DANGER
malware detected
github.com / tejashmakwana
tejashmakwana/ motionmaxxing
JavaScript·105 files·commit 8c8ec0f·scanned 5d ago·cached ✓
70/100
DANGEROUS
Sensitive capability combinations reachable from entry points. Do not run without review.
This repository contains patterns associated with malware. Do NOT run this code.
verdict accurate?
Created 16 days ago
Created 16 days ago
17% file coverage
threat-state: dangerouslive
FINDINGS ░▒▓
criticaleval() usage detectedeval() executes arbitrary code and is commonly used in malware to run obfuscated payloads fetched from remote servers.scripts/_cdp.mjs
},
async eval(expression, { timeout = 60000 } = {}) {
const r = await send('Runtime.evaluate', { expression, awaitPromise: true, returnByValue: true }, timeout);
if (r.exce...+8infoBase64 encoding usedatob() or Buffer.from with base64. Common in legitimate code but also used to hide malicious URLs.scripts/brand.mjs
async function fetchBuf(u, ref, max = 12e6) {
if (u.startsWith('data:')) { const m = /^data:([^;,]*)(;base64)?,(.*)$/s.exec(u); if (!m) throw new Error('bad data uri'); return { buf: m[2] ? Buffer.f...+2Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
18 files scanned @ 8c8ec0f | 10/22/2026 | heuristic scan — always review manually
risk by category
code execution10
network & exfiltration2
file system access0
obfuscation0
supply chain0
owasp / injection0
telemetry
files 18/105rules hit 3engine v7commit 8c8ec0f
github
tejashmakwana/motionmaxxing
Looksmaxxing for motion graphics. An agent skill that turns AI slop videos into films that look made by a motion designer.
981
92
22d
105 files
18 scanned(17%)
8c8ec0f
architecture░▒▓
entry (0) flagged (1) pkg (25)
41 nodes · 63 edgesscroll to zoom · click node to jump to finding