DANGER
malware detected
github.com / Nakildias
Nakildias/ Waveline
C++·274 files·commit 26cf3f5·scanned 1h ago·cached ✓
85/100
MALICIOUS
Matches known-malicious patterns. Do not clone or install.
This repository contains patterns associated with malware. Do NOT run this code.
verdict accurate?
Created 21 days ago
Created 21 days ago
7% file coverage
threat-state: maliciouslive
FINDINGS ░▒▓
criticalRemote script piped into a shellA shell script downloads remote content and executes it directly (e.g. `curl … | bash`). The payload is never stored or reviewable and can change server-side — a classic malware/backdoor install pattern.install.sh
PKGBASE="$(cat "/usr/lib/modules/$KREL/pkgbase" 2>/dev/null || echo linux)"
PKGS=(dkms "${PKGBASE}-headers" base-devel curl git python tar xz usbutils)
# `rust` and `rustup` conflict, so only ask f...+10warningHigh-entropy string literalsFound 3 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.app/src/daemon/web/app.js+3
warningHigh-entropy string literalsFound 20 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.devices/elgato/microphones/wave3/kernel/apply.py+3
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
20 files scanned @ 26cf3f5 | 9/25/2026 | heuristic scan — always review manually
risk by category
code execution12
network & exfiltration0
file system access0
obfuscation6
supply chain0
owasp / injection0
telemetry
files 20/274rules hit 4engine v6commit 26cf3f5
github
Nakildias/Waveline
A Wave Link-style audio mixer for Linux, for any microphone.
14
1
21d
274 files
20 scanned(7%)
26cf3f5
architecture░▒▓
entry (0) flagged (2) pkg (5)
9 nodes · 5 edgesscroll to zoom · click node to jump to finding