DANGER
malware detected
github.com / 0x90shell
0x90shell/ jstimeout
Go·9 files·commit 41c8a51·scanned 1h ago·cached ✓
70/100
DANGEROUS
Sensitive capability combinations reachable from entry points. Do not run without review.
This repository contains patterns associated with malware. Do NOT run this code.
verdict accurate?
threat-state: dangerouslive
FINDINGS ░▒▓
criticalGo os/exec usageos/exec is used to run external commands. In malware it drops payloads, modifies the system, or opens shells.jstimeout.go
func disconnectDevice(uniq string) {
cmd := exec.Command("bluetoothctl", "disconnect", uniq) //nolint:gosec,noctx // G204: uniq is BT MAC from /proc; no context needed for short-lived disconnect
err...+8Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
2 files scanned @ 41c8a51 | 9/25/2026 | heuristic scan — always review manually
risk by category
code execution10
network & exfiltration0
file system access0
obfuscation0
supply chain0
owasp / injection0
telemetry
files 2/9rules hit 2engine v6commit 41c8a51
github
0x90shell/jstimeout
2
0
208d
9 files
2 scanned(22%)
41c8a51
architecture░▒▓
entry (0) flagged (1) pkg (7)
9 nodes · 9 edgesscroll to zoom · click node to jump to finding