github.com / lenucksi

lenucksi/aur-malware-check

Python·48 files·commit 9023c17·scanned 5d ago·cached ✓

4/100

SAFE

No malicious patterns found. Repo signals are consistent with a legitimate project.

verdict accurate?

Research / educational context

threat-state: safelive

FINDINGS ░▒▓

infoAuthor has no other public repositoriesGitHub user "dwaycik-pcs" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

25 files scanned @ 9023c17 | 10/22/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access0

obfuscation0

supply chain2

owasp / injection0

telemetry

files 25/48rules hit 1engine v7commit 9023c17

github

lenucksi/aur-malware-check

Detection tools for the June 2026 atomic-lockfile AUR supply-chain attack. Consolidated from community Gists.

Python

2198

138d

48 files

25 scanned(52%)

9023c17

architecture░▒▓

entry (0) flagged (0) pkg (36)

51 nodes · 102 edgesscroll to zoom · click node to jump to finding