github.com / StackThrower

StackThrower/TransactionalJavaPoC

Java·136 files·commit f574db0·scanned 4d ago·cached ✓

13/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

verdict accurate?

No stars or forks

No community activity

1% file coverage

threat-state: lowlive

FINDINGS ░▒▓

warningSuspicious Windows batch commandBatch file contains commands commonly used to download and execute remote payloads (powershell, certutil, bitsadmin, curl to pipe, etc.).mvnw.cmd

@SET PSModulePath=
@FOR /F "usebackq tokens=1* delims==" %%A IN (`powershell -noprofile "& {$scriptDir='%~dp0'; $script='%__MVNW_ARG0_NAME__%'; icm -ScriptBlock ([Scriptblock]::Create((Get-Content -Ra...

infoSuspicious file in repoExecutable file (mvnw.cmd) in repositorymvnw.cmd+2

warningSingle-commit repositoryThe repository has only one commit. This is common for generated or throwaway malware repos.+3

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

1 files scanned @ f574db0 | 10/25/2026 | heuristic scan — always review manually

risk by category

code execution5

network & exfiltration0

file system access0

obfuscation0

supply chain5

owasp / injection0

telemetry

files 1/136rules hit 3engine v7commit f574db0

github

StackThrower/TransactionalJavaPoC

Java

85d

136 files

1 scanned(1%)

f574db0

architecture░▒▓

No architecture graph available. This usually happens when the repo contains no scannable JS/TS/Python files or only a single file was analyzed.