CoderGhost37/NFT-Marketplace-CryptoKet

JavaScript·82 files·commit 4505172·scanned 1h ago·cached ✓

70/100

DANGEROUS

Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

Crypto/Web3 project

threat-state: dangerouslive

FINDINGS ░▒▓

criticalBrowser wallet app with Node/system accessThe repository interacts with browser wallets but also accesses the filesystem or executes shell/code. This context mismatch is typical of hybrid drainer/infostealer malware.+10

infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2

infoBrowser wallet provider accessAccesses browser wallet providers (window.solana, window.ethereum, Phantom, Solflare, etc.). Common in Web3 apps but also the entry point for wallet drainers.context/NFTContext.js

  const checkIfWalletIsConnected = async () => {
    if (!window.ethereum) {
      return alert('Please install MetaMask');
    }

criticalCryptocurrency wallet directory accessAccessing wallet directories to steal private keys, seed phrases, or wallet data.context/NFTContext.js+5

warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.context/NFTMarketplace.json+4

infoAuthor has no other public repositoriesGitHub user "Ghost" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

35 files scanned @ 4505172 | 9/25/2026 | heuristic scan — always review manually

risk by category

code execution12

network & exfiltration0

file system access7

obfuscation4

supply chain2

owasp / injection0

telemetry

files 35/82rules hit 6engine v6commit 4505172

github

CoderGhost37/NFT-Marketplace-CryptoKet

My first Web3.0 project CryptoKet made using the immense power of Solidity and Next.js. This project combines futuristic elements of Web3 blockchain development and the popular culture wave of non-fungible tokens (NFT).

JavaScript

1551d

82 files

35 scanned(43%)

4505172

architecture░▒▓

entry (1) flagged (1) pkg (19)

52 nodes · 104 edgesscroll to zoom · click node to jump to finding