DANGER
malware detected
github.com / lovejzzz
lovejzzz/ PerusallDownloader
Python·7 files·commit 61a06f4·scanned 1h ago·cached ✓
70/100
DANGEROUS
Sensitive capability combinations reachable from entry points. Do not run without review.
This repository contains patterns associated with malware. Do NOT run this code.
verdict accurate?
threat-state: dangerouslive
FINDINGS ░▒▓
criticalPython dynamic code executioneval(), exec() or compile() on untrusted input can execute arbitrary code. Common in Python malware for running obfuscated payloads.backend/app.py
# Parse the content
exec(content, globals())
if 'urls' not in globals() or 'title' not in globals():+7warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.backend/app.py
command = f'/opt/homebrew/bin/magick convert -append {f} page_{pgno}.png'
result = subprocess.run(command, shell=True, capture_output=True, text=True)
i...+4warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.backend/web_app.py
command = f'/opt/homebrew/bin/magick convert -append {f} page_{pgno}.png'
result = subprocess.run(command, shell=True, capture_output=True, text=True)
if result.ret...+4Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
2 files scanned @ 61a06f4 | 9/25/2026 | heuristic scan — always review manually
risk by category
code execution17
network & exfiltration0
file system access0
obfuscation0
supply chain0
owasp / injection0
telemetry
files 2/7rules hit 4engine v6commit 61a06f4
github
lovejzzz/PerusallDownloader
4
1
606d
7 files
2 scanned(29%)
61a06f4
architecture░▒▓
entry (0) flagged (2) pkg (10)
12 nodes · 12 edgesscroll to zoom · click node to jump to finding