github.com / open-biz

open-biz/OpenBookLM

Python·267 files·commit ea43e01·scanned 4d ago·cached ✓

17/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

verdict accurate?

threat-state: lowlive

FINDINGS ░▒▓

infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2

warningHardcoded IP address in network callFetching data from hardcoded IP addresses instead of domain names is suspicious and may indicate C2 communication.backend/groq/api/audio_generation.py

        return {
            "url": "http://170.187.161.93:8000/test-audio.wav",
            "duration": 30.0
        }

warningHardcoded IP address in network callFetching data from hardcoded IP addresses instead of domain names is suspicious and may indicate C2 communication.src/app/api/notebooks/[id]/audio/route.ts

    const response = await fetch(
      "http://170.187.161.93:8000/api/generate_audio",
      {
        method: "POST",

warningHardcoded IP address in network callFetching data from hardcoded IP addresses instead of domain names is suspicious and may indicate C2 communication.src/components/website-url-input.tsx

    try {
      const response = await fetch("http://170.187.161.93:8000/website", {
        method: "POST",
        headers: {

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

148 files scanned @ ea43e01 | 10/25/2026 | heuristic scan — always review manually

risk by category

code execution2

network & exfiltration15

file system access0

obfuscation0

supply chain0

owasp / injection0

telemetry

files 148/267rules hit 4engine v7commit ea43e01

github

open-biz/OpenBookLM

Open Source alternative to NoteBookLM from Google

Python

134

653d

267 files

148 scanned(55%)

ea43e01

architecture░▒▓

entry (2) flagged (3) pkg (141)

269 nodes · 597 edgesscroll to zoom · click node to jump to finding