live · scanning repos
Scanrepo
github.com
DANGER
malware detected
github.com / 0x90shell

0x90shell/jstimeout

Go·9 files·commit 41c8a51·scanned 1h ago·cached ✓
70/100
DANGEROUS
Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?
threat-state: dangerouslive

FINDINGS ░▒▓

criticalGo os/exec usageos/exec is used to run external commands. In malware it drops payloads, modifies the system, or opens shells.jstimeout.go
func disconnectDevice(uniq string) {
	cmd := exec.Command("bluetoothctl", "disconnect", uniq) //nolint:gosec,noctx // G204: uniq is BT MAC from /proc; no context needed for short-lived disconnect
	err...
+8
infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

2 files scanned @ 41c8a51 | 9/25/2026 | heuristic scan — always review manually

risk by category
code execution10
network & exfiltration0
file system access0
obfuscation0
supply chain0
owasp / injection0
telemetry
files 2/9rules hit 2engine v6commit 41c8a51

github

0x90shell/jstimeout

Go
2
0
208d
9 files
2 scanned(22%)
41c8a51

architecture░▒▓

entry (0) flagged (1) pkg (7)
9 nodes · 9 edgesscroll to zoom · click node to jump to finding