mochiiwuff/capri-desktop

JavaScript·75 files·commit 79a016c·scanned 3d ago·cached ✓

70/100

DANGEROUS

Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

Created 1 days ago

Created in the last 7 days

threat-state: dangerouslive

FINDINGS ░▒▓

criticalchild_process / exec usageExecuting shell commands can be used to download and run malware, exfiltrate data, or modify system files.src/main/apps.js

  return new Promise((resolve, reject) => {
    execFile('powershell.exe', [
      '-NoProfile', '-NonInteractive', '-Command',
      `[Console]::OutputEncoding = [Text.Encoding]::UTF8; ${script}`,

criticalchild_process / exec usageExecuting shell commands can be used to download and run malware, exfiltrate data, or modify system files.src/main/windows.js

  const start = () => {
    child = spawn('powershell.exe', [
      '-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass',
      '-File', SCRIPT, String(self), String(process.pid),

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: src/main/apps.js, src/main/windows.js. This means the suspicious code can execute when the app runs.+8

warningCluster of suspicious files reachable from entry2 flagged files form a connected cluster that is reachable from an entry point, suggesting coordinated malicious behavior rather than isolated false positives.+5

infoSuspicious file in repoExecutable file (windows.ps1) in repositorysrc/main/windows.ps1+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

31 files scanned @ 79a016c | 10/26/2026 | heuristic scan — always review manually

risk by category

code execution25

network & exfiltration0

file system access0

obfuscation0

supply chain2

owasp / injection0

telemetry

files 31/75rules hit 5engine v7commit 79a016c

github

mochiiwuff/capri-desktop

Capri, the Project Capricorn construct from Cyberpunk: Edgerunners 2, living on your desktop and narrating what Claude Code is doing.

JavaScript

132

75 files

31 scanned(41%)

79a016c

architecture░▒▓

entry (1) flagged (2) pkg (4)

33 nodes · 42 edgesscroll to zoom · click node to jump to finding