github.com / sumit-kotiya789
sumit-kotiya789/
TypeScript·68 files·commit 039aee0·scanned 5d ago·cached ✓
11/100
LOW RISK
Minor findings consistent with the project type. Nothing reachable from install hooks.
verdict accurate?
Created 0 days ago
No stars or forks
Created in the last 7 days
No community activity
threat-state: lowlive
FINDINGS ░▒▓
warningDependency runs install scripts"<root>/postinstall" executes code during installation. Malicious packages use this to drop payloads before the app even runs.package.json+3
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
52 files scanned @ 039aee0 | 8/19/2026 | heuristic scan — always review manually
risk by category
code execution0
network & exfiltration0
file system access0
obfuscation0
supply chain3
owasp / injection0
telemetry
files 52/68rules hit 1engine v5commit 039aee0
github
sumit-kotiya789/payment-gateway-crypto
0
0
6d
68 files
52 scanned(76%)
039aee0
architecture░▒▓
entry (2) flagged (0) pkg (37)
86 nodes · 164 edgesscroll to zoom · click node to jump to finding