live · scanning repos
Scanrepo
github.com
DANGER
malware detected
github.com / rafafunt

rafafunt/FalconSDR

Python·112 files·commit f8a3991·scanned 1d ago·cached ✓
85/100
MALICIOUS
Matches known-malicious patterns. Do not clone or install.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?
Created 5 days ago
Crypto/Web3 project
Created in the last 7 days
threat-state: maliciouslive

FINDINGS ░▒▓

criticalRemote script piped into a shellA shell script downloads remote content and executes it directly (e.g. `curl … | bash`). The payload is never stored or reviewable and can change server-side — a classic malware/backdoor install pattern.packaging/install.sh
#
#   curl -fsSL https://raw.githubusercontent.com/rafafunt/FalconSDR/master/packaging/install.sh | bash
#
# Picks the right artifact for the machine it runs on:
+10
infoSuspicious file in repoExecutable file (build.ps1) in repositorypackaging/windows/build.ps1+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

69 files scanned @ f8a3991 | 10/27/2026 | heuristic scan — always review manually

risk by category
code execution10
network & exfiltration0
file system access0
obfuscation0
supply chain2
owasp / injection0
telemetry
files 69/112rules hit 2engine v7commit f8a3991

github

rafafunt/FalconSDR

Wideband SDR scanner that records only real transmissions. Browser UI for local use or a headless receiver, searchable library, optional Whisper transcription. RTL-SDR and SoapySDR. Linux, Windows and macOS.

Python
18
3
7d
112 files
69 scanned(62%)
f8a3991

architecture░▒▓

entry (1) flagged (0) pkg (89)
147 nodes · 379 edgesscroll to zoom · click node to jump to finding
⚠️ MALICIOUS (85/100) — rafafunt/FalconSDR — ScanRepo