github.com / natrixdev
natrixdev/ Discord-Server-Boost-Botter
Python·11 files·commit e6538d2·scanned 2d ago·cached ✓
21/100
LOW RISK
Minor findings consistent with the project type. Nothing reachable from install hooks.
verdict accurate?
Crypto/Web3 project
threat-state: lowlive
FINDINGS ░▒▓
warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.keyauth.py
print("installing necessary modules....")
os.system("pip install pycryptodome")
print("Modules installed!")
time.sleep(1.5)
+4warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.main.py
os.system(f"title boost tool by natrixxxxx")
fingerprints = json.load(open("fingerprints.json", encoding="utf-8"))
+4warningHigh-entropy string literalsFound 4 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.main.py+3
warningLarge base64-encoded blobA 184-character base64 blob was found. May hide a remote payload or encoded executable code.main.py
eyJsb2NhdGlvbiI6IkpvaW4gR3VpbGQiLCJsb2NhdGlvbl9ndWlsZF9pZCI6...+3
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
4 files scanned @ e6538d2 | 10/27/2026 | heuristic scan — always review manually
risk by category
code execution10
network & exfiltration0
file system access0
obfuscation6
supply chain2
owasp / injection0
telemetry
files 4/11rules hit 6engine v7commit e6538d2
github
natrixdev/Discord-Server-Boost-Botter
Boost your Discord server with nitro bot accounts. Also includes a joiner.
467
529
1474d
11 files
4 scanned(36%)
e6538d2
architecture░▒▓
entry (1) flagged (2) pkg (18)
20 nodes · 21 edgesscroll to zoom · click node to jump to finding