github.com / Tejashmakwana

Tejashmakwana/motionmaxxing

JavaScript·105 files·commit 8c8ec0f·scanned 17h ago·cached ✓

25/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

score capped at 25 — 1,100 stars — findings likely legitimate code patterns

verdict accurate?

Created 22 days ago

17% file coverage

threat-state: lowlive

FINDINGS ░▒▓

criticaleval() usage detectedeval() executes arbitrary code and is commonly used in malware to run obfuscated payloads fetched from remote servers.scripts/_cdp.mjs

      },
      async eval(expression, { timeout = 60000 } = {}) {
        const r = await send('Runtime.evaluate', { expression, awaitPromise: true, returnByValue: true }, timeout);
        if (r.exce...

infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2

infoBase64 encoding usedatob() or Buffer.from with base64. Common in legitimate code but also used to hide malicious URLs.scripts/brand.mjs

async function fetchBuf(u, ref, max = 12e6) {
  if (u.startsWith('data:')) { const m = /^data:([^;,]*)(;base64)?,(.*)$/s.exec(u); if (!m) throw new Error('bad data uri'); return { buf: m[2] ? Buffer.f...

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

18 files scanned @ 8c8ec0f | 10/29/2026 | heuristic scan — always review manually

risk by category

code execution10

network & exfiltration2

file system access0

obfuscation0

supply chain0

owasp / injection0

telemetry

files 18/105rules hit 3engine v7commit 8c8ec0f

github

Tejashmakwana/motionmaxxing

Looksmaxxing for motion graphics. An agent skill that turns AI slop videos into films that look made by a motion designer.

JavaScript

1100

103

23d

105 files

18 scanned(17%)

8c8ec0f

architecture░▒▓

entry (0) flagged (1) pkg (25)

41 nodes · 63 edgesscroll to zoom · click node to jump to finding