BimaBalance/sapujagat

Shell·5 files·commit 32fd5cd·scanned 11h ago·cached ✓

70/100

DANGEROUS

Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

Created 13 days ago

Research / educational context

threat-state: dangerouslive

FINDINGS ░▒▓

criticaleval() usage detectedeval() executes arbitrary code and is commonly used in malware to run obfuscated payloads fetched from remote servers.sapujagat.sh

    local b64; b64=$(printf 'alert(document.domain)' | base64 -w0 2>/dev/null || printf 'alert(document.domain)' | base64)
    echo "<script>eval(atob('${b64}'))</script>"
    echo "<script>eval(Strin...

infoBase64 encoding usedatob() or Buffer.from with base64. Common in legitimate code but also used to hide malicious URLs.sapujagat.sh

    local b64; b64=$(printf 'alert(document.domain)' | base64 -w0 2>/dev/null || printf 'alert(document.domain)' | base64)
    echo "<script>eval(atob('${b64}'))</script>"
    echo "<script>eval(Strin...

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

1 files scanned @ 32fd5cd | 10/30/2026 | heuristic scan — always review manually

risk by category

code execution8

network & exfiltration2

file system access0

obfuscation0

supply chain0

owasp / injection0

telemetry

files 1/5rules hit 2engine v10commit 32fd5cd

github

BimaBalance/sapujagat

Like a bjorka

Shell

13d

5 files

1 scanned(20%)

32fd5cd

network indicators░▒▓

Hosts this code names or would connect to. 1 found, decoded and call-site destinations first. Informational, not scored.

http://t.comurlsapujagat.sh:1327

architecture░▒▓

No architecture graph available. This usually happens when the repo contains no scannable JS/TS/Python files or only a single file was analyzed.