live · scanning repos
Scanrepo
github.com
github.com / seedds

seedds/nxnative

Objective-C·2372 files·commit a662f29·scanned 2h ago·cached ✓
25/100
LOW RISK
Minor findings consistent with the project type. Nothing reachable from install hooks.

score capped at 25 — 9,678 stars — findings likely legitimate code patterns

scored by engine v9: rules have changed since, rescan for the current result

verdict accurate?
Created 17 days ago
Created 17 days ago
5% file coverage
threat-state: lowlive

FINDINGS ░▒▓

criticalPython dynamic code executioneval(), exec() or compile() on untrusted input can execute arbitrary code. Common in Python malware for running obfuscated payloads.dm/gfx/tests/test_discard.py
scope = {'re': re}
exec(compile(ast.Module(body=[node], type_ignores=[]), str(path), 'exec'), scope)

SOURCE = '''#include <metal_stdlib>
+7
criticalPython dynamic code executioneval(), exec() or compile() on untrusted input can execute arbitrary code. Common in Python malware for running obfuscated payloads.dm/gfx/tests/test_dmsh_geometry.py
    ns = {'re': re, 'sys': sys}
    exec(ast.get_source_segment(builder, node), ns)
    # The production helper locates the translated vertex entry at file end.
    vertex, pixel = src.split('fragment...
+7
criticalPython dynamic code executioneval(), exec() or compile() on untrusted input can execute arbitrary code. Common in Python malware for running obfuscated payloads.dm/gfx/tests/test_dmsh_pairs.py
    ns = dict(collections=collections, os=os, re=re, sys=sys, hashlib=hashlib)
    exec(compile(ast.Module(body=[n for n in tree.body if isinstance(n, ast.FunctionDef) and n.name in names],
          ...
+7
warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.dm/ios/tests/test_ipa_unsigned.py
    env.update(GAME=GAME, DM=str(root / 'dm'), PROFILE_TOOL=str(REPO / 'dm/games/game.py'), **extra)
    return subprocess.run(['/bin/bash', '-c', PREAMBLE + script], cwd=root, env=env, capture_output...
+4
warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.dm/ios/tests/test_profile_pack.py
                packing = script[script.index('\nP=Payload/DmIOS.app\n'):]
                result = subprocess.run(['/bin/bash', '-c', 'set -u\nt() { :; }; die() { echo "$*" >&2; exit 1; }\n'
        ...
+4
warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.dm/ios/tests/test_xcode_workflow.py
                        gen_resources.main()
                    result = subprocess.run(['bash', str(REPO / 'dm/ios/tools/stage_resources.sh')],
                                            env=enviro...
+4
infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

120 files scanned @ a662f29 | 10/29/2026 | heuristic scan — always review manually

risk by category
code execution25
network & exfiltration0
file system access0
obfuscation0
supply chain0
owasp / injection0
telemetry
files 120/2372rules hit 7engine v9commit a662f29

github

seedds/nxnative

Switch games running natively on iPhone, iPad and Mac: an NSP folder becomes an unsigned IPA (NSO rewriter, Horizon HLE host, NVN→Metal)

Objective-C
9678
1559
17d
2372 files
120 scanned(5%)
a662f29

network indicators░▒▓

Hosts this code names or would connect to. 44 found, decoded and call-site destinations first. Informational, not scored.

architecture░▒▓

entry (0) flagged (13) pkg (68)
182 nodes · 371 edgesscroll to zoom · click node to jump to finding
seedds/nxnative — ScanRepo