004!\371\001t\200\210\001\366l\000\210j\363\207\001\330\t\r\210\327T\220\021\014
```
likely benign LLM, confidence 0.85 A C string literal with an embedded NUL in the generated binary data block of msgpack's extension source.
Reasoning
A string literal containing an embedded NUL followed by more bytes is what binary constant data looks like once a generator has emitted it as a C literal. Within the same generated extension it is consistent with marshalled bytecode, not an obfuscated payload.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19888:3075 new in this release

8 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
0Q\330\010\030\230\001\230\021\230$\230e\240:\250S\260\001\260\021\330\010\035\230Q\230a\230t\2405\250\006\250c\260\021\260!\330\010\013\2104\210q\330\014\022\320\022+\2501\250D\260\003\2606\270\024\270S\300\001\330\014\020\220\003\220:\230Q\330\014\023\2201\200A\340\010\014\210O\2301\330\010\013\2105\220\002\220!\330\
```
likely benign LLM, confidence 0.85 An octal-escaped binary run in the generated msgpack C source, close to the earlier blob.
Reasoning
This is another octal-escaped run in the same generated file, consistent with serialized data tables. The raw signal alone does not show decoding, execution or a network call.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19888:3228 new in this release

8 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
4\022\320\022+\2501\250D\260\003\2606\270\024\270S\300\001\330\014\020\220\003\220:\230Q\330\014\023\2201\200A\340\010\014\210O\2301\330\010\013\2105\220\002\220!\330\014\022\220*\230A\230Q\330\010\013\2105\220\002\220!\330\014\022\220*\230A\230Q\330\010\030\230\001\230\021\230$\230e\2401\330\010\013\2104\210q\330\014\
```
likely benign LLM, confidence 0.85 A further octal-escaped binary segment in msgpack's generated C extension source.
Reasoning
The snippet is the same kind of octal-escaped binary data in the generated C source. The flag comes from the byte-level pattern, not from any executable behaviour.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19888:3546 new in this release

8 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
4\022\320\022+\2501\250D\260\003\2606\270\024\270S\300\001\330\014\020\220\003\220:\230Q\330\014\023\2201\200A\340\010\014\210O\2301\330\010\013\2105\220\002\220!\330\014\022\220*\230A\230Q\330\010\013\2105\220\002\220!\330\014\022\220*\230A\230Q\330\010\032\230!\2301\230D\240\005\240Q\330\010\013\2104\210q\330\014\022
```
likely benign LLM, confidence 0.85 A long octal-escaped byte literal inside a Cython-generated msgpack C extension, most likely serialized constant data.
Reasoning
The file is a Cython-generated C extension from msgpack. Long runs of octal escapes in a single literal are the usual form of Cython's serialized constant data (marshalled code objects and interned names). The raw pass is prone to false positives on this kind of content, and nothing here indicates execution or exfiltration.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19888:3861 new in this release

8 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
4\022\320\022+\2501\250D\260\003\2606\270\024\270S\300\001\330\014\020\220\003\220:\230Q\330\014\023\2201\200A\360\006\000\t\r\210O\2301\330\010\t\330\014\022\220$\220f\230A\230U\240!\340\014\020\220\003\220:\230Q\330""\014\r\330\010\013\2101\330\014\022\220,\230a\230q\330\010\013\2104\210q\330\014\022\320\022+\2501\25
```
likely benign LLM, confidence 0.85 Another octal-escaped segment of the Cython constant-data blob in the msgpack C extension.
Reasoning
This is the same Cython-generated constant-data blob as the neighbouring finding, with the same octal-escape structure. It is a generated serialization pattern in a standard msgpack build artifact, not a hidden payload.
info ~~warn~~ → info by review embedded-nul-in-string msgpack/_cmsgpack.c:19888:3929 new in this release

string literal contains an embedded NUL followed by 95 more bytes of source (token pass, confidence 0.85)
```
x_PyDict_NextRef__annotate____func____g""etstate____main____module____name____pyx_state__pyx_vtable____qualname____reduce____reduce_cython____reduce_ex____set_name____setstate____setstate_cython____test___is_coroutineasyncio.coroutinesautoresetbufbuf_lenbuf_sizebytescerrcline_in_tracebackcodectxddatadatetimedefaultdefa
```
dismissed LLM, confidence 0.85 A Cython string table of identifier names separated by embedded NUL bytes in the msgpack C source.
Reasoning
The literal is a concatenated string table of Python identifiers (for example __reduce_ex__, __setstate__, asyncio.coroutines, bufsize). Cython separates names with NUL bytes in its string table, so the NUL is a generator artifact. The names are ordinary Cython runtime and pickling identifiers, not a concealed command.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19888:4159 new in this release

8 consecutive `\NNN` octal escapes (entropy 2.8 bits/byte) (raw pass, confidence 0.65)
```
4\022\320\022+\2501\250D\260\003\2606\270\024\270S\300\001\330\014\020\220\003\220:\230Q\330\014\023\2201\200A\360\006\000\t\020\320\017(\250\001\250\024\250S\260\006\260d\270#\270Q\200A\360\010\000\t\014\2104\210q\330\014\022\220,\230a\230q\330\010\013\2104\210t\2209\230C\230q\330\014\022\220*\230A\230Q\330\010\023\22
```
likely benign LLM, confidence 0.85 Octal-escaped constant data within the Cython-generated msgpack extension literal.
Reasoning
This is the same Cython-generated serialized constant blob, with the same octal-escape pattern and the same layout as the other fragments from this literal. Nothing in the snippet suggests a decoder or execution path.
info ~~warn~~ → info by review embedded-nul-in-string msgpack/_cmsgpack.c:19888:4227 new in this release

string literal contains an embedded NUL followed by 1795 more bytes of source (token pass, confidence 0.85)
```
\240!\340\014\020\220\003\220:\230Q\330""\014\r\330\010\013\2101\330\014\022\220,\230a\230q\330\010\013\2104\210q\330\014\022\320\022+\2501\250D\260\003\2606\270\024\270S\300\001\330\014\020\220\003\220:\230Q\330\014\023\2201\200A\360\006\000\t\020\320\017(\250\001\250\024\250S\260\006\260d\270#\270Q\200A\360\010\000\t
```
dismissed LLM, confidence 0.85 Part of a Cython identifier string table with NUL separators in the msgpack extension source.
Reasoning
The embedded NUL separates identifiers in Cython's string table, which is the normal way Cython packs names into one literal. The names are ordinary Python and Cython identifiers, with no sign of hidden instructions.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19888:4466 new in this release

7 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)
```
30\010\023\2201\220D\230\n\240\"\240D\250\013\2601\330\010\016\320\016\047\240q\250\004\250E\260\022\2604\260{\300!\330\010\014\210M\230\021\330\010\013\2106\220\022\2207\230$\230d\240+\250W\260A\330\014\023\2204\220z\240\025\240a\240w\250b\260\001\330\014\024\220C\220q\230\001\330\010\014\320\014\036\230a\330\010\017\
```
likely benign LLM, confidence 0.85 Continuation of the Cython-generated serialized constant data in the msgpack C extension.
Reasoning
This is a continuation of the same generated constant-data literal. The octal escapes encode serialized bytecode and names as Cython emits them. The snippet has no decode-and-execute or network behaviour.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19888:4548 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
0\004\250E\260\022\2604\260{\300!\330\010\014\210M\230\021\330\010\013\2106\220\022\2207\230$\230d\240+\250W\260A\330\014\023\2204\220z\240\025\240a\240w\250b\260\001\330\014\024\220C\220q\230\001\330\010\014\320\014\036\230a\330\010\017\210q\200A\360\n\000\t\020\210z\230\021\230!\200A\360\014\000\t\r\210O\2301\330\010
```
likely benign LLM, confidence 0.85 A further octal-escaped fragment of the generated Cython constant data in the msgpack extension.
Reasoning
The fragment is part of the same generated blob, with the same structure and octal encoding typical of marshalled Python code objects in a Cython build. Raw-pass octal findings in generated C are a known false-positive class.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19888:4656 new in this release

6 consecutive `\NNN` octal escapes (entropy 2.6 bits/byte) (raw pass, confidence 0.65)
```
\260A\330\014\023\2204\220z\240\025\240a\240w\250b\260\001\330\014\024\220C\220q\230\001\330\010\014\320\014\036\230a\330\010\017\210q\200A\360\n\000\t\020\210z\230\021\230!\200A\360\014\000\t\r\210O\2301\330\010\014\210C\210z\230\021\200A\360\014\000\t\020\210t\2201\200A\360\014\000\t\020\210t\2208\2301\230A\200A\360\
```
likely benign LLM, confidence 0.85 Octal-escaped segment of the Cython-generated constant data in the msgpack C extension.
Reasoning
This is the same generated constant data, consistent with Cython serialization of code objects and names. The segment is a continuation of the blob and shows no sign of a payload or dropper.
info ~~warn~~ → info by review encoding-octal msgpack/_cmsgpack.c:19888:4686 new in this release

9 consecutive `\NNN` octal escapes (entropy 2.7 bits/byte) (raw pass, confidence 0.65)
```
0\025\240a\240w\250b\260\001\330\014\024\220C\220q\230\001\330\010\014\320\014\036\230a\330\010\017\210q\200A\360\n\000\t\020\210z\230\021\230!\200A\360\014\000\t\r\210O\2301\330\010\014\210C\210z\230\021\200A\360\014\000\t\020\210t\2201\200A\360\014\000\t\020\210t\2208\2301\230A\200A\360\016\000\t\014\2104\210q\330\01
```
likely benign LLM, confidence 0.85 A later octal-escaped fragment of the generated constant data in the msgpack C extension.
Reasoning
The snippet is the same generated constant-data literal, with no decode or execution calls and no network or process spawning. It is consistent with a legitimate Cython-compiled msgpack build artifact.

info long-line msgpack/_cmsgpack.c:3341:1

line length 639 characters (raw pass, confidence 0.50)

static int __pyx_pf_7msgpack_9_cmsgpack_8Unpacker_2__init__(struct __pyx_obj_7msgpack_9_cmsgpack_Unpacker *__pyx_v_self, PyObject *__pyx_v_file_like, Py_ssize_t __pyx_v_read_size, int __pyx_v_use_list, int __pyx_v_raw, int __pyx_v_timestamp, int __pyx_v_strict_map_key, PyObject *__pyx_v_object_hook, PyObject *__pyx_v_o

info long-line msgpack/_cmsgpack.c:11802:1

line length 511 characters (raw pass, confidence 0.50)

static CYTHON_INLINE PyObject *__pyx_f_7msgpack_9_cmsgpack_init_ctx(unpack_context *__pyx_v_ctx, PyObject *__pyx_v_object_hook, PyObject *__pyx_v_object_pairs_hook, PyObject *__pyx_v_list_hook, PyObject *__pyx_v_ext_hook, int __pyx_v_use_list, int __pyx_v_raw, int __pyx_v_timestamp, int __pyx_v_strict_map_key, char con

info long-line msgpack/_cmsgpack.c:12999:1

line length 698 characters (raw pass, confidence 0.50)

    PyObject ** const __pyx_pyargnames[] = {&__pyx_mstate_global->__pyx_n_u_packed,&__pyx_mstate_global->__pyx_n_u_object_hook,&__pyx_mstate_global->__pyx_n_u_list_hook,&__pyx_mstate_global->__pyx_n_u_use_list,&__pyx_mstate_global->__pyx_n_u_raw,&__pyx_mstate_global->__pyx_n_u_timestamp,&__pyx_mstate_global->__pyx_n_u_

info long-line msgpack/_cmsgpack.c:13165:1

line length 529 characters (raw pass, confidence 0.50)

static PyObject *__pyx_pf_7msgpack_9_cmsgpack_2unpackb(CYTHON_UNUSED PyObject *__pyx_self, PyObject *__pyx_v_packed, PyObject *__pyx_v_object_hook, PyObject *__pyx_v_list_hook, int __pyx_v_use_list, int __pyx_v_raw, int __pyx_v_timestamp, int __pyx_v_strict_map_key, PyObject *__pyx_v_unicode_errors, PyObject *__pyx_v_o

info long-line msgpack/_cmsgpack.c:13929:1

line length 791 characters (raw pass, confidence 0.50)

    PyObject ** const __pyx_pyargnames[] = {&__pyx_mstate_global->__pyx_n_u_file_like,&__pyx_mstate_global->__pyx_n_u_read_size,&__pyx_mstate_global->__pyx_n_u_use_list,&__pyx_mstate_global->__pyx_n_u_raw,&__pyx_mstate_global->__pyx_n_u_timestamp,&__pyx_mstate_global->__pyx_n_u_strict_map_key,&__pyx_mstate_global->__py

info long-line msgpack/_cmsgpack.c:14125:1

line length 628 characters (raw pass, confidence 0.50)

static int __pyx_pf_7msgpack_9_cmsgpack_8Unpacker_2__init__(struct __pyx_obj_7msgpack_9_cmsgpack_Unpacker *__pyx_v_self, PyObject *__pyx_v_file_like, Py_ssize_t __pyx_v_read_size, int __pyx_v_use_list, int __pyx_v_raw, int __pyx_v_timestamp, int __pyx_v_strict_map_key, PyObject *__pyx_v_object_hook, PyObject *__pyx_v_o

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o msgpack-1.2.3.tar.gz https://files.pythonhosted.org/packages/0a/e7/bb605a7bab2d8425a64b3fa762b39dc1bf1c7e3f11ba6fb5413d6db0ff8c/msgpack-1.2.3.tar.gz
printf '%s  %s\n' 32edb81a2b5eb7cd7c9d941b2bfbbb082fd2cd09e0e725930316af6b708db186 msgpack-1.2.3.tar.gz | shasum -a 256 -c -
mkdir pkg && tar -xzf msgpack-1.2.3.tar.gz -C pkg --strip-components 1
disclude scan --untrusted --severity info pkg