github.com / Aspenini

Aspenini/quark-downloader

Crystal·88 files·commit 1681721·scanned 4d ago·cached ✓

14/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

verdict accurate?

No stars or forks

No community activity

threat-state: lowlive

FINDINGS ░▒▓

infoSuspicious file in repoExecutable file (build.ps1) in repositoryscripts/windows/build.ps1+2

infoSuspicious file in repoExecutable file (clean.ps1) in repositoryscripts/windows/clean.ps1+2

infoSuspicious file in repoExecutable file (common.ps1) in repositoryscripts/windows/common.ps1+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

4 files scanned @ 1681721 | 8/21/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access0

obfuscation0

supply chain14

owasp / injection0

telemetry

files 4/88rules hit 3engine v5commit 1681721

github

Aspenini/quark-downloader

a simple yt-dlp wrapper built with crystal

Crystal

85d

88 files

4 scanned(5%)

1681721

architecture░▒▓

No architecture graph available. This usually happens when the repo contains no scannable JS/TS/Python files or only a single file was analyzed.