fb55/entities

TypeScript·43 files·commit a007e72·scanned 18h ago·cached ✓

70/100

DANGEROUS

Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

threat-state: dangerouslive

FINDINGS ░▒▓

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: src/generated/decode-data-html.ts, src/generated/encode-html.ts. This means the suspicious code can execute when the app runs.+8

warningCluster of suspicious files reachable from entry2 flagged files form a connected cluster that is reachable from an entry point, suggesting coordinated malicious behavior rather than isolated false positives.+5

warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.src/generated/decode-data-html.ts+4

infoMinified code in source directoryMinified/obfuscated code in source directories (not dist/) makes code review impossible.src/generated/encode-html.ts+3

infoAuthor has no other public repositoriesGitHub user "dependabot[bot]" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

30 files scanned @ a007e72 | 10/29/2026 | heuristic scan — always review manually

risk by category

code execution13

network & exfiltration0

file system access0

obfuscation7

supply chain2

owasp / injection0

telemetry

files 30/43rules hit 5engine v7commit a007e72

github

fb55/entities

encode & decode HTML & XML entities with ease & speed

TypeScript

389

5403d

43 files

30 scanned(70%)

a007e72

architecture░▒▓

entry (1) flagged (1) pkg (18)

37 nodes · 42 edgesscroll to zoom · click node to jump to finding