github.com / bol-van

bol-van/zapret2

C·253 files·commit 4a33055·scanned 3d ago·cached ✓

25/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

score capped at 25 — 5,791 stars — findings likely legitimate code patterns

verdict accurate?

22% file coverage

threat-state: lowlive

FINDINGS ░▒▓

criticaleval() usage detectedeval() executes arbitrary code and is commonly used in malware to run obfuscated payloads fetched from remote servers.blockcheck2.d/custom/10-list.sh

			pktws_curl_test_update "$1" "$2" $line && ok=1
			echo >&2 'WARNING: this strategy fails eval (may be unescaped special characters). using fallback space separated method'
			echo >&2 "WARNING: exa...

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

55 files scanned @ 4a33055 | 10/26/2026 | heuristic scan — always review manually

risk by category

code execution8

network & exfiltration0

file system access0

obfuscation0

supply chain0

owasp / injection0

telemetry

files 55/253rules hit 1engine v7commit 4a33055

github

bol-van/zapret2

anti-dpi software

5791

247

346d

253 files

55 scanned(22%)

4a33055

architecture░▒▓

No architecture graph available. This usually happens when the repo contains no scannable JS/TS/Python files or only a single file was analyzed.