live · scanning repos
Scanrepo
github.com
DANGER
malware detected
github.com / ryuhandev

ryuhandev/CaptchaX

JavaScript·36 files·commit f69f4ac·scanned 1h ago·cached ✓
70/100
DANGEROUS
Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?
Created 8 days ago
Created 8 days ago
threat-state: dangerouslive

FINDINGS ░▒▓

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: src/services/aliyun.js, src/services/captchaV3.js, src/services/getSitekey.js. This means the suspicious code can execute when the app runs.+8
warningCluster of suspicious files reachable from entry3 flagged files form a connected cluster that is reachable from an entry point, suggesting coordinated malicious behavior rather than isolated false positives.+5
warningHigh-entropy string literalsFound 7 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/services/aliyun.js+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.src/services/captchaV3.js+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.src/services/getSitekey.js+3

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

17 files scanned @ f69f4ac | 9/25/2026 | heuristic scan — always review manually

risk by category
code execution13
network & exfiltration0
file system access0
obfuscation9
supply chain0
owasp / injection0
telemetry
files 17/36rules hit 5engine v6commit f69f4ac

github

ryuhandev/CaptchaX

All-in-one captcha solver API, Railway-ready

JavaScript
21
18
8d
36 files
17 scanned(47%)
f69f4ac

architecture░▒▓

entry (1) flagged (3) pkg (12)
27 nodes · 34 edgesscroll to zoom · click node to jump to finding
⚠️ DANGEROUS (70/100) — ryuhandev/CaptchaX — ScanRepo