github.com / littledivy

littledivy/mimic

Python·18 files·commit 8cf998a·scanned 4d ago·cached ✓

25/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

score capped at 25 — 2,889 stars — findings likely legitimate code patterns

verdict accurate?

threat-state: lowlive

FINDINGS ░▒▓

criticalRemote script piped into a shellA shell script downloads remote content and executes it directly (e.g. `curl … | bash`). The payload is never stored or reviewable and can change server-side — a classic malware/backdoor install pattern.install.sh

  echo "installing uv…"
  curl -LsSf https://astral.sh/uv/install.sh | sh
  export PATH="$HOME/.local/bin:$PATH"
fi

+10

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

11 files scanned @ 8cf998a | 10/25/2026 | heuristic scan — always review manually

risk by category

code execution10

network & exfiltration0

file system access0

obfuscation0

supply chain0

owasp / injection0

telemetry

files 11/18rules hit 1engine v7commit 8cf998a

github

littledivy/mimic

Intercept any app, then call it from Python like a library

Python

2889

343

109d

18 files

11 scanned(61%)

8cf998a

architecture░▒▓

entry (0) flagged (0) pkg (13)

23 nodes · 22 edgesscroll to zoom · click node to jump to finding