iamrobinsharaya/upipay

TypeScript·32 files·commit 8cb7267·scanned 17m ago·cached ✓

70/100

DANGEROUS

Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

threat-state: dangerouslive

FINDINGS ░▒▓

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: src/adapters/paytm.ts, src/adapters/phonepe.ts, src/utils/validation.ts. This means the suspicious code can execute when the app runs.+8

warningCluster of suspicious files reachable from entry3 flagged files form a connected cluster that is reachable from an entry point, suggesting coordinated malicious behavior rather than isolated false positives.+5

infoBase64 encoding usedatob() or Buffer.from with base64. Common in legitimate code but also used to hide malicious URLs.src/adapters/phonepe.ts

        try {
          const decodedStr = Buffer.from(base64Response, 'base64').toString('utf8');
          parsedPayload = JSON.parse(decodedStr);
        } catch {

warningHigh-entropy string literalsFound 6 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/adapters/paytm.ts+3

warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.src/adapters/paytm.ts+3

warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.src/adapters/phonepe.ts+3

warningHigh-entropy string literalsFound 8 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/utils/validation.ts+3

warningSingle-commit repositoryThe repository has only one commit. This is common for generated or throwaway malware repos.+3

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

25 files scanned @ 8cb7267 | 9/25/2026 | heuristic scan — always review manually

risk by category

code execution13

network & exfiltration2

file system access0

obfuscation12

supply chain3

owasp / injection0

telemetry

files 25/32rules hit 8engine v6commit 8cb7267

github

iamrobinsharaya/upipay

Free, zero-commission UPI Payment Gateway SDK for Node.js / TypeScript. Directly integrates with PhonePe and Paytm Business APIs.

TypeScript

114d

32 files

25 scanned(78%)

8cb7267

architecture░▒▓

entry (1) flagged (3) pkg (8)

30 nodes · 72 edgesscroll to zoom · click node to jump to finding