live · scanning repos
Scanrepo
github.com
github.com / haduyphuong

haduyphuong/tiktok-shop-api

TypeScript·2117 files·commit 9bc3908·scanned 5h ago·cached ✓
25/100
LOW RISK
Minor findings consistent with the project type. Nothing reachable from install hooks.
verdict accurate?
Created 1 days ago
No stars or forks
Created in the last 7 days
No community activity
Partial architecture graph
threat-state: lowlive

FINDINGS ░▒▓

warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.src/generated/apis/FulfilledByTikTokFBTApi.ts+4
warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.src/generated/apis/PromotionApi.ts+4
warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.src/generated/models/RejectReturnRequest.ts+4
warningHigh-entropy string literalsFound 21 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/generated/models/index.ts+3
warningHigh-entropy string literalsFound 5 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/generated/meta.ts+3
warningHigh-entropy string literalsFound 4 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/generated/models/DiagnoseAndOptimizeProductRequestSizeChart.ts+3
infoAuthor has no other public repositoriesGitHub user "Phuong9Pay" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

2109 files scanned @ 9bc3908 | 10/30/2026 | heuristic scan — always review manually

risk by category
code execution0
network & exfiltration0
file system access0
obfuscation15
supply chain2
owasp / injection0
telemetry
files 2109/2117rules hit 7engine v10commit 9bc3908

github

haduyphuong/tiktok-shop-api

TypeScript
0
0
1d
2117 files
2109 scanned(100%)
9bc3908

network indicators░▒▓

Hosts this code names or would connect to. 40 found, decoded and call-site destinations first. Informational, not scored.

architecture░▒▓

entry (1) flagged (9) pkg (6)
406 nodes · 723 edgesscroll to zoom · click node to jump to finding
LOW (25/100) — haduyphuong/tiktok-shop-api — ScanRepo