github.com / snoww

snoww/loa-logs

JavaScript·3799 files·commit 97bde87·scanned 6h ago·cached ✓

40/100

SUSPICIOUS

Obfuscation or dynamic code paths detected. Intent unclear — review before running anything.

verdict accurate?

3% file coverage

Desktop app detected

threat-state: suspiciouslive

FINDINGS ░▒▓

what this code does░▒▓

What happens when you open, install or run it, from the findings below.

when runsrc-tauri/src/app/compat.rs and src-tauri/src/nineveh/mod.rs start system processes. src-tauri/src/app/compat.rs, src-tauri/src/nineveh/mod.rs

criticalRust process Command usagestd::process::Command can execute arbitrary shell commands. Malware uses it to drop payloads, exfiltrate data, or establish persistence.src-tauri/src/app/compat.rs

    pub fn new<S: AsRef<OsStr>>(program: S) -> std::process::Command {
        let mut command = std::process::Command::new(program);
        command.creation_flags(Command::DETACHED_PROCESS);
       ...

criticalRust process Command usagestd::process::Command can execute arbitrary shell commands. Malware uses it to drop payloads, exfiltrate data, or establish persistence.src-tauri/src/nineveh/mod.rs

    );
    let mut command = tokio::process::Command::new(&nineveh_path);
    command.arg("--ipc-port").arg("6971");
    command.env("NO_COLOR", "1");

infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2

infoSuspicious file in repoVery large source file (2337KB) — could contain obfuscated payloadsrc-tauri/build-data/ip-ranges.json+2

infoSuspicious file in repoVery large source file (2484KB) — could contain obfuscated payloadsrc-tauri/meter-data/Ability.json+2

infoSuspicious file in repoVery large source file (3080KB) — could contain obfuscated payloadsrc-tauri/meter-data/AddonSkillFeature.json+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

120 files scanned @ 97bde87 | 10/30/2026 | heuristic scan — always review manually

risk by category

code execution18

network & exfiltration0

file system access0

obfuscation0

supply chain15

owasp / injection0

telemetry

files 120/3799rules hit 6engine v10commit 97bde87

github

snoww/loa-logs

LOA Logs - Modern DPS Meter for Lost Ark

JavaScript

199

1311d

3799 files

120 scanned(3%)

97bde87

network indicators░▒▓

Hosts this code names or would connect to. 11 found, decoded and call-site destinations first. Informational, not scored.

https://api.github.com/repos/$REPO/releases/latesturlnext to network callscripts/linux/install.sh:28 +1 more
https://raw.githubusercontent.com/$REPO/master/src-tauri/icons/icon.pngurlnext to network callscripts/linux/install.sh:100
https://api.snow.xyz/bansurlsrc-tauri/src/api/ban_list.rs:9
https://snow.xyz/loa-logs/beta.jsonurlsrc-tauri/src/constants.rs:31
https://api.snow.xyzurlsrc-tauri/src/setup.rs:79 +1 more
https://lostark.bibleurlsrc/lib/utils.ts:13
time.windows.comdomainsrc-tauri/src/api/ntp_clock.rs:11
pool.ntp.orgdomainsrc-tauri/src/api/ntp_clock.rs:11
time.cloudflare.comdomainsrc-tauri/src/api/ntp_clock.rs:11
https://github.com/tauri-apps/tauri-plugin-autostart/blob/v1/src/lib.rsurlcomment onlysrc-tauri/src/app/autostart/mod.rs:14
https://www.sqlite.org/lang_vacuum.htmlurlcomment onlysrc-tauri/src/database/queries.rs:284

architecture░▒▓

entry (0) flagged (2) pkg (143)

252 nodes · 277 edgesscroll to zoom · click node to jump to finding