picklescan

library1.0.4pypypiunverified

A security scanner that detects malicious Pickle files by analyzing the bytecode for suspicious operations like arbitrary code execution, file I/O, and import of dangerous modules. Version 1.0.4, released monthly.

data

pip install picklescan

github ↗package ↗

INSTALL

IMPORT

SIG · PICKLESCAN

picklescan

datapythonv1.0.4

Install

1.6s avg

Import

—

Disk

16MB

Pass rate

10/ 10

Env Coverage10 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v1.0.4 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

py 3.10–3.95 runs

installs and imports cleanly · install 0.0s · import 0.000s · 17.9MB

glibc

py 3.10–3.95 runs

installs and imports cleanly · install 1.6s · import 0.000s · 18MB

16MB installed

● package 16MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

scan_pickle_file

✓ from picklescan import scan_pickle_file

✗ from picklescan.scanner import scan_pickle_file

Scan a pickle file for malicious opcodes.

from picklescan.scanner import scan_pickle_file result = scan_pickle_file("model.pkl") if result.issues: print("Dangerous pickle detected!") else: print("File appears safe")

picklescan --version

Debug

Known issues

breakingPickleScan is a detection tool, not a prevention tool. It can be bypassed by sophisticated attackers. Do not rely on it as the sole security measure.

fix

Always verify the source of pickle files and use sandboxing if possible.

affects: all

deprecatedImporting `picklescan.scanner` directly may cause confusion; the module is not publicly documented as stable API. Changes in internal module structure can break imports.

fix

Use the documented CLI or the official `scan_pickle_file` / `scan_pytorch_file` functions.

affects: >=0.0.31

gotchaThe scanner may produce false negatives for obfuscated payloads. Some bypasses have been patched but new ones may exist.

fix

Update to the latest version regularly and combine with other security measures.

affects: all

Upgrade

Version history

1.0.4latest on PyPI · released Mar 2, 2026

Audit

Dependencies

No dependency data recorded yet.

Agent activity

3 hits · last 30 days

node

Resources

githubhttps://github.com/mmaitre314/picklescan ↗

packagehttps://pypi.org/project/picklescan/ ↗