github.com / assetnote

assetnote/node2shell-scanner

Python·6 files·commit bf2dc38·scanned 3d ago·cached ✓

12/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

verdict accurate?

Created 1 days ago

Created in the last 7 days

threat-state: lowlive

FINDINGS ░▒▓

warningSingle-commit repositoryThe repository has only one commit. This is common for generated or throwaway malware repos.+3

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

1 files scanned @ bf2dc38 | 10/25/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access0

obfuscation0

supply chain3

owasp / injection0

telemetry

files 1/6rules hit 1engine v7commit bf2dc38

github

assetnote/node2shell-scanner

High fidelity detection mechanism for node2shell (CVE-2026-111497)

Python

6 files

1 scanned(17%)

bf2dc38

architecture░▒▓

entry (0) flagged (0) pkg (12)

13 nodes · 12 edgesscroll to zoom · click node to jump to finding