github.com / sypnose-cloud

sypnose-cloud/claude-desktop-multi

PowerShell·5 files·commit fdf5b3c·scanned 4d ago·cached ✓

11/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

verdict accurate?

threat-state: lowlive

FINDINGS ░▒▓

warningSuspicious Windows batch commandBatch file contains commands commonly used to download and execute remote payloads (powershell, certutil, bitsadmin, curl to pipe, etc.).INSTALL.cmd

    echo Requesting administrator permission...
    powershell -Command "Start-Process -Verb RunAs -FilePath '%~f0' -WorkingDirectory '%~dp0'"
    exit /b
)

infoSuspicious file in repoExecutable file (INSTALL.cmd) in repositoryINSTALL.cmd+2

infoSuspicious file in repoExecutable file (install.ps1) in repositoryscripts/install.ps1+2

infoSuspicious file in repoExecutable file (uninstall.ps1) in repositoryscripts/uninstall.ps1+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

1 files scanned @ fdf5b3c | 8/20/2026 | heuristic scan — always review manually

risk by category

code execution5

network & exfiltration0

file system access0

obfuscation0

supply chain6

owasp / injection0

telemetry

files 1/5rules hit 4engine v5commit fdf5b3c

github

sypnose-cloud/claude-desktop-multi

Run multiple Claude Desktop instances side by side on Windows, each with its own account/MCP/settings. One click, survives auto-updates.

PowerShell

88d

5 files

1 scanned(20%)

fdf5b3c

architecture░▒▓

No architecture graph available. This usually happens when the repo contains no scannable JS/TS/Python files or only a single file was analyzed.