DANGER
malware detected
github.com / metnt420-prog
metnt420-prog/
Python·100 files·commit de96654·scanned 1h ago·cached ✓
58/100
DANGEROUS
Sensitive capability combinations reachable from entry points. Do not run without review.
This repository contains patterns associated with malware. Do NOT run this code.
verdict accurate?
Research / educational context
threat-state: dangerouslive
FINDINGS ░▒▓
warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.tscm_suite/bladeRF_tx_watchdog.py
)
out = subprocess.run(['powershell', '-NoProfile', '-Command', ps],
capture_output=True, text=True, timeout=20)
raw = (out.stdout or '').strip()+4warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.tscm_suite/detectors/gps_anti_spoof.py
"""
result = subprocess.run(
["powershell", "-NoProfile", "-Command", ps_script],
capture_output=True, text=True, timeout=10+4warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.tscm_suite/detectors/gps_anti_spoof_monitor.py
try:
result = subprocess.run(
f'netsh wlan show networks mode=bssid interface="{self.interface}"',
shell=True, capture_output=True, text=True, timeo...+4infoMinified code in source directoryMinified/obfuscated code in source directories (not dist/) makes code review impossible.tscm_suite/map_server/leaflet.js+3
infoMinified code in source directoryMinified/obfuscated code in source directories (not dist/) makes code review impossible.static/leaflet.js+3
infoMinified code in source directoryMinified/obfuscated code in source directories (not dist/) makes code review impossible.tscm_suite/static/leaflet.js+3
warningHigh-entropy string literalsFound 5 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.tscm_suite/map_server/leaflet.js+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.tscm_suite/map_server/leaflet.js+3
warningHigh-entropy string literalsFound 5 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.static/leaflet.js+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.static/leaflet.js+3
warningHigh-entropy string literalsFound 3 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.tscm_launcher_supervisor.py+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.tscm_suite/static/leaflet.js+3
infoSuspicious file in repoVery large source file (829KB) — could contain obfuscated payloadtscm_final.py+2
infoSuspicious file in repoVery large source file (756KB) — could contain obfuscated payloadtscm_suite/tscm_final.py+2
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
64 files scanned @ de96654 | 9/25/2026 | heuristic scan — always review manually
risk by category
code execution18
network & exfiltration0
file system access0
obfuscation15
supply chain10
owasp / injection0
telemetry
files 64/100rules hit 16engine v6commit de96654
github
metnt420-prog/tscm-open-source
Open-source TSCM counter-surveillance suite. Detect microwave voice-to-skull, injection locking, silent sound, directed energy weapons, C2 channels. 67 files, $30-$2500 hardware tiers. Help wanted.
6
3
73d
100 files
64 scanned(64%)
de96654
architecture░▒▓
entry (0) flagged (22) pkg (62)
120 nodes · 349 edgesscroll to zoom · click node to jump to finding