github.com / Axorax

Axorax/awesome-free-apps

JavaScript·25 files·commit 6db0b09·scanned 4d ago·cached ✓

25/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

score capped at 25 — 7,477 stars — findings likely legitimate code patterns

verdict accurate?

Research / educational context

threat-state: lowlive

FINDINGS ░▒▓

criticalchild_process / exec usageExecuting shell commands can be used to download and run malware, exfiltrate data, or modify system files.index.js

const fs = require('fs');
const { execSync, spawn } = require('child_process');

function create(file, fileName, emoji) {

warningHigh-entropy string literalsFound 8 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.index.js+3

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

1 files scanned @ 6db0b09 | 8/21/2026 | heuristic scan — always review manually

risk by category

code execution8

network & exfiltration0

file system access0

obfuscation3

supply chain0

owasp / injection0

telemetry

files 1/25rules hit 2engine v5commit 6db0b09

github

Axorax/awesome-free-apps

Curated list of the best free apps for PC and mobile

JavaScript

7477

443

671d

25 files

1 scanned(4%)

6db0b09

architecture░▒▓

entry (1) flagged (1) pkg (0)

1 nodes · 0 edgesscroll to zoom · click node to jump to finding