marioparaschiv/nitro-sniper

JavaScript·30 files·commit 523d51f·scanned 5h ago·cached ✓

70/100

DANGEROUS

Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

threat-state: dangerouslive

FINDINGS ░▒▓

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: src/lib/Constants.js. This means the suspicious code can execute when the app runs.+8

warningLarge base64-encoded blobA 292-character base64 blob was found. May hide a remote payload or encoded executable code.src/lib/Constants.js

eyJvcyI6IldpbmRvd3MiLCJicm93c2VyIjoiRGlzY29yZCBDbGllbnQiLCJy...

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

17 files scanned @ 523d51f | 10/30/2026 | heuristic scan — always review manually

risk by category

code execution8

network & exfiltration0

file system access0

obfuscation3

supply chain0

owasp / injection0

telemetry

files 17/30rules hit 2engine v10commit 523d51f

github

marioparaschiv/nitro-sniper

🔫 Lightweight, fast Discord Nitro, giveaway, and invite sniper.

JavaScript

795

2997

2200d

30 files

17 scanned(57%)

523d51f

network indicators░▒▓

Hosts this code names or would connect to. 4 found, decoded and call-site destinations first. Informational, not scored.

http://archive.ubuntu.com/ubuntu/pool/main/g/glib2.0/….deburlmain.sh:10
https://discord.com/api/v8/users/@me/billing/payment-sourcesurlsrc/lib/Constants.js:212
https://discord.com/api/v8/entitlements/gift-codes/$urlsrc/lib/Constants.js:213
https://discord.com/api/v8/invites/$urlsrc/lib/Constants.js:214

architecture░▒▓

entry (1) flagged (1) pkg (10)

25 nodes · 26 edgesscroll to zoom · click node to jump to finding