lyramakesmusic/neuron-explorer

Python·44 files·commit f79b219·scanned 3d ago·cached ✓

85/100

MALICIOUS

Matches known-malicious patterns. Do not clone or install.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

Created 5 days ago

Created in the last 7 days

threat-state: maliciouslive

FINDINGS ░▒▓

criticalRemote script piped into a shellA shell script downloads remote content and executes it directly (e.g. `curl … | bash`). The payload is never stored or reviewable and can change server-side — a classic malware/backdoor install pattern.sweep/setup_pod.sh

command -v rsync >/dev/null || (apt-get update -qq && DEBIAN_FRONTEND=noninteractive apt-get install -y -qq rsync tmux)
command -v uv >/dev/null || curl -LsSf https://astral.sh/uv/install.sh | sh

uvx...

+10

infoSuspicious file in repoVery large source file (3963KB) — could contain obfuscated payloadexplorer/cache/vocab.json+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

27 files scanned @ f79b219 | 10/26/2026 | heuristic scan — always review manually

risk by category

code execution10

network & exfiltration0

file system access0

obfuscation0

supply chain2

owasp / injection0

telemetry

files 27/44rules hit 2engine v7commit f79b219

github

lyramakesmusic/neuron-explorer

Steering-first neuron explorer for Qwen3.5-4B: push every MLP neuron, keep every rollout, browse the results

Python

846

44 files

27 scanned(61%)

f79b219

architecture░▒▓

entry (0) flagged (0) pkg (44)

67 nodes · 126 edgesscroll to zoom · click node to jump to finding