github.com / gapforever2

gapforever2/gaf-client-linux-wrapper

Shell·27 files·commit fb3c46c·scanned 4d ago·cached ✓

17/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

verdict accurate?

No stars or forks

No community activity

CLI tool detected

threat-state: lowlive

FINDINGS ░▒▓

infoSuspicious file in repoExecutable file (andale32.exe) in repositorywinetricks/corefonts/andale32.exe+2

infoSuspicious file in repoExecutable file (arial32.exe) in repositorywinetricks/corefonts/arial32.exe+2

infoSuspicious file in repoExecutable file (arialb32.exe) in repositorywinetricks/corefonts/arialb32.exe+2

infoAuthor has no other public repositoriesGitHub user "vladik8888" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

4 files scanned @ fb3c46c | 10/25/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access0

obfuscation0

supply chain15

owasp / injection0

telemetry

files 4/27rules hit 4engine v7commit fb3c46c

github

gapforever2/gaf-client-linux-wrapper

Shell

64d

27 files

4 scanned(15%)

fb3c46c

architecture░▒▓

No architecture graph available. This usually happens when the repo contains no scannable JS/TS/Python files or only a single file was analyzed.