{"categories":[{"label":"Libraries","url":"https://skillfed.io/packages/category/software-development-libraries/6"}],"enrichment":{"capability":"CaRT is a file format and Python library for compressing, encrypting, and storing malware samples alongside metadata using RC4 and zlib, with optional STIX v2 integration.","skillfed_tags":["malware-analysis","threat-intelligence","stix-integration"],"use_cases":["Archive malware samples for security research with embedded STIX v2 threat reports without triggering antivirus alerts","Transfer suspected malware between security teams with metadata and hash verification built into the file structure","Store malware collections with streaming compression to reduce storage footprint while preserving metadata accessibility","Integrate threat intelligence reports directly into malware samples for downstream analysis tools via STIX v2 JSON embedding","Read file hashes and metadata from archived samples without decompressing the full payload for rapid triage"],"what_it_does":"CaRT is a specialized file format designed to safely store and transfer malware samples by compressing them with zlib, encrypting them with RC4, and embedding associated metadata\u2014including optional STIX v2 threat intelligence reports\u2014all within a single .cart file. The format includes a mandatory header and footer structure that allows metadata and hash information to be read without decompressing the entire payload, and it uses a default RC4 key (first 8 digits of pi, twice) unless overridden with a custom key.\n\nThe package provides both a Python library for programmatic access and a command-line interface that automatically detects whether to encode or decode a file. It reads optional metadata from .cartmeta files with matching prefixes and supports configuration via ~/.cart/cart.cfg. The primary use case is in malware analysis and threat intelligence workflows where samples must be safely archived and shared without triggering antivirus detection or accidental execution.","worth_installing":"Yes, if you work in malware analysis, threat intelligence, or security research and need a standardized format for safe malware storage and transfer with embedded metadata. The low install friction, permissive license, and lack of known vulnerabilities make it a safe choice. However, note that maintenance is dormant and RC4 is cryptographically weak by modern standards\u2014verify that RC4 meets your security requirements before adopting for new systems rather than legacy workflows."},"id":"cart","links":{"html":"https://skillfed.io/packages/cart","md":"https://skillfed.io/packages/cart.md","pypi":"https://pypi.org/project/cart/"},"maintenance":{"status":"dormant"},"meta":{"latest_release":"2025-02-10","license_spdx":null,"license_treatment":"permissive","name":"cart","python_support":"supports_current","summary":"CaRT Neutering format"},"popularity":{"monthly_downloads":360936,"position":7241,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.2.3"}