github.com / run-liyi
run-liyi/ wechatpay
JavaScript·52 files·commit a235e53·scanned 4d ago·cached ✓
9/100
SAFE
No malicious patterns found. Repo signals are consistent with a legitimate project.
verdict accurate?
threat-state: safelive
FINDINGS ░▒▓
infoSuspicious file in repoExecutable file (build-with-mirror.bat) in repositorybuild-with-mirror.bat+2
warningPossible typosquat: xlsx"xlsx" is only 1 character(s) away from the popular package "clsx". This is a common supply-chain attack vector.package.json+4
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
37 files scanned @ a235e53 | 10/25/2026 | heuristic scan — always review manually
risk by category
code execution0
network & exfiltration0
file system access0
obfuscation0
supply chain6
owasp / injection0
telemetry
files 37/52rules hit 2engine v7commit a235e53
github
run-liyi/wechatpay
微信账单分析工具 - 基于Electron的可视化账单分析应用
1329
119
162d
52 files
37 scanned(71%)
a235e53
architecture░▒▓
entry (1) flagged (0) pkg (5)
38 nodes · 48 edgesscroll to zoom · click node to jump to finding