DANGER
malware detected
github.com / LOUDO56
LOUDO56/ pymacrorecord
Python·66 files·commit 085c60a·scanned 53m ago·cached ✓
70/100
DANGEROUS
Sensitive capability combinations reachable from entry points. Do not run without review.
This repository contains patterns associated with malware. Do NOT run this code.
verdict accurate?
threat-state: dangerouslive
FINDINGS ░▒▓
criticaleval() usage detectedeval() executes arbitrary code and is commonly used in malware to run obfuscated payloads fetched from remote servers.src/macro/macro.py
else:
keyToPress = eval(self.macro_events["events"][events]["key"])
if isinstance(keyToPress, str):
...+8criticalPython dynamic code executioneval(), exec() or compile() on untrusted input can execute arbitrary code. Common in Python malware for running obfuscated payloads.src/macro/macro.py
else:
keyToPress = eval(self.macro_events["events"][events]["key"])
if isinstance(keyToPress, str):
...+7warningHigh-entropy string literalsFound 4 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/windows/help/about.py+3
warningHigh-entropy string literalsFound 4 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/windows/options/playback/time_gui.py+3
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
51 files scanned @ 085c60a | 9/25/2026 | heuristic scan — always review manually
risk by category
code execution17
network & exfiltration0
file system access0
obfuscation6
supply chain2
owasp / injection0
telemetry
files 51/66rules hit 6engine v6commit 085c60a
github
LOUDO56/pymacrorecord
Free and Open Source Macro Recorder with a modern GUI using Python
622
108
1148d
66 files
51 scanned(77%)
085c60a
architecture░▒▓
entry (1) flagged (3) pkg (41)
77 nodes · 124 edgesscroll to zoom · click node to jump to finding