DANGER
malware detected
github.com / godfatherlg
godfatherlg/ fakelink
TypeScript·67 files·commit 48bfeba·scanned 4d ago·cached ✓
70/100
DANGEROUS
Sensitive capability combinations reachable from entry points. Do not run without review.
This repository contains patterns associated with malware. Do NOT run this code.
verdict accurate?
threat-state: dangerouslive
FINDINGS ░▒▓
criticalFunction() constructor detectednew Function() is equivalent to eval() and can execute arbitrary code strings.tests/loadTs.mjs
// eslint-disable-next-line no-new-func
new Function('module', 'exports', 'require', code)(module, module.exports, require);
return module.exports;
}+5warningHigh-entropy string literalsFound 29 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/lang/helpers.ts+3
infoSuspicious file in repoVery large source file (1032KB) — could contain obfuscated payloadcommunity-plugin-stats.json+2
infoSuspicious file in repoVery large source file (634KB) — could contain obfuscated payloadcommunity-plugins.json+2
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
32 files scanned @ 48bfeba | 10/25/2026 | heuristic scan — always review manually
risk by category
code execution15
network & exfiltration0
file system access0
obfuscation3
supply chain6
owasp / injection0
telemetry
files 32/67rules hit 7engine v7commit 48bfeba
github
godfatherlg/fakelink
12
0
519d
67 files
32 scanned(48%)
48bfeba
architecture░▒▓
entry (1) flagged (2) pkg (11)
31 nodes · 83 edgesscroll to zoom · click node to jump to finding