milancodess/universalDownloader

JavaScript·59 files·commit 55de498·scanned 1h ago·cached ✓

70/100

DANGEROUS

Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

threat-state: dangerouslive

FINDINGS ░▒▓

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: services/teraboxService.js, services/youtubeService.js. This means the suspicious code can execute when the app runs.+8

warningCluster of suspicious files reachable from entry2 flagged files form a connected cluster that is reachable from an entry point, suggesting coordinated malicious behavior rather than isolated false positives.+5

warningHigh-entropy string literalsFound 3 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.services/teraboxService.js+3

warningHigh-entropy string literalsFound 3 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.services/youtubeService.js+3

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

57 files scanned @ 55de498 | 9/25/2026 | heuristic scan — always review manually

risk by category

code execution13

network & exfiltration0

file system access0

obfuscation6

supply chain0

owasp / injection0

telemetry

files 57/59rules hit 4engine v6commit 55de498

github

milancodess/universalDownloader

API for downloading videos and media from popular platforms like Douyin, Instagram, Facebook, Pinterest, Reddit, Threads, Twitter, TikTok, YouTube, etc..

JavaScript

138

430d

59 files

57 scanned(97%)

55de498

architecture░▒▓

entry (1) flagged (2) pkg (7)

62 nodes · 103 edgesscroll to zoom · click node to jump to finding