varuna 0.1.0

Runtime network monitor for Python packages — detects external API calls and sensitive data exfiltration

Varuna

Runtime network monitor for Python packages — detects external API calls and sensitive data exfiltration in real time.

pip install varuna

---

The Problem

When you use libraries like LangChain, LiteLLM, or the OpenAI SDK, they make network calls to external servers. You trust them — but do you know exactly what data they are sending? Your API keys, machine hostname, username, and environment variables can leave your machine silently, without you realising it.

The Solution

Varuna sits inside your Python process, intercepts every outbound network call across all protocols (HTTP, HTTPS, DNS, gRPC, raw TCP), inspects the payload for sensitive data, and shows you everything live on a terminal dashboard.

---

Quick Start

As a context manager

from pypi_interceptor import NetworkMonitor

with NetworkMonitor():
    import requests
    requests.post("https://api.openai.com/v1/chat/completions",
        headers={"Authorization": "Bearer sk-..."},
        json={"model": "gpt-4", "messages": [...]}
    )

As a decorator

from pypi_interceptor import NetworkMonitor

@NetworkMonitor.watch
def my_pipeline(prompt):
    from langchain import PromptTemplate
    # ... your code here

As a CLI (zero code changes)

varuna run my_script.py
varuna run -m my_module
varuna run -c "import requests; requests.get('https://api.openai.com')"

---

What It Detects

• API keys and bearer tokens in headers
• OpenAI / AWS / generic API keys in body or URL
• JWT tokens
• Machine hostname and local IP addresses
• System username
• Environment variable values (e.g. $OPENAI_API_KEY)
• File paths leaking from the machine
• Email addresses, credit card numbers, SSN patterns

---

Live Dashboard

╭─────────────────────────────────────────────────────────────────╮
│  Varuna  |  Process: my_script.py  PID: 1234  Elapsed: 00:03   │
╰─────────────────────────────────────────────────────────────────╯
╭─────────────────────────────── Stats ───────────────────────────╮
│  HTTPS 2  DNS 2  TCP 0  gRPC 0  |  Unique Hosts: 1  CRITICAL:1 │
╰─────────────────────────────────────────────────────────────────╯
╭──────────────────────────── Network Events ─────────────────────╮
│  Time       Proto  Method  Destination       Risk      PII      │
│  18:01:12   HTTPS  POST    api.openai.com   CRITICAL  YES      │
│  18:01:11   DNS    QUERY   api.openai.com   LOW        ·       │
╰─────────────────────────────────────────────────────────────────╯
╭──────────────────────────── Alerts ─────────────────────────────╮
│  [CRITICAL] api.openai.com — API key in Authorization header    │
│  [CRITICAL] api.openai.com — Hostname found in request body     │
╰─────────────────────────────────────────────────────────────────╯

---

Full Documentation

• Setup Guide
• Project Overview & Comparison

---

License

MIT