github.com / CJBiohacker

CJBiohacker/TripScriptApp-SpringBoot_Java_React

JavaScript·74 files·commit dfdc7c7·scanned 4d ago·cached ✓

9/100

SAFE

No malicious patterns found. Repo signals are consistent with a legitimate project.

verdict accurate?

threat-state: safelive

FINDINGS ░▒▓

warningSuspicious Windows batch commandBatch file contains commands commonly used to download and execute remote payloads (powershell, certutil, bitsadmin, curl to pipe, etc.).BackEnd/mvnw.cmd


    powershell -Command "&{"^
		"$webclient = new-object System.Net.WebClient;"^
		"if (-not ([string]::IsNullOrEmpty('%MVNW_USERNAME%') -and [string]::IsNullOrEmpty('%MVNW_PASSWORD%'))) {"^

infoSuspicious file in repoExecutable file (mvnw.cmd) in repositoryBackEnd/mvnw.cmd+2

infoSuspicious file in repoVery large source file (2205KB) — could contain obfuscated payloadFrontEnd/tripscript-react/package-lock.json+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

19 files scanned @ dfdc7c7 | 10/25/2026 | heuristic scan — always review manually

risk by category

code execution5

network & exfiltration0

file system access0

obfuscation0

supply chain4

owasp / injection0

telemetry

files 19/74rules hit 3engine v7commit dfdc7c7

github

CJBiohacker/TripScriptApp-SpringBoot_Java_React

Projeto de avaliação RecodePro, uma aplicação FullStack de uma agência de viagens, utilizando SpringBoot, Maven Java, React e MySQL (via XAMPP).

JavaScript

1737d

74 files

19 scanned(26%)

dfdc7c7

architecture░▒▓

entry (0) flagged (0) pkg (11)

28 nodes · 39 edgesscroll to zoom · click node to jump to finding