the repository documentation emphasizes that the system is for research purposes and does not involve trading or order execution. it uses telegram for alerts and has no private keys or order-execution capability.
This repository contains patterns associated with malware. Do NOT run this code.
verdict accurate?
Created 1 days ago
No stars or forks
Crypto/Web3 project
Created in the last 7 days
No community activity
threat-state: dangerouslive
FINDINGS ░▒▓
infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2
infoLLM: classified as security tool / researchAI analysis classified this repo as a security tool, POC, or research project with high confidence. It may implement dangerous capabilities, but the stated intent appears legitimate. the repository documentation emphasizes that the system is for research purposes and does not involve trading or order execution. it uses telegram for alerts and has no private keys or order-execution capability.+0
warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.app/(tabs)/index.tsx+4
warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.app/(tabs)/signals.tsx+4
warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.components/dashboard-auth-screen.tsx+4
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.server/_core/env.ts+3
warningHigh-entropy string literalsFound 4 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.server/_core/imageGeneration.ts+3
warningHigh-entropy string literalsFound 4 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.server/_core/llm.ts+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.server/_core/oauth.ts+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.server/_core/sdk.ts+3
warningHigh-entropy string literalsFound 5 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.server/db.ts+3
infoNative addon dependency"@react-native-async-storage/async-storage" includes native compiled code. Native addons can hide behavior that static JS analysis cannot see.package.json+2
infoNative addon dependency"@react-navigation/native" includes native compiled code. Native addons can hide behavior that static JS analysis cannot see.package.json+2
infoNative addon dependency"react-native" includes native compiled code. Native addons can hide behavior that static JS analysis cannot see.package.json+2
infoAuthor has no other public repositoriesGitHub user "manus-agent" has no other public repositories, common for burner accounts used in scams.+2
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
AI analysis classified this repo as a security tool, POC, or research project with high confidence. It may implement dangerous capabilities, but the stated intent appears legitimate. the repository documentation emphasizes that the system is for research purposes and does not involve trading or order execution. it uses telegram for alerts and has no private keys or order-execution capability.
confidence high · informs the score, does not decide it
telemetry
files 111/176rules hit 15engine v5commit 51e3e89
github
CuongTranXuan/cryptosignal-mobile
Documentation-first Expo companion app for a Telegram-controlled, signals-only crypto OHLCV analysis system. The scaffold is initialized for future work; no trading logic or order execution is implemented. · Built with Manus
TypeScript
0
0
6d
176 files
111 scanned(63%)
51e3e89
architecture░▒▓
entry (0) flagged (13) pkg (88)
184 nodes · 298 edgesscroll to zoom · click node to jump to finding