pymupdf 2.0

Source: https://github.com/pymupdf/pymupdf
Tag scanned: 2.0
Compared with: 1.28.2 (71 signals introduced since)
Files: 229 scanned, 743 skipped (binary, oversized, or unrecognised)
Signals: 1 critical · 0 warn · 94 info
Scan time: 65.1 s
LLM review: Reviewed by claude-haiku-5-5 (Anthropic): 87 of 87 warn and critical signals; 86 demoted to info.
Disclude version: 4.1.0
Scanned (UTC): 2026-10-22 07:43

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

critical dynamic-execution docs/conf.py:73:29

`eval` at module scope (runs on import) on a non-literal expression (ast pass, confidence 0.80)
```
    python_versions_minor = m.group(1)
    python_versions_minor = eval(m.group(1))
else:
    # PyMuPDF version is set in setup.py, so we import it here.
```
likely benign LLM, confidence 0.60 Sphinx conf.py evals a regex-captured version component at import time.
Reasoning
eval is applied at module scope to a regex capture group, which is a poor practice, but the input comes from a version string in the project's own repository and the snippet shows only version-parsing context. Likely a benign version-parsing shortcut in Sphinx config, though the non-literal eval is worth a look.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:109:45 new in this release

bytes literal contains 87 `\xNN` escapes (98% of content) — binary payload shape (ast pass, confidence 0.85)
```
                            ['2023', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8
```
likely benign LLM, confidence 0.90 Test fixture stores Chinese text as UTF-8 bytes.
Reasoning
The bytes literal is UTF-8 encoded Chinese financial-rating text used as test fixture data. Non-ASCII test strings are written as escapes, which explains the escape density. This is not a binary payload.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:109:47 new in this release

27 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.80)
```
                            ['2023', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8
```
likely benign LLM, confidence 0.90 Run of hex escapes encoding UTF-8 Chinese text in a test fixture.
Reasoning
The escape run is the UTF-8 encoding of Chinese text in a test fixture. The raw pass flags byte sequences that are normal in multilingual test data.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:109:232 new in this release

21 consecutive `\xNN` escapes (entropy 3.8 bits/byte) (raw pass, confidence 0.65)
```
e5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa
```
likely benign LLM, confidence 0.90 Hex-escaped UTF-8 Chinese text in a test fixture.
Reasoning
This is a continuation of the same UTF-8 Chinese test fixture bytes. The escapes encode readable text, not hidden or executable content.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:109:317 new in this release

18 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
4\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\x
```
likely benign LLM, confidence 0.90 Hex-escaped UTF-8 Chinese text in a test fixture.
Reasoning
Same test fixture: the escapes decode to ordinary Chinese text in a table-test string. No execution or obfuscation is involved.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:109:415 new in this release

bytes literal contains 78 `\xNN` escapes (97% of content) — binary payload shape (ast pass, confidence 0.85)
```
\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\xac\xe5\x8f\xb8 \xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xb
```
likely benign LLM, confidence 0.90 Test fixture stores Chinese text as UTF-8 bytes.
Reasoning
The bytes literal is the UTF-8 encoding of Chinese text used as test data. The escape density matches multilingual fixture content, not a payload.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:109:417 new in this release

18 consecutive `\xNN` escapes (entropy 3.7 bits/byte) (raw pass, confidence 0.65)
```
e5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\xac\xe5\x8f\xb8 \xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\
```
likely benign LLM, confidence 0.90 Hex-escaped UTF-8 Chinese text in a test fixture.
Reasoning
This is a continuation of the same UTF-8 Chinese test fixture. The escapes encode ordinary text and are not used for anything executable.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:109:491 new in this release

18 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\xac\xe5\x8f\xb8 \xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\n\xe5\x8f\xb8'.decode(), b'\xe7\xa
```
likely benign LLM, confidence 0.90 Hex-escaped UTF-8 Chinese text in a test fixture.
Reasoning
Same test fixture of UTF-8 encoded Chinese text. The raw-pass hit reflects encoding density in multilingual data, not an obfuscated payload.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:109:654 new in this release

18 consecutive `\xNN` escapes (entropy 4.1 bits/byte) (raw pass, confidence 0.65)
```
e8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\n\xe5\x8f\xb8'.decode(), b'\xe7\xa8\xb3\xe5\xae\x9a'.decode(), ],
```
likely benign LLM, confidence 0.90 Hex-escaped UTF-8 text in a test fixture.
Reasoning
The escapes encode Chinese text and a short word, both ordinary fixture strings in a table test. Nothing executes them.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:110:45 new in this release

bytes literal contains 87 `\xNN` escapes (98% of content) — binary payload shape (ast pass, confidence 0.85)
```
                            ['2022', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8
```
likely benign LLM, confidence 0.90 Test fixture stores Chinese text as UTF-8 bytes.
Reasoning
This is the same kind of UTF-8 Chinese fixture bytes, repeated in the next test row. It is test data with no execution path.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:110:47 new in this release

27 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.80)
```
                            ['2022', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8
```
likely benign LLM, confidence 0.92 A test fixture holding UTF-8 byte literals of Chinese prose that are decoded to strings.
Reasoning
The escapes are UTF-8 bytes for Chinese text, which is decoded with .decode() in the same expression. This is a test fixture for localized table data, not a payload. The raw pass flags encoding density, which is a known false-positive pattern for non-ASCII text.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:110:232 new in this release

21 consecutive `\xNN` escapes (entropy 3.8 bits/byte) (raw pass, confidence 0.65)
```
e5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa
```
likely benign LLM, confidence 0.92 Chinese UTF-8 byte-literal text in a test table, decoded to str.
Reasoning
The run of \xNN escapes is a UTF-8 encoding of Chinese text inside a .decode() call in a test file. Nothing executes or hides anything.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:110:317 new in this release

18 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
4\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\x
```
likely benign LLM, confidence 0.92 Another UTF-8 Chinese text literal in the test fixture, decoded at runtime.
Reasoning
Same pattern: UTF-8 bytes of Chinese prose with an immediate .decode(). Consistent with localized test data in a fixture.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:110:415 new in this release

bytes literal contains 78 `\xNN` escapes (97% of content) — binary payload shape (ast pass, confidence 0.85)
```
\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\xac\xe5\x8f\xb8 \xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xb
```
likely benign LLM, confidence 0.90 A bytes literal of encoded Chinese text that the code decodes to a string.
Reasoning
The AST pass flags a bytes literal as a payload shape, but the bytes are UTF-8 Chinese text that is immediately decoded. Being bytes-heavy is expected for encoded natural language. No execution, network or file operation appears.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:110:417 new in this release

18 consecutive `\xNN` escapes (entropy 3.7 bits/byte) (raw pass, confidence 0.65)
```
e5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\xac\xe5\x8f\xb8 \xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\
```
likely benign LLM, confidence 0.92 Chinese text bytes in the test fixture, decoded to str.
Reasoning
Continuation of the same UTF-8 Chinese text literal with .decode(). Raw-pass escape density is a false positive on non-ASCII text.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:110:491 new in this release

18 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\xac\xe5\x8f\xb8 \xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\n\xe5\x8f\xb8'.decode(), b'\xe7\xa
```
likely benign LLM, confidence 0.92 Chinese text byte literal in a test data table.
Reasoning
Another segment of the same UTF-8 Chinese text in the test table, decoded at runtime. No obfuscation intent is visible.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:110:654 new in this release

18 consecutive `\xNN` escapes (entropy 4.1 bits/byte) (raw pass, confidence 0.65)
```
e8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\n\xe5\x8f\xb8'.decode(), b'\xe7\xa8\xb3\xe5\xae\x9a'.decode(), ],
```
likely benign LLM, confidence 0.92 Tail of a Chinese text byte literal and a short decoded string in the test table.
Reasoning
The snippet ends a decoded Chinese text literal and adds a short decoded word. This is ordinary test data for a localized table.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:111:45 new in this release

bytes literal contains 87 `\xNN` escapes (98% of content) — binary payload shape (ast pass, confidence 0.85)
```
                            ['2021', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8
```
likely benign LLM, confidence 0.90 A bytes literal of Chinese text in a test table row, decoded to str.
Reasoning
The AST payload-shape flag is triggered by UTF-8 bytes of Chinese text that are decoded immediately. It is a test fixture row, not a dropper or encoded payload.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:111:47 new in this release

27 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.80)
```
                            ['2021', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8
```
likely benign LLM, confidence 0.92 Chinese UTF-8 bytes in a test table row.
Reasoning
The escapes are UTF-8 Chinese text in a test fixture row. The entropy and escape-density flag is a false positive for non-ASCII content.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:111:232 new in this release

21 consecutive `\xNN` escapes (entropy 3.8 bits/byte) (raw pass, confidence 0.65)
```
e5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\n\xe6\x9c\x8
```
likely benign LLM, confidence 0.92 Chinese text bytes in a test fixture, decoded to str.
Reasoning
Same UTF-8 Chinese text literal with .decode() in the test fixture. No code execution or hidden behaviour is present.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:111:317 new in this release

18 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
4\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\n\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\xe5\x8f\xb8'.decode(), b'\xe7\xa8\xb3\xe5\xae\x9a'.decode()
```
likely benign LLM, confidence 0.92 Decoded Chinese text literals in the test table.
Reasoning
The snippet is a sequence of decoded UTF-8 Chinese strings in the test data. Benign localization data.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:111:417 new in this release

18 consecutive `\xNN` escapes (entropy 3.7 bits/byte) (raw pass, confidence 0.65)
```
e5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\n\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\xe5\x8f\xb8'.decode(), b'\xe7\xa8\xb3\xe5\xae\x9a'.decode(), ],
```
likely benign LLM, confidence 0.90 Test fixture that writes Chinese label strings as UTF-8 byte escapes decoded at runtime.
Reasoning
The raw pass flagged a run of \xNN escapes, but the bytes are UTF-8 encodings of Chinese text (bank and company names, labels) decoded with .decode(). This is a common way to write non-ASCII test fixtures and does not hide executable code. The file is a test table of Chinese financial data.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:112:45 new in this release

bytes literal contains 87 `\xNN` escapes (98% of content) — binary payload shape (ast pass, confidence 0.85)
```
                            ['2020', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8
```
likely benign LLM, confidence 0.85 Bytes literal holding UTF-8 Chinese text in a test table, not a binary payload.
Reasoning
The AST pass flagged a bytes literal that is mostly \xNN escapes. The content decodes to Chinese prose (for example, a risk-disclosure sentence about the economic environment), not to a binary payload or shellcode. Legitimate tests of Chinese text handling would be written this way, and the surrounding code is a data table.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:112:47 new in this release

27 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.80)
```
                            ['2020', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8
```
likely benign LLM, confidence 0.90 UTF-8 Chinese text written as byte escapes in a test fixture.
Reasoning
Same construction as the neighbouring finding: a UTF-8 Chinese string written as escapes in a test file. The high escape count reflects non-ASCII text, not concealed logic.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:112:232 new in this release

21 consecutive `\xNN` escapes (entropy 3.8 bits/byte) (raw pass, confidence 0.65)
```
e5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\n\xe6\x9c\x8
```
likely benign LLM, confidence 0.90 Chinese text encoded as escape sequences in a test table.
Reasoning
The escape run encodes Chinese characters for a test data table, decoded at runtime. Nothing in the snippet executes or hides behaviour beyond text encoding.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:112:317 new in this release

18 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
4\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\n\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\xe5\x8f\xb8'.decode(), b'\xe7\xa8\xb3\xe5\xae\x9a'.decode()
```
likely benign LLM, confidence 0.90 Test fixture of Chinese strings stored as UTF-8 escapes.
Reasoning
A run of UTF-8 byte escapes decoding to Chinese phrases in a test file. This is a standard pattern for non-ASCII fixtures.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:112:417 new in this release

18 consecutive `\xNN` escapes (entropy 3.7 bits/byte) (raw pass, confidence 0.65)
```
e5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\n\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\xe5\x8f\xb8'.decode(), b'\xe7\xa8\xb3\xe5\xae\x9a'.decode(), ],
```
likely benign LLM, confidence 0.90 Chinese names stored as byte escapes and decoded in a test table.
Reasoning
Same pattern: UTF-8 bytes for Chinese names decoded in a test table. The escapes are text, not an obfuscated payload.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:115:70 new in this release

18 consecutive `\xNN` escapes (entropy 3.8 bits/byte) (raw pass, confidence 0.65)
```
         [b'\xe5\xba\x8f\xe5\x8f\xb7'.decode(), b'\xe9\x87\x91\xe8\x9e\x8d\xe6\x9c\xba\xe6\x9e\x84\xe5\x90\x8d\xe7\xa7\xb0'.decode(), b'\xe6\x8e\x88\xe4\xbf\xa1\xe6\x80\xbb\xe9\xa2\x9d'.decode(), b'\xe5\xb7\xb2\xe4\xbd\xbf\xe7\x94\xa8\xe6\x83\x85\xe5\x86\xb5'.decode(), b'\xe5\x89\xa9\xe4\xbd\x99\xe9\xa2\x9d\xe5\xba\xa6
```
likely benign LLM, confidence 0.90 Chinese table column headers written as decoded byte literals in a test.
Reasoning
The snippet is a list of byte literals decoded to Chinese column headers (serial number, institution name, approved total, used amount, remaining balance). This is test data for table parsing with non-ASCII headers.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:117:35 new in this release

bytes literal contains 36 `\xNN` escapes (100% of content) — binary payload shape (ast pass, confidence 0.85)
```
                            ['2', b'\xe5\xbe\xbd\xe5\x95\x86\xe9\x93\xb6\xe8\xa1\x8c\xe5\x8d\x97\xe4\xba\xac\xe4\xb8\xad\xe5\xb1\xb1\xe5\x8c\x97\xe8\xb7\xaf\xe6\x94\xaf\xe8\xa1\x8c'.decode(), '33043530\n, .', '25673530\n, .', '7370000\n, .', ],
```
likely benign LLM, confidence 0.88 Bytes literal with a Chinese bank name in a test data row.
Reasoning
The AST payload-shape flag fires on a bytes literal whose content decodes to a Chinese bank name, followed by ordinary numeric strings. This is test table data, not a binary blob driving execution.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:117:37 new in this release

36 consecutive `\xNN` escapes (entropy 4.3 bits/byte) (raw pass, confidence 0.80)
```
                            ['2', b'\xe5\xbe\xbd\xe5\x95\x86\xe9\x93\xb6\xe8\xa1\x8c\xe5\x8d\x97\xe4\xba\xac\xe4\xb8\xad\xe5\xb1\xb1\xe5\x8c\x97\xe8\xb7\xaf\xe6\x94\xaf\xe8\xa1\x8c'.decode(), '33043530\n, .', '25673530\n, .', '7370000\n, .', ],
```
likely benign LLM, confidence 0.90 UTF-8 Chinese bank name stored as escapes in a test row.
Reasoning
The escapes are a UTF-8 Chinese bank name decoded at runtime, in a row alongside plain numeric strings. The entropy reading comes from non-ASCII text, not compressed or encrypted data.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:118:37 new in this release

24 consecutive `\xNN` escapes (entropy 4.1 bits/byte) (raw pass, confidence 0.80)
```
                            ['3', b'\xe5\x85\xb4\xe4\xb8\x9a\xe9\x93\xb6\xe8\xa1\x8c\xe7\x9b\x90\xe5\x9f\x8e\xe5\x88\x86\xe8\xa1\x8c'.decode(), '30260000\n, .', '11060000\n, .', '19200000\n, .', ],
```
likely benign LLM, confidence 0.90 Chinese branch name written as byte escapes in a test row.
Reasoning
The escapes decode to a Chinese branch name in a test data row with numeric strings. This is text encoding in a fixture, not obfuscation.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:119:37 new in this release

24 consecutive `\xNN` escapes (entropy 4.1 bits/byte) (raw pass, confidence 0.80)
```
                            ['4', b'\xe6\xb0\x91\xe7\x94\x9f\xe9\x93\xb6\xe8\xa1\x8c\xe7\x9b\x90\xe5\x9f\x8e\xe5\x88\x86\xe8\xa1\x8c'.decode(), '26200000\n, .', '8850000\n, .', '17350000\n, .', ],
```
likely benign LLM, confidence 0.90 Chinese bank name in byte escapes within a test table row.
Reasoning
The escapes decode to a Chinese bank name in a test table row, alongside numeric strings. The pattern matches ordinary non-ASCII test data.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:120:37 new in this release

24 consecutive `\xNN` escapes (entropy 4.1 bits/byte) (raw pass, confidence 0.80)
```
                            ['5', b'\xe4\xb8\xad\xe4\xbf\xa1\xe9\x93\xb6\xe8\xa1\x8c\xe7\x9b\x90\xe5\x9f\x8e\xe5\x88\x86\xe8\xa1\x8c'.decode(), '20508800\n, .', '20508800\n, .', '000\n.', ],
```
likely benign LLM, confidence 0.90 Chinese bank name in byte escapes within a test table row.
Reasoning
The escapes decode to a Chinese bank name in a test row with numeric strings and a '000' value. This is fixture data for a table parser, not a hidden payload.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:121:37 new in this release

24 consecutive `\xNN` escapes (entropy 4.1 bits/byte) (raw pass, confidence 0.80)
```
                            ['6', b'\xe5\x8d\x97\xe4\xba\xac\xe9\x93\xb6\xe8\xa1\x8c\xe7\x9b\x90\xe5\x9f\x8e\xe5\x88\x86\xe8\xa1\x8c'.decode(), '17517000\n, .', '17517000\n, .', '000\n.', ],
```
likely benign LLM, confidence 0.93 Test-table row containing UTF-8-encoded Chinese bank names decoded to text.
Reasoning
The escapes are UTF-8 bytes for Chinese bank-name text (e.g. 南京银行), decoded immediately in a test fixture. This is ordinary localized test data, not a hidden payload.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:125:38 new in this release

30 consecutive `\xNN` escapes (entropy 4.3 bits/byte) (raw pass, confidence 0.80)
```
                            ['10', b'\xe6\x81\x92\xe4\xb8\xb0\xe9\x93\xb6\xe8\xa1\x8c\xe5\x8d\x97\xe4\xba\xac\xe6\xb1\x9f\xe5\x8c\x97\xe6\x94\xaf\xe8\xa1\x8c'.decode(), '9390000\n, .', '4350000\n, .', '5040000\n, .', ],
```
likely benign LLM, confidence 0.93 Test-table row with UTF-8 Chinese bank-branch text written as byte escapes.
Reasoning
The escaped bytes decode to Chinese bank names (e.g. 招银行, 南京江北支行) inside a test table row alongside plain numeric strings. This is localized test data with no execution or evasion.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:126:38 new in this release

24 consecutive `\xNN` escapes (entropy 4.3 bits/byte) (raw pass, confidence 0.80)
```
                            ['11', b'\xe4\xb8\x8a\xe6\xb5\xb7\xe9\x93\xb6\xe8\xa1\x8c\xe7\x9b\x90\xe5\x9f\x8e\xe5\x88\x86\xe8\xa1\x8c'.decode(), '4626500\n, .', '4626500\n, .', '000\n.', ],
                        ],
                    ]
```
likely benign LLM, confidence 0.93 Test-table row with UTF-8 Chinese bank text written as byte escapes.
Reasoning
Same pattern: UTF-8 Chinese text as byte escapes, immediately decoded in a test fixture alongside numeric strings.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:262:41 new in this release

bytes literal contains 87 `\xNN` escapes (98% of content) — binary payload shape (ast pass, confidence 0.85)
```
                        ['2023', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf
```
likely benign LLM, confidence 0.90 Bytes literal holding UTF-8 Chinese disclaimer text in a test file.
Reasoning
The AST flag is a long bytes literal, but its content is UTF-8 Chinese prose (credit and risk disclaimers) and it is used as expected test data. The 'payload' shape comes from non-ASCII text, not from code that executes it.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:262:43 new in this release

27 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.80)
```
                        ['2023', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf
```
likely benign LLM, confidence 0.92 Chinese UTF-8 text rendered as byte escapes inside a test bytes literal.
Reasoning
Raw-pass escape run is the same UTF-8 Chinese text in the test fixture. Escape density is expected for non-ASCII literal data.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:262:228 new in this release

21 consecutive `\xNN` escapes (entropy 3.8 bits/byte) (raw pass, confidence 0.65)
```
e5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa
```
likely benign LLM, confidence 0.92 Further UTF-8 Chinese text escapes in the same test fixture.
Reasoning
Continuation of the same Chinese disclaimer text in a test fixture. The raw hex-escape flag is a false positive from multibyte encoding.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:262:313 new in this release

18 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
4\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\x
```
likely benign LLM, confidence 0.92 UTF-8 Chinese disclaimer text escapes in a test fixture.
Reasoning
Same test-fixture Chinese text encoded as UTF-8 bytes; no decoding into code or execution is involved.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:262:411 new in this release

bytes literal contains 78 `\xNN` escapes (97% of content) — binary payload shape (ast pass, confidence 0.85)
```
\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\xac\xe5\x8f\xb8 \xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xb
```
likely benign LLM, confidence 0.90 Long bytes literal of Chinese UTF-8 text used as test data.
Reasoning
AST payload-shape flag on a bytes literal that is UTF-8 Chinese text, used as test expectation data. It is not a dropper or executed blob.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:262:413 new in this release

18 consecutive `\xNN` escapes (entropy 3.7 bits/byte) (raw pass, confidence 0.65)
```
e5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\xac\xe5\x8f\xb8 \xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\
```
likely benign LLM, confidence 0.92 Chinese UTF-8 escape run in a test bytes literal.
Reasoning
Same Chinese text escape run in the test fixture; a raw-pass false positive from non-ASCII encoding.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:262:487 new in this release

18 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\xac\xe5\x8f\xb8 \xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\n\xe5\x8f\xb8'.decode(), b'\xe7\xa
```
likely benign LLM, confidence 0.92 Chinese UTF-8 text escapes in a test fixture.
Reasoning
Continuation of the same UTF-8 Chinese text fixture. No evidence of obfuscation or code execution.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:262:650 new in this release

18 consecutive `\xNN` escapes (entropy 4.1 bits/byte) (raw pass, confidence 0.65)
```
e8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\n\xe5\x8f\xb8'.decode(), b'\xe7\xa8\xb3\xe5\xae\x9a'.decode(), ],
```
likely benign LLM, confidence 0.92 Trailing Chinese UTF-8 text escapes in a test fixture.
Reasoning
Final portion of the same Chinese text test fixture; the escapes encode localized strings decoded for comparison.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:263:41 new in this release

bytes literal contains 87 `\xNN` escapes (98% of content) — binary payload shape (ast pass, confidence 0.85)
```
                        ['2022', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf
```
likely benign LLM, confidence 0.90 A UTF-8 encoded Chinese text fixture in a test table.
Reasoning
The bytes literal is UTF-8 encoded Chinese text (credit-rating disclaimers, with a dict row of year and rating like 'AA+') in a table-driven test fixture. It is decoded in place, so it is test data, not a binary payload.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:263:43 new in this release

27 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.80)
```
                        ['2022', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf
```
likely benign LLM, confidence 0.90 Escaped UTF-8 Chinese text in a test fixture.
Reasoning
The escape run is the UTF-8 byte encoding of ordinary Chinese prose inside a test fixture. Long \x escape runs are expected for non-ASCII test strings, and the raw-pass signal is a known false-positive pattern.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:263:228 new in this release

21 consecutive `\xNN` escapes (entropy 3.8 bits/byte) (raw pass, confidence 0.65)
```
e5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa
```
likely benign LLM, confidence 0.90 Escaped UTF-8 Chinese disclaimer text in a test fixture.
Reasoning
The bytes are the UTF-8 encoding of Chinese disclaimer text, decoded with .decode() within the same test-data structure. It is a legitimate localization fixture.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:263:313 new in this release

18 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
4\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\x
```
likely benign LLM, confidence 0.90 More UTF-8 Chinese text escapes in the test fixture.
Reasoning
The same test-fixture pattern continues: consecutive UTF-8 byte escapes spelling Chinese text, decoded in place. The entropy is typical of multibyte text, not of an encrypted or encoded payload.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:263:411 new in this release

bytes literal contains 78 `\xNN` escapes (97% of content) — binary payload shape (ast pass, confidence 0.85)
```
\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\xac\xe5\x8f\xb8 \xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xb
```
likely benign LLM, confidence 0.90 Another UTF-8 Chinese text fixture flagged for its escape density.
Reasoning
This is the UTF-8 encoding of more Chinese disclaimer text inside a test data table, with .decode() applied. The payload-shape heuristic fires because the content is nearly all escapes, but the context is ordinary localized test data.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:263:413 new in this release

18 consecutive `\xNN` escapes (entropy 3.7 bits/byte) (raw pass, confidence 0.65)
```
e5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe4\xb8\xad\xe8\xaf\x9a\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\xac\xe5\x8f\xb8 \xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\
```
likely benign LLM, confidence 0.93 Byte-escaped UTF-8 Chinese text used as test data in a table-rendering test.
Reasoning
The raw pass flagged a run of \xNN escapes, but the bytes decode to UTF-8 Chinese text (for example 中国, 信, 有限责任公司, 联合资). That is ordinary multilingual fixture data in a table-rendering test file, where CJK strings are used to check display width and alignment. No executable payload, decoder pipeline, or sensitive call appears in the snippet, and raw-pass encoding findings are known to produce false positives on literal non-ASCII text.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:263:487 new in this release

18 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
\xe4\xbf\xa1\xe5\x9b\xbd\xe9\x99\x85\xe4\xbf\xa1\n\xe7\x94\xa8\xe8\xaf\x84\xe7\xba\xa7\xe6\x9c\x89\xe9\x99\x90\xe8\xb4\xa3\n\xe4\xbb\xbb\xe5\x85\xac\xe5\x8f\xb8 \xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\n\xe5\x8f\xb8'.decode(), b'\xe7\xa
```
likely benign LLM, confidence 0.90 Escaped UTF-8 Chinese prose in a test table.
Reasoning
The escaped bytes encode Chinese prose, decoded with .decode() in a test table. It contains no executable code and no dropper-like pipeline.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:263:650 new in this release

18 consecutive `\xNN` escapes (entropy 4.1 bits/byte) (raw pass, confidence 0.65)
```
e8\x81\x94\xe5\x90\x88\xe8\xb5\x84\n\xe3\x80\x81\n\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\n\xe5\x8f\xb8'.decode(), b'\xe7\xa8\xb3\xe5\xae\x9a'.decode(), ],
```
likely benign LLM, confidence 0.90 Final UTF-8 Chinese text fragment in the test fixture.
Reasoning
The fragment is the UTF-8 encoding of Chinese text ending with a decode call inside a test data list. Its entropy is consistent with natural-language multibyte text.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:264:41 new in this release

bytes literal contains 87 `\xNN` escapes (98% of content) — binary payload shape (ast pass, confidence 0.85)
```
                        ['2021', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf
```
likely benign LLM, confidence 0.90 A parallel UTF-8 Chinese text fixture row for 2021.
Reasoning
This row is the same test fixture as the 263 lines, with a year value of 2021 instead of 2022 and the same UTF-8 Chinese text. The payload-shape signal is a false positive for decoded localized strings.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:264:43 new in this release

27 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.80)
```
                        ['2021', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf
```
likely benign LLM, confidence 0.90 Escaped UTF-8 Chinese text in the 2021 fixture row.
Reasoning
The escape run encodes the same Chinese prose as the neighboring rows in a test table. Nothing suggests executable content or obfuscation.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:264:228 new in this release

21 consecutive `\xNN` escapes (entropy 3.8 bits/byte) (raw pass, confidence 0.65)
```
e5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\n\xe6\x9c\x8
```
likely benign LLM, confidence 0.90 Escaped UTF-8 Chinese text in the 2021 fixture row.
Reasoning
The bytes are UTF-8 encoded Chinese text decoded in a test data structure. This is the same benign localization fixture pattern as the other findings in this file.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:264:313 new in this release

18 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
4\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\n\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\xe5\x8f\xb8'.decode(), b'\xe7\xa8\xb3\xe5\xae\x9a'.decode()
```
likely benign LLM, confidence 0.95 Test fixture encoding Chinese financial text as UTF-8 byte escapes.
Reasoning
The escapes are UTF-8 bytes for Chinese text (e.g., 影响不大, 联合资信评估) decoded with .decode() in a test fixture of financial table data. This is a legitimate way to write non-ASCII test strings, not obfuscation.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:264:413 new in this release

18 consecutive `\xNN` escapes (entropy 3.7 bits/byte) (raw pass, confidence 0.65)
```
e5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\n\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\xe5\x8f\xb8'.decode(), b'\xe7\xa8\xb3\xe5\xae\x9a'.decode(), ],
```
likely benign LLM, confidence 0.95 Test data with UTF-8 Chinese strings written as byte escapes.
Reasoning
Same test fixture of UTF-8 byte-escaped Chinese strings decoded to text; benign localization test data in a tests file.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:265:41 new in this release

bytes literal contains 87 `\xNN` escapes (98% of content) — binary payload shape (ast pass, confidence 0.85)
```
                        ['2020', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf
```
likely benign LLM, confidence 0.93 Bytes literal holding UTF-8 Chinese text in a test table.
Reasoning
The bytes literal is UTF-8 encoded Chinese prose inside a test table fixture; the 'binary payload shape' is just multibyte text. No execution or decoding of hidden content beyond .decode() to text.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:265:43 new in this release

27 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.80)
```
                        ['2020', 'AA+', b'\xe5\x81\xbf\xe8\xbf\x98\xe5\x80\xba\xe5\x8a\xa1\xe7\x9a\x84\xe8\x83\xbd\xe5\x8a\x9b\xe5\xbe\x88\xe5\xbc\xba \xe5\x8f\x97\xe4\xb8\x8d\xe5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf
```
likely benign LLM, confidence 0.94 UTF-8 Chinese text escapes in a test fixture.
Reasoning
Raw-pass soup flag on the same UTF-8 Chinese text escapes in a test fixture; the byte sequences decode to readable financial wording.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:265:228 new in this release

21 consecutive `\xNN` escapes (entropy 3.8 bits/byte) (raw pass, confidence 0.65)
```
e5\x88\xa9\xe7\xbb\x8f\xe6\xb5\x8e\n\xef\xbc\x8c\n\xe7\x8e\xaf\xe5\xa2\x83\xe7\x9a\x84\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\n\xe6\x9c\x8
```
likely benign LLM, confidence 0.94 Chinese text byte escapes in test data.
Reasoning
Continuation of the same test fixture with UTF-8 Chinese text as byte escapes; legitimate internationalized test data.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:265:313 new in this release

18 consecutive `\xNN` escapes (entropy 3.9 bits/byte) (raw pass, confidence 0.65)
```
4\xe5\xbd\xb1\xe5\x93\x8d\xe4\xb8\x8d\xe5\xa4\xa7 \xe8\xbf\x9d\xe7\xba\xa6\xe9\xa3\x8e\xe9\x99\xa9\xe5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\n\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\xe5\x8f\xb8'.decode(), b'\xe7\xa8\xb3\xe5\xae\x9a'.decode()
```
likely benign LLM, confidence 0.94 Chinese text byte escapes in test data.
Reasoning
Same UTF-8 Chinese text fixture decoded to strings; no malicious execution path.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:265:413 new in this release

18 consecutive `\xNN` escapes (entropy 3.7 bits/byte) (raw pass, confidence 0.65)
```
e5\xbe\x88\xe4\xbd\x8e\n\xef\xbc\x8c'.decode(), b'\xe8\x81\x94\xe5\x90\x88\xe8\xb5\x84\xe4\xbf\xa1\xe8\xaf\x84\xe4\xbc\xb0\n\xe6\x9c\x89\xe9\x99\x90\xe5\x85\xac\xe5\x8f\xb8'.decode(), b'\xe7\xa8\xb3\xe5\xae\x9a'.decode(), ],
```
likely benign LLM, confidence 0.94 Chinese text byte escapes in test data.
Reasoning
Same pattern: UTF-8 encoded Chinese financial strings in a test fixture.
info ~~warn~~ → info by review encoding-hex tests/test_tables.py:268:66 new in this release

18 consecutive `\xNN` escapes (entropy 3.8 bits/byte) (raw pass, confidence 0.65)
```
         [b'\xe5\xba\x8f\xe5\x8f\xb7'.decode(), b'\xe9\x87\x91\xe8\x9e\x8d\xe6\x9c\xba\xe6\x9e\x84\xe5\x90\x8d\xe7\xa7\xb0'.decode(), b'\xe6\x8e\x88\xe4\xbf\xa1\xe6\x80\xbb\xe9\xa2\x9d'.decode(), b'\xe5\xb7\xb2\xe4\xbd\xbf\xe7\x94\xa8\xe6\x83\x85\xe5\x86\xb5'.decode(), b'\xe5\x89\xa9\xe4\xbd\x99\xe9\xa2\x9d\xe5\xba\xa6
```
likely benign LLM, confidence 0.94 Chinese table header strings written as byte escapes.
Reasoning
Byte literals decoded to Chinese column headers (序号, 金融机构名称, 授信总额) in a test table; typical localized test data.
info ~~warn~~ → info by review payload-bytes-literal tests/test_tables.py:270:31 new in this release

bytes literal contains 36 `\xNN` escapes (100% of content) — binary payload shape (ast pass, confidence 0.85)
```
                        ['2', b'\xe5\xbe\xbd\xe5\x95\x86\xe9\x93\xb6\xe8\xa1\x8c\xe5\x8d\x97\xe4\xba\xac\xe4\xb8\xad\xe5\xb1\xb1\xe5\x8c\x97\xe8\xb7\xaf\xe6\x94\xaf\xe8\xa1\x8c'.decode(), '33043530\n, .', '25673530\n, .', '7370000\n, .', ],
```
likely benign LLM, confidence 0.93 Bytes literal with a Chinese bank name in a test row.
Reasoning
Bytes literal decodes to a Chinese bank name in a test row; the AST payload-shape heuristic misfires on multibyte text. No dynamic execution.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:270:33 new in this release

36 consecutive `\xNN` escapes (entropy 4.3 bits/byte) (raw pass, confidence 0.80)
```
                        ['2', b'\xe5\xbe\xbd\xe5\x95\x86\xe9\x93\xb6\xe8\xa1\x8c\xe5\x8d\x97\xe4\xba\xac\xe4\xb8\xad\xe5\xb1\xb1\xe5\x8c\x97\xe8\xb7\xaf\xe6\x94\xaf\xe8\xa1\x8c'.decode(), '33043530\n, .', '25673530\n, .', '7370000\n, .', ],
```
likely benign LLM, confidence 0.94 Chinese bank name byte escapes in test data.
Reasoning
Raw escape-soup flag on the same Chinese bank-name fixture; benign test data.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:271:33 new in this release

24 consecutive `\xNN` escapes (entropy 4.1 bits/byte) (raw pass, confidence 0.80)
```
                        ['3', b'\xe5\x85\xb4\xe4\xb8\x9a\xe9\x93\xb6\xe8\xa1\x8c\xe7\x9b\x90\xe5\x9f\x8e\xe5\x88\x86\xe8\xa1\x8c'.decode(), '30260000\n, .', '11060000\n, .', '19200000\n, .', ],
```
likely benign LLM, confidence 0.94 Chinese bank branch name byte escapes in test data.
Reasoning
Chinese bank branch name as UTF-8 byte escapes decoded in a test fixture; benign.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:272:33 new in this release

24 consecutive `\xNN` escapes (entropy 4.1 bits/byte) (raw pass, confidence 0.80)
```
                        ['4', b'\xe6\xb0\x91\xe7\x94\x9f\xe9\x93\xb6\xe8\xa1\x8c\xe7\x9b\x90\xe5\x9f\x8e\xe5\x88\x86\xe8\xa1\x8c'.decode(), '26200000\n, .', '8850000\n, .', '17350000\n, .', ],
```
likely benign LLM, confidence 0.94 Chinese bank branch name byte escapes in test data.
Reasoning
Chinese bank branch name as UTF-8 byte escapes in a test fixture; benign.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:273:33 new in this release

24 consecutive `\xNN` escapes (entropy 4.1 bits/byte) (raw pass, confidence 0.80)
```
                        ['5', b'\xe4\xb8\xad\xe4\xbf\xa1\xe9\x93\xb6\xe8\xa1\x8c\xe7\x9b\x90\xe5\x9f\x8e\xe5\x88\x86\xe8\xa1\x8c'.decode(), '20508800\n, .', '20508800\n, .', '000\n.', ],
```
dismissed LLM, confidence 0.93 Test fixture encoding Chinese bank branch names as UTF-8 byte literals.
Reasoning
The raw-pass finding flags a run of UTF-8 bytes for Chinese bank-branch names in a test table. The bytes decode immediately to readable text, and the surrounding list holds expected test values. This is ordinary test data for CJK text, not obfuscation.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:274:33 new in this release

24 consecutive `\xNN` escapes (entropy 4.1 bits/byte) (raw pass, confidence 0.80)
```
                        ['6', b'\xe5\x8d\x97\xe4\xba\xac\xe9\x93\xb6\xe8\xa1\x8c\xe7\x9b\x90\xe5\x9f\x8e\xe5\x88\x86\xe8\xa1\x8c'.decode(), '17517000\n, .', '17517000\n, .', '000\n.', ],
```
dismissed LLM, confidence 0.93 Test fixture with a UTF-8 byte literal for a Chinese bank branch name.
Reasoning
Same pattern as the sibling finding: a UTF-8 byte literal for Chinese text (a bank branch name) that is decoded right away and used as expected test output. Raw-pass escape counts on non-ASCII text are a known false-positive shape.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:278:34 new in this release

30 consecutive `\xNN` escapes (entropy 4.3 bits/byte) (raw pass, confidence 0.80)
```
                        ['10', b'\xe6\x81\x92\xe4\xb8\xb0\xe9\x93\xb6\xe8\xa1\x8c\xe5\x8d\x97\xe4\xba\xac\xe6\xb1\x9f\xe5\x8c\x97\xe6\x94\xaf\xe8\xa1\x8c'.decode(), '9390000\n, .', '4350000\n, .', '5040000\n, .', ],
```
dismissed LLM, confidence 0.93 Test fixture holding expected Chinese bank branch names as encoded bytes.
Reasoning
A UTF-8 byte literal for Chinese bank branch names, decoded in place inside a test table of expected values. The high escape count reflects multibyte CJK characters, not hidden code.
info ~~warn~~ → info by review encoding-escape-soup tests/test_tables.py:279:34 new in this release

24 consecutive `\xNN` escapes (entropy 4.3 bits/byte) (raw pass, confidence 0.80)
```
                        ['11', b'\xe4\xb8\x8a\xe6\xb5\xb7\xe9\x93\xb6\xe8\xa1\x8c\xe7\x9b\x90\xe5\x9f\x8e\xe5\x88\x86\xe8\xa1\x8c'.decode(), '4626500\n, .', '4626500\n, .', '000\n.', ],
                    ],
                ]
```
dismissed LLM, confidence 0.93 Test fixture with an encoded Chinese bank branch name decoded in a table.
Reasoning
Again a UTF-8 encoded Chinese string decoded inside a test data list. Nothing executes or hides behavior; the bytes are simply the expected text.

info high-complexity tests/test_tables.py:1117:19 new in this release

compression ratio 0.573 is >2σ above file mean 0.436 (raw pass, confidence 0.50)

        text = """|Column 1|Column 2|Column 3|\n|---|---|---|\n|Zelle (0,0)|**Bold (0,1)**|Zelle (0,2)|\n|~~Strikeout (1,0), Zeile 1~~<br>~~Hier kommt Zeile 2.~~|Zelle (1,1)|~~Strikeout (1,2)~~|\n|**`Bold-monospaced`**<br>**`(2,0)`**|_Italic (2,1)_|**_Bold-italic_**<br>**_(2,2)_**|\n|Zelle (3,0)|~~**Bold-strikeout**~~<

info ~~warn~~ → info by review long-line docs/_static/prism/prism.js:3:1

line length 7422 characters (raw pass, confidence 0.65)
```
var _self="undefined"!=typeof window?window:"undefined"!=typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope?self:{},Prism=function(e){var n=/(?:^|\s)lang(?:uage)?-([\w-]+)(?=\s|$)/i,t=0,r={},a={manual:e.Prism&&e.Prism.manual,disableWorkerMessageHandler:e.Prism&&e.Prism.disableWorkerMessageHandler,util:{encode:
```
likely benign LLM, confidence 0.95 Minified Prism.js core in documentation assets.
Reasoning
Minified, bundled Prism syntax-highlighting library in docs static assets. Long lines are typical of minified distributions; no malicious behavior shown.

info ~~warn~~ → info by review long-line docs/_static/prism/prism.js:4:1

line length 2850 characters (raw pass, confidence 0.65)

Prism.languages.markup={comment:{pattern:/<!--(?:(?!<!--)[\s\S])*?-->/,greedy:!0},prolog:{pattern:/<\?[\s\S]+?\?>/,greedy:!0},doctype:{pattern:/<!DOCTYPE(?:[^>"'[\]]|"[^"]*"|'[^']*')+(?:\[(?:[^<"'\]]|"[^"]*"|'[^']*'|<(?!!--)|<!--(?:[^-]|-(?!->))*-->)*\]\s*)?>/i,greedy:!0,inside:{"internal-subset":{pattern:/(^[^\[]*\[)[

likely benign LLM, confidence 0.95 Prism markup language grammar in minified form.

Reasoning

Prism grammar definition for markup languages, minified. Long-line signal is an artifact of minification.

info high-complexity docs/_static/prism/prism.js:4:2390

compression ratio 0.891 is >2σ above file mean 0.656 (outside string/comment) (raw pass, confidence 0.25)

\s\S]+/,inside:{value:{pattern:/(^=\s*(["']|(?!["'])))\S[\s\S]*(?=\2$)/,lookbehind:!0,alias:[e,"language-"+e],inside:Prism.languages[e]},punctuation:[{pattern:/^=/,alias:"attr-equals"},/"|'/]}}}})}}),Prism.languages.html=Prism.languages.markup,Prism.languages.mathml=Prism.languages.markup,Prism.languages.svg=Prism.lang

info ~~warn~~ → info by review long-line docs/_static/prism/prism.js:7:1

line length 4611 characters (raw pass, confidence 0.65)

Prism.languages.javascript=Prism.languages.extend("clike",{"class-name":[Prism.languages.clike["class-name"],{pattern:/(^|[^$\w\xA0-\uFFFF])(?!\s)[_$A-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\.(?:constructor|prototype))/,lookbehind:!0}],keyword:[{pattern:/((?:^|\})\s*)catch\b/,lookbehind:!0},{pattern:/(^|[^.]|\.\.\.

likely benign LLM, confidence 0.95 Prism JavaScript grammar definition, minified.

Reasoning

Prism javascript grammar extending clike, minified. Regex-heavy but standard highlighter code.

info ~~warn~~ → info by review long-line docs/_static/prism/prism.js:8:1

line length 6143 characters (raw pass, confidence 0.65)

!function(e){var t="\\b(?:BASH|BASHOPTS|BASH_ALIASES|BASH_ARGC|BASH_ARGV|BASH_CMDS|BASH_COMPLETION_COMPAT_DIR|BASH_LINENO|BASH_REMATCH|BASH_SOURCE|BASH_VERSINFO|BASH_VERSION|COLORTERM|COLUMNS|COMP_WORDBREAKS|DBUS_SESSION_BUS_ADDRESS|DEFAULTS_PATH|DESKTOP_SESSION|DIRSTACK|DISPLAY|EUID|GDMSESSION|GDM_LANG|GNOME_KEYRING_C

likely benign LLM, confidence 0.95 Prism bash grammar keyword lists, minified.

Reasoning

Prism bash grammar with keyword lists, minified. No execution or obfuscation beyond normal minification.

info long-line docs/_static/prism/prism.js:10:1

line length 6179 characters (mostly string/comment) (raw pass, confidence 0.39)

!function(e){function n(e,n){return e.replace(/<<(\d+)>>/g,(function(e,s){return"(?:"+n[+s]+")"}))}function s(e,s,a){return RegExp(n(e,s),a||"")}function a(e,n){for(var s=0;s<n;s++)e=e.replace(/<<self>>/g,(function(){return"(?:"+e+")"}));return e.replace(/<<self>>/g,"[^\\s\\S]")}var t="bool byte char decimal double dyn

info ~~warn~~ → info by review long-line docs/_static/prism/prism.js:11:1

line length 2596 characters (raw pass, confidence 0.65)

!function(e){var t=/\b(?:alignas|alignof|asm|auto|bool|break|case|catch|char|char16_t|char32_t|char8_t|class|co_await|co_return|co_yield|compl|concept|const|const_cast|consteval|constexpr|constinit|continue|decltype|default|delete|do|double|dynamic_cast|else|enum|explicit|export|extern|final|float|for|friend|goto|if|im

likely benign LLM, confidence 0.95 Prism C/C++ grammar definition, minified.

Reasoning

Prism C-family grammar with keyword regex, minified standard highlighter code.

info ~~warn~~ → info by review long-line docs/_static/prism/prism.js:12:1

line length 2770 characters (raw pass, confidence 0.65)

!function(e){var n=/\b(?:abstract|assert|boolean|break|byte|case|catch|char|class|const|continue|default|do|double|else|enum|exports|extends|final|finally|float|for|goto|if|implements|import|instanceof|int|interface|long|module|native|new|non-sealed|null|open|opens|package|permits|private|protected|provides|public|reco

likely benign LLM, confidence 0.95 Prism Java grammar definition, minified.

Reasoning

Prism Java grammar keyword regex, minified standard highlighter code.

info ~~warn~~ → info by review long-line docs/_static/prism/prism.js:15:1

line length 2113 characters (raw pass, confidence 0.65)

Prism.languages.python={comment:{pattern:/(^|[^\\])#.*/,lookbehind:!0,greedy:!0},"string-interpolation":{pattern:/(?:f|fr|rf)(?:("""|''')[\s\S]*?\1|("|')(?:\\.|(?!\2)[^\\\r\n])*\2)/i,greedy:!0,inside:{interpolation:{pattern:/((?:^|[^{])(?:\{\{)*)\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}])+\})+\})+\}/,lookbehind

likely benign LLM, confidence 0.95 Prism Python grammar definition, minified.

Reasoning

Prism Python grammar with f-string regex, minified standard highlighter code.

info ~~warn~~ → info by review long-line docs/_static/prism/prism.js:17:1

line length 2939 characters (raw pass, confidence 0.65)

Prism.languages.swift={comment:{pattern:/(^|[^\\:])(?:\/\/.*|\/\*(?:[^/*]|\/(?!\*)|\*(?!\/)|\/\*(?:[^*]|\*(?!\/))*\*\/)*\*\/)/,lookbehind:!0,greedy:!0},"string-literal":[{pattern:RegExp('(^|[^"#])(?:"(?:\\\\(?:\\((?:[^()]|\\([^()]*\\))*\\)|\r\n|[^(])|[^\\\\\r\n"])*"|"""(?:\\\\(?:\\((?:[^()]|\\([^()]*\\))*\\)|[^(])|[^\\

likely benign LLM, confidence 0.95 Prism Swift grammar definition, minified.

Reasoning

Prism Swift grammar regex definitions, minified standard highlighter code.

info ~~warn~~ → info by review long-line docs/_static/prism/prism.js:18:1

line length 2896 characters (raw pass, confidence 0.65)
```
!function(){if("undefined"!=typeof Prism){var e=Object.assign||function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n]);return e},t={"remove-trailing":"boolean","remove-indent":"boolean","left-trim":"boolean","right-trim":"boolean","break-lines":"number",indent:"number","remove-initial-line-feed":"boolean","tabs-t
```
likely benign LLM, confidence 0.93 Minified Prism plugin for whitespace normalization.
Reasoning
Prism plugin code (code-toolbar/normalize-whitespace style) with config maps, minified. No network, execution, or encoded payload shown.

info long-line docs/page.rst:456:1

line length 564 characters (raw pass, confidence 0.50)

   .. method:: find_tables(clip=None, strategy=None, vertical_strategy=None, horizontal_strategy=None, vertical_lines=None, horizontal_lines=None, snap_tolerance=None, snap_x_tolerance=None, snap_y_tolerance=None, join_tolerance=None, join_x_tolerance=None, join_y_tolerance=None, edge_min_length=3, min_words_vertical=3

info unicode-mixed-script docs/samples/national-capitals.py:218:7

identifier `Nukuʻalofa` mixes scripts: Latin + Other (in string/comment) (raw pass, confidence 0.40)

Marshall Islands;Majuro;27797;66.1%;2011
Tonga;Nukuʻalofa;27600;26.0%;2022
Seychelles;Victoria;26450;24.8%;2010
French Polynesia (France);Papeete;26926;8.9%;2017

info ~~warn~~ → info by review dynamic-execution docs/samples/story-write.py:18:6

`open(__file__)` — file reads its own source, common pattern for extracting payloads hidden in comments (ast pass, confidence 0.85)
```
#
with open(__file__) as f:
    text = f.read()
text = html.escape(text)
```
likely benign LLM, confidence 0.90 Sample script reads its own file and HTML-escapes the contents.
Reasoning
Sample script reads its own source to HTML-escape it for display, a benign self-reading pattern. Nothing in the snippet extracts or executes hidden payloads.
info ~~critical~~ → info by review dynamic-execution setup.py:1046:9

`subprocess.run` with `shell=True` and a non-literal command — runtime-determined shell invocation (ast pass, confidence 0.85)
```
        log( f'Building MuPDF by running: {command}')
        subprocess.run( command, shell=True, check=True)
        log( f'Finished building mupdf.')
    
```
likely benign LLM, confidence 0.80 setup.py runs the MuPDF build command through a shell.
Reasoning
Build script runs a MuPDF build command via shell=True, with the command assembled locally from build configuration and logged before execution. This is standard for a native-library build step in setup.py, not a hidden dropper.
info ~~critical~~ → info by review dynamic-execution setup.py:1218:9

`subprocess.run` with `shell=True` and a non-literal command — runtime-determined shell invocation (ast pass, confidence 0.85)
```
        log( f'Building MuPDF by running: {command}')
        subprocess.run( command, shell=True, check=True)
        log( f'Finished building mupdf.')
    
```
likely benign LLM, confidence 0.85 Build script runs a locally constructed MuPDF build command through the shell.
Reasoning
This is the MuPDF build step in PyMuPDF's setup script. The command is built locally and logged before running, which is typical for a build script. The shell=True call is expected here, though the command is not shown in full.
info ~~warn~~ → info by review frame-introspection src/__init__.py:248:17

`inspect.stack` — call-stack frame introspection (ast pass, confidence 0.70)
```
    try:
        stack = inspect.stack(context=0)
    except StopIteration:
        pass
```
likely benign LLM, confidence 0.85 Library code reads the call stack, most likely for logging or diagnostics.
Reasoning
inspect.stack(context=0) in a library's source is commonly used to find caller information for logging or diagnostics. Nothing in the snippet points to malicious use.

info long-line tests/resources/simple_toc.txt:1:1

line length 1651 characters (raw pass, confidence 0.50)

[1, 'HAUPTÜBERSICHT', -1][1, 'Januar 01/2006', -1][2, 'SPEKTROGRAMM', -1][3, 'Urzeit-Godzilla', -1][3, 'Frühchristliche Mosaike im Knast', -1][3, 'Evolution auf Eis', -1][3, 'Entwarnung bei Kondensstreifen', -1][3, 'Spermatausch beim Schnecken-Sex', -1][3, 'Mehr Monde für Pluto', -1][3, 'Endlich ein Malaria-Impfstof

info long-line tests/test_geometry.py:342:1

line length 558 characters (raw pass, confidence 0.50)

    b = {'number': 0, 'type': 0, 'bbox': (403.3577880859375, 330.8871765136719, 541.2731323242188, 349.5766296386719), 'lines': [{'spans': [{'size': 14.0, 'flags': 4, 'font': 'SFHello-Medium', 'color': 1907995, 'ascender': 1.07373046875, 'descender': -0.26123046875, 'text': 'Inclusion and diversity', 'origin': (403.357

info ~~warn~~ → info by review dynamic-execution tests/test_story.py:120:22

`eval` called on a non-literal expression (ast pass, confidence 0.70)
```
        '''
        fit_result = eval(call)
        
        print(f'test_fit_springer(): {call=} => {fit_result=}.')
```
likely benign LLM, confidence 0.80 Test helper evaluates a generated call expression to get a fit result.
Reasoning
This is a test file evaluating a string containing a call expression to check a fit result. The eval is confined to test code and the input is a local test variable.

info high-complexity tests/test_textextract.py:893:25

compression ratio 0.747 is >2σ above file mean 0.490 (raw pass, confidence 0.50)

    expected_1_23_5 = b'JOB No.: \nShipper (complete name and address) \xe5\x8f\x91\xe8\xb4\xa7\xe4\xba\xba(\xe5\x90\x8d\xe7\xa7\xb0\xe5\x8f\x8a\xe5\x9c\xb0\n\xe5\x9d\x80) \nSINORICH TRANSPORT LIMITED\nADD:7C,WEST BLDG.,ZHONGQU\nMANSION,211 ZHONGSHAN\nRD. SHANTOU,515041 CN\nTEL:0754-88570001 FAX:0754-88572709\nS/O No.

info ~~warn~~ → info by review payload-bytes-literal tests/test_textextract.py:896:29

bytes literal contains 57 `\xNN` escapes (55% of content) — binary payload shape (ast pass, confidence 0.85)
```
    expected_mupdf_1_26_1 = b'JOB No.: Shipper (complete name and address) \xe5\x8f\x91\xe8\xb4\xa7\xe4\xba\xba(\xe5\x90\x8d\xe7\xa7\xb0\xe5\x8f\x8a\xe5\x9c\xb0\xe5\x9d\x80)  Tel:                                  Fax: \n \nS/O No. \xe6\x89\x98\xe8\xbf\x90\xe5\x8d\x95\xe5\x8f\xb7\xe7\xa0\x81     \nSINORICH TRANSPORT LIM
```
dismissed LLM, confidence 0.92 Expected-output byte literal of a UTF-8 shipping document in a text-extraction test.
Reasoning
This is an expected-output bytes literal for a text-extraction test. The bytes are UTF-8 Chinese text mixed with ASCII shipping-order content. A binary-payload shape is only apparent; the literal is a fixture the test compares against extracted text.
info ~~warn~~ → info by review payload-bytes-literal tests/test_textextract.py:899:29

bytes literal contains 51 `\xNN` escapes (51% of content) — binary payload shape (ast pass, confidence 0.85)
```
    expected_mupdf_1_27_0 = b'JOB No.: \n \nS/O No. \xe6\x89\x98\xe8\xbf\x90\xe5\x8d\x95\xe5\x8f\xb7\xe7\xa0\x81   \nSINORICH TRANSPORT LIMITED \nSHIPPING ORDER \n\xe6\x89\x98\xe8\xbf\x90\xe5\x8d\x95 \n \xe5\xb8\x82\xe5\x9c\xba\xe9\x83\xa8: \n88570009 \n88577019 \n88572702 \n \xe6\x93\x8d\xe4\xbd\x9c\xe9\x83\xa8: \n885
```
dismissed LLM, confidence 0.92 Expected-output byte literal of a UTF-8 shipping order in a PDF text-extraction test.
Reasoning
Same fixture pattern: an expected MuPDF extraction output stored as UTF-8 bytes with Chinese shipping-order text. It is test data for comparison, with no execution or decoding of hidden content.

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.1.0
git clone https://github.com/pymupdf/pymupdf pymupdf && cd pymupdf
git checkout 2.0
disclude scan --severity info --diff 1.28.2 .