github.com / gwitko
gwitko/
Dart·428 files·commit 9cd2ff9·scanned 2h ago·cached ✓
16/100
LOW RISK
Minor findings consistent with the project type. Nothing reachable from install hooks.
verdict accurate?
6% file coverage
threat-state: lowlive
FINDINGS ░▒▓
warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.ios/Runner/Assets.xcassets/AppIcon.appiconset/Contents.json+4
warningPossible typosquat: nuxt"nuxt" is only 1 character(s) away from the popular package "next". This is a common supply-chain attack vector.package.json+4
warningDependency runs install scripts"<root>/postinstall" executes code during installation. Malicious packages use this to drop payloads before the app even runs.package.json+3
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
25 files scanned @ 9cd2ff9 | 9/25/2026 | heuristic scan — always review manually
risk by category
code execution0
network & exfiltration0
file system access0
obfuscation4
supply chain7
owasp / injection0
telemetry
files 25/428rules hit 3engine v6commit 9cd2ff9
github
gwitko/Conduit
A mobile terminal workspace for Android and iOS with SSH, Mosh, SFTP, hardware-key auth, tmux helpers, and an optional local shell.
384
25
115d
428 files
25 scanned(6%)
9cd2ff9
architecture░▒▓
entry (1) flagged (0) pkg (1)
4 nodes · 1 edgesscroll to zoom · click node to jump to finding