github.com / evilcorpltd

evilcorpltd/aTox

Kotlin·546 files·commit e99ba3b·scanned 2d ago·cached ✓

6/100

SAFE

No malicious patterns found. Repo signals are consistent with a legitimate project.

verdict accurate?

1% file coverage

threat-state: safelive

FINDINGS ░▒▓

infoSuspicious file in repoExecutable file (gradlew.bat) in repositorygradlew.bat+2

infoAuthor has no other public repositoriesGitHub user "ghostofsparta222" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

7 files scanned @ e99ba3b | 10/27/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access0

obfuscation0

supply chain4

owasp / injection0

telemetry

files 7/546rules hit 2engine v7commit e99ba3b

github

evilcorpltd/aTox

Reasonable Tox client for Android

Kotlin

499

2728d

546 files

7 scanned(1%)

e99ba3b

architecture░▒▓

No architecture graph available. This usually happens when the repo contains no scannable JS/TS/Python files or only a single file was analyzed.