github.com / megadose

megadose/holehe

Python·162 files·commit 14da70f·scanned 9d ago·cached ✓

15/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

score capped at 15 — 13,765+ stars — findings likely false positives

verdict accurate?

13,765 stars

Research / educational context

threat-state: lowlive

FINDINGS ░▒▓

infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2

warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.holehe/core.py+4

warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.holehe/localuseragent.py+4

infoMinified code in source directoryMinified/obfuscated code in source directories (not dist/) makes code review impossible.holehe/localuseragent.py+3

infoAuthor has no other public repositoriesGitHub user "mark-sercombe" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

127 files scanned @ 14da70f | 8/20/2026 | heuristic scan — always review manually

risk by category

code execution2

network & exfiltration0

file system access0

obfuscation11

supply chain2

owasp / injection0

telemetry

files 127/162rules hit 5engine v5commit 14da70f

github

megadose/holehe

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

Python

13765

1798

2256d

162 files

127 scanned(78%)

14da70f

architecture░▒▓

entry (0) flagged (2) pkg (23)

150 nodes · 272 edgesscroll to zoom · click node to jump to finding