pub fn scan(decoded: &str) -> Vec<Match>Expand description
Scan decoded text and return all pattern + Unicode anomaly matches.
decoded is expected to already be the output of
crate::paste::obfuscation::decode_chain; calling this directly on
raw input still works but will miss base64-wrapped payloads.
An empty return value means clean (no Aho-Corasick hit, no Unicode
anomaly). The caller (crate::paste::detect) maps the length of this
vector to a crate::paste::Verdict via fixed thresholds.