github.com / google

google/gvisor

Go·4329 files·commit 048602e·scanned 1h ago·cached ✓

15/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

score capped at 15 — google is a verified organization — findings likely false positives

verdict accurate?

Verified organization

Partial architecture graph

threat-state: lowlive

FINDINGS ░▒▓

warningGo unsafe package usageunsafe package bypasses Go's type safety. Malware uses it for memory tricks, pointer casts, and hiding behavior.pkg/fsutil/fsutil_amd64_unsafe.go

import (
	"unsafe"

	"golang.org/x/sys/unix"

warningGo unsafe package usageunsafe package bypasses Go's type safety. Malware uses it for memory tricks, pointer casts, and hiding behavior.pkg/fsutil/fsutil_arm64_unsafe.go

import (
	"unsafe"

	"golang.org/x/sys/unix"

warningGo unsafe package usageunsafe package bypasses Go's type safety. Malware uses it for memory tricks, pointer casts, and hiding behavior.pkg/fsutil/fsutil_unsafe.go

	"bytes"
	"unsafe"

	"golang.org/x/sys/unix"

criticalGo os/exec usageos/exec is used to run external commands. In malware it drops payloads, modifies the system, or opens shells.runsc/specutils/namespace.go


	cmd := exec.Command("/proc/self/exe", os.Args[1:]...)

	cmd.SysProcAttr = &unix.SysProcAttr{

criticalGo os/exec usageos/exec is used to run external commands. In malware it drops payloads, modifies the system, or opens shells.runsc/specutils/safemount_test/safemount_test.go

	}
	cmd := exec.Command(runner, t.TempDir())
	cmd.SysProcAttr = &unix.SysProcAttr{
		Cloneflags: unix.CLONE_NEWNS | unix.CLONE_NEWUSER,

criticalGo os/exec usageos/exec is used to run external commands. In malware it drops payloads, modifies the system, or opens shells.runsc/specutils/specutils_test.go

func TestWaitForReadyHappy(t *testing.T) {
	cmd := exec.Command("/bin/sleep", "1000")
	if err := cmd.Start(); err != nil {
		t.Fatalf("cmd.Start() failed, err: %v", err)

criticalPython dynamic code executioneval(), exec() or compile() on untrusted input can execute arbitrary code. Common in Python malware for running obfuscated payloads.sandboxexec/sandbox/python/gvisor/sandbox.py


  def exec(
      self,
      cmd: str,

infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2

warningSSH/credential path accessAccessing .ssh, .aws/credentials, or .env files to steal authentication credentials.test/e2e/systemd_test.go

		ssh-keygen -A &&
		mkdir -p /root/.ssh &&
		rm -f /root/.ssh/id_ed25519 /root/.ssh/id_ed25519.pub &&
		ssh-keygen -t ed25519 -N '' -f /root/.ssh/id_ed25519 &&

infoAuthor has no other public repositoriesGitHub user "gvisor-bot" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

2571 files scanned @ 048602e | 9/25/2026 | heuristic scan — always review manually

risk by category

code execution25

network & exfiltration0

file system access5

obfuscation0

supply chain2

owasp / injection0

telemetry

files 2571/4329rules hit 10engine v6commit 048602e

github

google/gvisor

Application Kernel for Containers

19417

2003

3073d

4329 files

2571 scanned(59%)

048602e

architecture░▒▓

entry (0) flagged (195) pkg (297)

697 nodes · 1644 edgesscroll to zoom · click node to jump to finding