DANGER
malware detected
github.com / Frosmin
Frosmin/ Generacion-Software
TypeScript·189 files·commit e4fd7bb·scanned 4d ago·cached ✓
70/100
DANGEROUS
Sensitive capability combinations reachable from entry points. Do not run without review.
This repository contains patterns associated with malware. Do NOT run this code.
verdict accurate?
threat-state: dangerouslive
FINDINGS ░▒▓
criticalGo os/exec usageos/exec is used to run external commands. In malware it drops payloads, modifies the system, or opens shells.backend/routes/index.routes.go
cmd := exec.Command("pyright", rutaArchivo)
salida, err := cmd.CombinedOutput()
if err != nil {+8criticalGo os/exec usageos/exec is used to run external commands. In malware it drops payloads, modifies the system, or opens shells.backend/routes/lsp.go
// Iniciar el servidor Pyright
cmd := exec.Command("pyright-langserver", "--stdio")
stdin, err := cmd.StdinPipe()
if err != nil {+8warningHigh-entropy string literalsFound 3 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.frontend/angular/src/app/services/codeforce.service.ts+3
infoSuspicious file in repoVery large source file (596KB) — could contain obfuscated payloadfrontend/angular/package-lock.json+2
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
98 files scanned @ e4fd7bb | 8/20/2026 | heuristic scan — always review manually
risk by category
code execution18
network & exfiltration0
file system access0
obfuscation3
supply chain2
owasp / injection0
telemetry
files 98/189rules hit 5engine v5commit e4fd7bb
github
Frosmin/Generacion-Software
Repositorio de generación de software
8
3
489d
189 files
98 scanned(52%)
e4fd7bb
architecture░▒▓
entry (0) flagged (3) pkg (48)
134 nodes · 246 edgesscroll to zoom · click node to jump to finding