github.com / jossephus

jossephus/chuchu

Kotlin·684 files·commit 73dfe07·scanned 4d ago·cached ✓

9/100

SAFE

No malicious patterns found. Repo signals are consistent with a legitimate project.

verdict accurate?

2% file coverage

threat-state: safelive

FINDINGS ░▒▓

infoSuspicious file in repoExecutable file (gradlew.bat) in repositoryandroid/gradlew.bat+2

warningPossible typosquat: nuxt"nuxt" is only 1 character(s) away from the popular package "next". This is a common supply-chain attack vector.package.json+4

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

17 files scanned @ 73dfe07 | 8/20/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access0

obfuscation0

supply chain6

owasp / injection0

telemetry

files 17/684rules hit 2engine v5commit 73dfe07

github

jossephus/chuchu

ssh client for android based on libghostty

Kotlin

205

135d

684 files

17 scanned(2%)

73dfe07

architecture░▒▓

entry (1) flagged (0) pkg (1)

3 nodes · 1 edgesscroll to zoom · click node to jump to finding