imxeno/tradingview-scraper

TypeScript·19 files·commit 018df59·scanned 1h ago·cached ✓

70/100

DANGEROUS

Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

threat-state: dangerouslive

FINDINGS ░▒▓

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: src/TradingViewWebSocket.ts. This means the suspicious code can execute when the app runs.+8

warningHardcoded secret/credentialAPI keys, passwords, or tokens hardcoded in source code. Should be in environment variables.src/TradingViewWebSocket.ts

  private static DEFAULT_TIMEOUT = 3000;
  private static UNAUTHORIZED_USER_TOKEN = 'unauthorized_user_token';
  private static generateSession() {
    return 'qs_' + randomstring.generate({ length: 1...

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

15 files scanned @ 018df59 | 9/25/2026 | heuristic scan — always review manually

risk by category

code execution8

network & exfiltration0

file system access0

obfuscation0

supply chain0

owasp / injection3

telemetry

files 15/19rules hit 2engine v6commit 018df59

github

imxeno/tradingview-scraper

A gateway to TradingView's data for your Node.js application!

TypeScript

299

2943d

19 files

15 scanned(79%)

018df59

architecture░▒▓

entry (1) flagged (1) pkg (5)

17 nodes · 16 edgesscroll to zoom · click node to jump to finding