github.com / Mathieu2301

Mathieu2301/TradingView-API

JavaScript·54 files·commit 5baea86·scanned 1h ago·cached ✓

25/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

score capped at 25 — 5,354 stars — findings likely legitimate code patterns

verdict accurate?

Crypto/Web3 project

threat-state: lowlive

FINDINGS ░▒▓

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: src/chart/graphicParser.js, src/miscRequests.js. This means the suspicious code can execute when the app runs.+8

warningCluster of suspicious files reachable from entry2 flagged files form a connected cluster that is reachable from an entry point, suggesting coordinated malicious behavior rather than isolated false positives.+5

warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.src/chart/graphicParser.js+3

warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.src/miscRequests.js+3

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

43 files scanned @ 5baea86 | 9/25/2026 | heuristic scan — always review manually

risk by category

code execution13

network & exfiltration0

file system access0

obfuscation6

supply chain0

owasp / injection0

telemetry

files 43/54rules hit 4engine v6commit 5baea86

github

Mathieu2301/TradingView-API

📈 Get real-time stocks from TradingView

JavaScript

5354

956

2029d

54 files

43 scanned(80%)

5baea86

architecture░▒▓

entry (1) flagged (2) pkg (5)

47 nodes · 71 edgesscroll to zoom · click node to jump to finding