github.com / KartikDehru

KartikDehru/chainlink-project

JavaScript·38 files·commit 3355476·scanned 4h ago·cached ✓

10/100

SAFE

No malicious patterns found. Repo signals are consistent with a legitimate project.

scored by engine v9: rules have changed since, rescan for the current result

verdict accurate?

No stars or forks

No community activity

Social engineering indicators

threat-state: safelive

FINDINGS ░▒▓

infoBrowser wallet provider accessAccesses browser wallet providers (window.solana, window.ethereum, Phantom, Solflare, etc.). Common in Web3 apps but also the entry point for wallet drainers.src/AdvancedApp.js

    checkIfWalletIsConnected();
    if (window.ethereum) {
      window.ethereum.on('accountsChanged', handleAccountsChanged);
      window.ethereum.on('chainChanged', handleChainChanged);

    checkIfWalletIsConnected();
    if (window.ethereum) {
      window.ethereum.on('accountsChanged', handleAccountsChanged);
      window.ethereum.on('chainChanged', (chainId) => {

    checkIfWalletIsConnected();
    if (window.ethereum) {
      window.ethereum.on('accountsChanged', handleAccountsChanged);
      window.ethereum.on('chainChanged', (chainId) => {

infoWallet transaction signing APIUses wallet signing APIs (signTransaction, signMessage, sendTransaction, etc.). Legitimate in DeFi apps, but combined with remote exfiltration it is the core drainer pattern.test/PricePredictionDApp.test.js

      // Send some ETH to contract first
      await owner.sendTransaction({
        to: await contract.getAddress(),
        value: ethers.parseEther("1.0")

infoSuspicious file in repoVery large source file (913KB) — could contain obfuscated payloadpackage-lock.json+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

28 files scanned @ 3355476 | 10/29/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access8

obfuscation0

supply chain2

owasp / injection0

telemetry

files 28/38rules hit 5engine v9commit 3355476

github

KartikDehru/chainlink-project

JavaScript

487d

38 files

28 scanned(74%)

3355476

architecture░▒▓

entry (5) flagged (0) pkg (9)

29 nodes · 27 edgesscroll to zoom · click node to jump to finding