github.com / sebhildebrandt

sebhildebrandt/systeminformation

JavaScript·148 files·commit dd573fb·scanned 3d ago·cached ✓

25/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

score capped at 25 — 3,127 stars — findings likely legitimate code patterns

verdict accurate?

22% file coverage

CLI tool detected

threat-state: lowlive

FINDINGS ░▒▓

criticalchild_process / exec usageExecuting shell commands can be used to download and run malware, exfiltrate data, or modify system files.lib/memory.js

const os = require('os');
const exec = require('child_process').exec;
const execSync = require('child_process').execSync;
const util = require('./util');

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: lib/battery.js, lib/cpu.js, lib/filesystem.js. This means the suspicious code can execute when the app runs.+8

warningCluster of suspicious files reachable from entry11 flagged files form a connected cluster that is reachable from an entry point, suggesting coordinated malicious behavior rather than isolated false positives.+5

warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.lib/graphics.js+4

warningHigh-entropy string literalsFound 4 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.lib/battery.js+3

warningHigh-entropy string literalsFound 8 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.lib/cpu.js+3

warningHigh-entropy string literalsFound 20 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.lib/filesystem.js+3

warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.lib/network.js+3

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

32 files scanned @ dd573fb | 8/21/2026 | heuristic scan — always review manually

risk by category

code execution21

network & exfiltration0

file system access0

obfuscation15

supply chain0

owasp / injection0

telemetry

files 32/148rules hit 8engine v5commit dd573fb

github

sebhildebrandt/systeminformation

System Information Library for Node.JS

JavaScript

3127

350

4549d

148 files

32 scanned(22%)

dd573fb

architecture░▒▓

entry (2) flagged (11) pkg (4)

33 nodes · 49 edgesscroll to zoom · click node to jump to finding