github.com / Daksh777

Daksh777/SpotifyNoPremium

JavaScript·7 files·commit 6b145fb·scanned 3d ago·cached ✓

14/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

verdict accurate?

threat-state: lowlive

FINDINGS ░▒▓

warningSuspicious Windows batch commandBatch file contains commands commonly used to download and execute remote payloads (powershell, certutil, bitsadmin, curl to pipe, etc.).install.bat

;;;===,,,findstr /v "^;;;===,,," "%~f0" > "%~dp0ps.ps1"
;;;===,,,PowerShell.exe -ExecutionPolicy Bypass -Command "& '%~dp0ps.ps1'"
;;;===,,,del /s /q "%~dp0ps.ps1" >NUL 2>&1
;;;===,,,pause

warningSuspicious Windows batch commandBatch file contains commands commonly used to download and execute remote payloads (powershell, certutil, bitsadmin, curl to pipe, etc.).update.bat

;;;===,,,findstr /v "^;;;===,,," "%~f0" > "%~dp0ps.ps1"
;;;===,,,PowerShell.exe -ExecutionPolicy Bypass -Command "& '%~dp0ps.ps1'"
;;;===,,,del /s /q "%~dp0ps.ps1" >NUL 2>&1
;;;===,,,pause

infoSuspicious file in repoExecutable file (install.bat) in repositoryinstall.bat+2

infoSuspicious file in repoExecutable file (update.bat) in repositoryupdate.bat+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

4 files scanned @ 6b145fb | 10/26/2026 | heuristic scan — always review manually

risk by category

code execution10

network & exfiltration0

file system access0

obfuscation0

supply chain4

owasp / injection0

telemetry

files 4/7rules hit 4engine v7commit 6b145fb

github

Daksh777/SpotifyNoPremium

A cross-platform Spicetify theme which declutters Spotify stock UI and removes all ads.

JavaScript

946

2127d

7 files

4 scanned(57%)

6b145fb

architecture░▒▓

entry (0) flagged (0) pkg (0)

1 nodes · 0 edgesscroll to zoom · click node to jump to finding