asamuzaK/domSelector

JavaScript·133 files·commit 32663f3·scanned 18h ago·cached ✓

70/100

DANGEROUS

Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

42% file coverage

threat-state: dangerouslive

FINDINGS ░▒▓

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: src/js/nwsapi.js. This means the suspicious code can execute when the app runs.+8

warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.src/js/nwsapi.js+3

infoAuthor has no other public repositoriesGitHub user "dependabot[bot]" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

56 files scanned @ 32663f3 | 10/29/2026 | heuristic scan — always review manually

risk by category

code execution8

network & exfiltration0

file system access0

obfuscation3

supply chain2

owasp / injection0

telemetry

files 56/133rules hit 3engine v7commit 32663f3

github

asamuzaK/domSelector

A CSS selector engine.

JavaScript

1272d

133 files

56 scanned(42%)

32663f3

architecture░▒▓

entry (1) flagged (1) pkg (23)

76 nodes · 226 edgesscroll to zoom · click node to jump to finding