live · scanning repos
Scanrepo
github.com
github.com / serpapps

serpapps/onlyfans-downloader

JavaScript·310 files·commit 8582fd7·scanned 3h ago·cached ✓
21/100
LOW RISK
Minor findings consistent with the project type. Nothing reachable from install hooks.
verdict accurate?
37% file coverage
threat-state: lowlive

FINDINGS ░▒▓

warningBrowser extension injects content scripts on all URLsManifest declares content scripts or host permissions for all URLs (tabs, scripting). Combined with wallet code this is a common fake-extension drainer pattern.src/manifest.json+6
infoMinified code in source directoryMinified/obfuscated code in source directories (not dist/) makes code review impossible.src/auth.js+3
warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.src/auth-ui.js+4
infoMinified code in source directoryMinified/obfuscated code in source directories (not dist/) makes code review impossible.src/auth/auth-api.js+3
warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.src/auth/auth-telemetry.js+4
warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.src/background-enhanced.js+4
infoMinified code in source directoryMinified/obfuscated code in source directories (not dist/) makes code review impossible.src/background-enhanced.js+3
warningHigh-entropy string literalsFound 11 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/background-enhanced.js+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.src/background-enhanced.js+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.src/content-enhanced.js+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.src/popup-enhanced.js+3
warningHigh-entropy string literalsFound 12 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/serp-bundles/background-service-worker.graph.js+3
warningHigh-entropy string literalsFound 3 long strings with high Shannon entropy. This is common in obfuscated payloads that hide URLs, keys, or bytecode.src/serp-bundles/content-1.graph.js+3

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

114 files scanned @ 8582fd7 | 10/30/2026 | heuristic scan — always review manually

risk by category
code execution0
network & exfiltration6
file system access0
obfuscation15
supply chain0
owasp / injection0
telemetry
files 114/310rules hit 13engine v10commit 8582fd7

github

serpapps/onlyfans-downloader

Download videos & images from Onlyfans profiles to backup media or enjoy offline

JavaScript
137
13
433d
310 files
114 scanned(37%)
8582fd7

network indicators░▒▓

Hosts this code names or would connect to. 47 found, decoded and call-site destinations first. Informational, not scored.

architecture░▒▓

entry (1) flagged (15) pkg (1)
108 nodes · 257 edgesscroll to zoom · click node to jump to finding
LOW (21/100) — serpapps/onlyfans-downloader — ScanRepo