live · scanning repos
Scanrepo
github.com
DANGER
malware detected
github.com / farhoudshapouran

farhoudshapouran/react-native-ui-datepicker

TypeScript·172 files·commit b0cb2e4·scanned 2h ago·cached ✓
70/100
DANGEROUS
Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?
threat-state: dangerouslive

FINDINGS ░▒▓

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: src/components/header/index.tsx, src/components/time-picker/wheel-web.tsx. This means the suspicious code can execute when the app runs.+8
warningCluster of suspicious files reachable from entry2 flagged files form a connected cluster that is reachable from an entry point, suggesting coordinated malicious behavior rather than isolated false positives.+5
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.src/components/header/index.tsx+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.src/components/time-picker/wheel-web.tsx+3
infoNative addon dependency"@react-navigation/native" includes native compiled code. Native addons can hide behavior that static JS analysis cannot see.package.json+2
infoNative addon dependency"@shopify/react-native-skia" includes native compiled code. Native addons can hide behavior that static JS analysis cannot see.package.json+2
infoNative addon dependency"react-native" includes native compiled code. Native addons can hide behavior that static JS analysis cannot see.package.json+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

118 files scanned @ b0cb2e4 | 9/25/2026 | heuristic scan — always review manually

risk by category
code execution13
network & exfiltration0
file system access0
obfuscation6
supply chain15
owasp / injection0
telemetry
files 118/172rules hit 7engine v6commit b0cb2e4

github

farhoudshapouran/react-native-ui-datepicker

Customizable React Native 📅 Date Picker component for Android, iOS, and Web. It includes single, range, and multiple modes, supports different locales, including the Jalali (Persian) calendar, handles different timezones, and is fully compatible with NativeWind.

TypeScript
888
108
1283d
172 files
118 scanned(69%)
b0cb2e4

architecture░▒▓

entry (2) flagged (2) pkg (78)
186 nodes · 420 edgesscroll to zoom · click node to jump to finding