github.com / coldnew
coldnew/
C·920 files·commit be40a2f·scanned 3h ago·cached ✓
2/100
SAFE
No malicious patterns found. Repo signals are consistent with a legitimate project.
verdict accurate?
Created 12 days ago
No stars or forks
Created 12 days ago
No community activity
3% file coverage
threat-state: safelive
FINDINGS ░▒▓
infoSuspicious file in repoExecutable file (download_titledb.bat) in repositorydownload_titledb.bat+2
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
27 files scanned @ be40a2f | 10/30/2026 | heuristic scan — always review manually
risk by category
code execution0
network & exfiltration0
file system access0
obfuscation0
supply chain2
owasp / injection0
telemetry
files 27/920rules hit 1engine v10commit be40a2f
github
coldnew/4NXCI
convert XCI to NSP
0
0
13d
920 files
27 scanned(3%)
be40a2f
network indicators░▒▓
Hosts this code names or would connect to. 5 found, decoded and call-site destinations first. Informational, not scored.
- https://raw.githubusercontent.com/blawar/titledb/master/US.en.jsonpaste hostnext to execdownload_titledb.bat:4
- https://github.com/blawar/titledburldownload_titledb.bat:12
- https://launchpad.net/gcc-arm-embedded/urlmbedtls/scripts/footprint.sh:39
- https://tls.mbed.orgurlcomment onlymbedtls/scripts/bump_version.sh:3 +10 more
- http://lcamtuf.coredump.cx/afl/urlcomment onlymbedtls/tests/scripts/generate-afl-tests.sh:5
architecture░▒▓
No architecture graph available. This usually happens when the repo contains no scannable JS/TS/Python files or only a single file was analyzed.