saksham-kumar1621/storagerelief-python-github

Python·44 files·commit 131981a·scanned 4d ago·cached ✓

70/100

DANGEROUS

Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

Created 21 days ago

Research / educational context

threat-state: dangerouslive

FINDINGS ░▒▓

infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2

criticalBrowser credential store accessAccessing Chrome, Firefox, Edge, or Brave profile directories to steal cookies, passwords, and session tokens.ui/web/main.js

          name: 'Google Chrome Code Cache',
          path: 'C:\\Users\\User\\AppData\\Local\\Google\\Chrome-Cache-Sample\\Code Cache',
          size_bytes: 329469952,
          size_formatted: '314....

+10

criticalBrowser credential store accessAccessing Chrome, Firefox, Edge, or Brave profile directories to steal cookies, passwords, and session tokens.core/cleaner.py

                r"\microsoft\edge",
                r"\bravesoftware\brave-browser",
                r"\opera software",
                r"\mozilla\firefox",

+10

warningSSH/credential path accessAccessing .ssh, .aws/credentials, or .env files to steal authentication credentials.core/cleaner.py

    # Sensitive authentication files & keys
    "id_rsa", "id_ed25519", "id_ecdsa", "id_dsa",
    # Critical Windows operating system root and kernel files
    "bootmgr", "ntldr", "pagefile.sys", "swa...

criticalBrowser credential store accessAccessing Chrome, Firefox, Edge, or Brave profile directories to steal cookies, passwords, and session tokens.core/scanner.py

    browser_bases = [
        ("Google Chrome", os.path.join(appdata_local, "Google", "Chrome", "User" + " " + "Data")),
        ("Microsoft Edge", os.path.join(appdata_local, "Microsoft", "Edge", "Us...

+10

infoSuspicious file in repoExecutable file (run.bat) in repositoryrun.bat+2

infoSuspicious file in repoExecutable file (run.ps1) in repositoryrun.ps1+2

infoSuspicious file in repoExecutable file (build.bat) in repositoryscripts/build.bat+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

18 files scanned @ 131981a | 10/25/2026 | heuristic scan — always review manually

risk by category

code execution2

network & exfiltration0

file system access20

obfuscation0

supply chain12

owasp / injection0

telemetry

files 18/44rules hit 8engine v7commit 131981a

github

saksham-kumar1621/storagerelief-python-github

⚡ High-performance Windows storage optimizer & duplicate hunter built with Python & Edge WebView2. Reclaim 20GB–100GB+ of hidden cache, ghost apps, and duplicate files safely.

Python

25d

44 files

18 scanned(41%)

131981a

architecture░▒▓

entry (1) flagged (4) pkg (21)

36 nodes · 53 edgesscroll to zoom · click node to jump to finding