github.com / code-root

code-root/gmail-account-creator

JavaScript·40 files·commit f33a9b4·scanned 3d ago·cached ✓

40/100

SUSPICIOUS

Obfuscation or dynamic code paths detected. Intent unclear — review before running anything.

verdict accurate?

CLI tool detected

threat-state: suspiciouslive

FINDINGS ░▒▓

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: src/gmail/creator.js, src/gmail/page-detector.js. This means the suspicious code can execute when the app runs.+8

warningCluster of suspicious files reachable from entry2 flagged files form a connected cluster that is reachable from an entry point, suggesting coordinated malicious behavior rather than isolated false positives.+5

warningHigh-entropy string literalsFound 3 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/gmail/creator.js+3

warningHigh-entropy string literalsFound 10 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/gmail/page-detector.js+3

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

24 files scanned @ f33a9b4 | 10/24/2026 | heuristic scan — always review manually

risk by category

code execution13

network & exfiltration0

file system access0

obfuscation6

supply chain0

owasp / injection0

telemetry

files 24/40rules hit 4engine v7commit f33a9b4

github

code-root/gmail-account-creator

Automated Gmail signup (Node.js ESM): GPM Login / Dolphin Anty antidetect, Puppeteer, OMO Captcha & SMS APIs. Proxies and human-like behavior to reduce blocks, restrictions, and ban risk.

JavaScript

301d

40 files

24 scanned(60%)

f33a9b4

architecture░▒▓

entry (2) flagged (2) pkg (4)

25 nodes · 52 edgesscroll to zoom · click node to jump to finding