github.com / mcmilk

mcmilk/7-Zip-zstd

C++·1735 files·commit 80ba166·scanned 21h ago·cached ✓

9/100

SAFE

No malicious patterns found. Repo signals are consistent with a legitimate project.

verdict accurate?

0% file coverage

threat-state: safelive

FINDINGS ░▒▓

warningSuspicious Windows batch commandBatch file contains commands commonly used to download and execute remote payloads (powershell, certutil, bitsadmin, curl to pipe, etc.)..github/workflows/do-release.cmd

cd %SKEL%
curl %URL% -L -o 7-Zip.exe
IF %errorlevel% NEQ 0 EXIT 1
%SZIP% x 7-Zip.exe

infoSuspicious file in repoExecutable file (do-release.cmd) in repository.github/workflows/do-release.cmd+2

infoSuspicious file in repoExecutable file (build-it.cmd) in repositoryCPP/build-it.cmd+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

6 files scanned @ 80ba166 | 10/28/2026 | heuristic scan — always review manually

risk by category

code execution5

network & exfiltration0

file system access0

obfuscation0

supply chain4

owasp / injection0

telemetry

files 6/1735rules hit 3engine v7commit 80ba166

github

mcmilk/7-Zip-zstd

7-Zip with support for Brotli, Fast-LZMA2, Lizard, LZ4, LZ5 and Zstandard

C++

7473

415

3778d

1735 files

6 scanned(0%)

80ba166

architecture░▒▓

No architecture graph available. This usually happens when the repo contains no scannable JS/TS/Python files or only a single file was analyzed.