live · scanning repos
Scanrepo
github.com
github.com / otavix010

otavix010/asuras-wrath-pc

Python·64 files·commit dd5ad87·scanned 1d ago·cached ✓
28/100
LOW RISK
Minor findings consistent with the project type. Nothing reachable from install hooks.
verdict accurate?
Created 3 days ago
No stars or forks
Created in the last 7 days
No community activity
threat-state: lowlive

FINDINGS ░▒▓

warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.scripts/instalado.py
    time.sleep(2)
    subprocess.run(['cmd', '/c', str(folder / 'jogar.cmd')], env=env, cwd=folder)
    t0 = time.time()
    pid = None
+4
warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.scripts/port.py
    inside = str(Path(folder).resolve()).lower().rstrip('\\') + '\\'
    out = subprocess.run(['powershell', '-NoProfile', '-Command',
                          f"Get-CimInstance Win32_Process -Filter...
+4
warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.scripts/rodar.py
    try:
        return subprocess.Popen(['nvidia-smi', '--query-gpu=utilization.gpu', '--format=csv,noheader,nounits', '-l', '1'],
                                stdout=open(path, 'w'), stderr=sub...
+4
infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2
infoSuspicious file in repoExecutable file (build.cmd) in repositorybuild.cmd+2
infoSuspicious file in repoExecutable file (gerar.ps1) in repositorygerar.ps1+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

25 files scanned @ dd5ad87 | 10/28/2026 | heuristic scan — always review manually

risk by category
code execution18
network & exfiltration0
file system access0
obfuscation0
supply chain4
owasp / injection0
telemetry
files 25/64rules hit 6engine v7commit dd5ad87

github

otavix010/asuras-wrath-pc

Asura's Wrath (Xbox 360) — port nativo para PC por recompilação estática (ReXGlue). Gera a partir da sua .iso.

Python
0
0
5d
64 files
25 scanned(39%)
dd5ad87

architecture░▒▓

entry (0) flagged (4) pkg (23)
46 nodes · 101 edgesscroll to zoom · click node to jump to finding
LOW (28/100) — otavix010/asuras-wrath-pc — ScanRepo