DojoCodingLabs/remotion-superpowers

Shell·60 files·commit 0e914e4·scanned 1d ago·cached ✓

85/100

MALICIOUS

Matches known-malicious patterns. Do not clone or install.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

Crypto/Web3 project

threat-state: maliciouslive

FINDINGS ░▒▓

criticalRemote script piped into a shellA shell script downloads remote content and executes it directly (e.g. `curl … | bash`). The payload is never stored or reviewable and can change server-side — a classic malware/backdoor install pattern.scripts/setup-check.sh

    echo -e "  ${YELLOW}⚠${NC} uvx not found (only for the optional ElevenLabs MCP server)"
    echo "     Install: curl -LsSf https://astral.sh/uv/install.sh | sh"
    WARNINGS=$((WARNINGS + 1))
fi

+10

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

10 files scanned @ 0e914e4 | 10/28/2026 | heuristic scan — always review manually

risk by category

code execution10

network & exfiltration0

file system access0

obfuscation0

supply chain0

owasp / injection0

telemetry

files 10/60rules hit 1engine v7commit 0e914e4

github

DojoCodingLabs/remotion-superpowers

🎬 Full video production studio for Remotion — for Claude Code, Codex, Gemini CLI & any Agent Skills agent. AI voiceovers, music, stock footage, image/video generation, TikTok captions, transitions & AI review loop. 15 skills, 5 MCP servers. Free & open source by Dojo Coding.

Shell

145

263d

60 files

10 scanned(17%)

0e914e4

architecture░▒▓

No architecture graph available. This usually happens when the repo contains no scannable JS/TS/Python files or only a single file was analyzed.