ScanRepo

Code Execution

eval(), Function(), child_process

Data Exfiltration

Suspicious domains, hardcoded IPs

Credential Theft

Browser profiles, wallets, SSH

Obfuscation

Hex encoding, minified source

Supply Chain

Malicious scripts & packages