DANGER
malware detected
github.com / thakur2309
thakur2309/
Python·9 files·commit 90bf0ce·scanned 23m ago·cached ✓
70/100
DANGEROUS
Sensitive capability combinations reachable from entry points. Do not run without review.
This repository contains patterns associated with malware. Do NOT run this code.
verdict accurate?
Research / educational context
threat-state: dangerouslive
FINDINGS ░▒▓
criticalPython dynamic code executioneval(), exec() or compile() on untrusted input can execute arbitrary code. Common in Python malware for running obfuscated payloads.pegasusV-1.2.py
ns = {}
exec(code, ns) # payload must define run()
ns["run"]() # execute payload
+7warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.pegasusV-1.2.py
# -------- Screen clear --------
os.system("cls" if os.name == "nt" else "clear")
# -------- SAME SECRET used in encryptor.py --------
SECRET = b"secret!"+4criticalPython dynamic code executioneval(), exec() or compile() on untrusted input can execute arbitrary code. Common in Python malware for running obfuscated payloads.pegasus_v1.1.py
ns = {}
exec(code, ns) # payload must define run()
ns["run"]() # execute payload
+7warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.pegasus_v1.1.py
# -------- Screen clear --------
os.system("cls" if os.name == "nt" else "clear")
# -------- SAME SECRET used in encryptor.py --------+4criticalPython dynamic code executioneval(), exec() or compile() on untrusted input can execute arbitrary code. Common in Python malware for running obfuscated payloads.pegasus_v_1.3.py
ns = {}
exec(code, ns) # payload must define run()
ns["run"]() # execute payload+7warningPython subprocess / os.system usageos.system() or subprocess with shell=True / suspicious commands can execute arbitrary shell commands. Plain pip/package installs are usually benign.pegasus_v_1.3.py
# -------- Screen clear --------
os.system("cls" if os.name == "nt" else "clear")
# -------- SAME SECRET used in encryptor.py --------
SECRET = b"secret!"
+4warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.pegasusV-1.2.py+4
warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.pegasus_v1.1.py+4
warningExtremely long lines (>1000 chars)Very long lines in source files (not minified bundles) can hide malicious code.pegasus_v_1.3.py+4
warningLarge base64-encoded blobA 6092-character base64 blob was found. May hide a remote payload or encoded executable code.pegasusV-1.2.py
C/mubr4a+ruQPi1UkSPG0dJarvqSaHIKk70+96s5v1ru1nF/53E1dxWrFx3S...+3
warningLarge base64-encoded blobA 3848-character base64 blob was found. May hide a remote payload or encoded executable code.pegasus_v1.1.py
C/muKDQb+kt3HYXKlEvy7r60L+gVnlDkrkc5/R21V3/3Wjd4UlMW7MKku8cp...+3
warningLarge base64-encoded blobA 11312-character base64 blob was found. May hide a remote payload or encoded executable code.pegasus_v_1.3.py
C/m+Tw4HwkX3vJUyVL2p0PfDAb+/OlfZhwsNRUoUzi0CDbOol5sm0Tx4Ly7H...+3
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
3 files scanned @ 90bf0ce | 8/25/2026 | heuristic scan — always review manually
risk by category
code execution25
network & exfiltration0
file system access0
obfuscation15
supply chain0
owasp / injection0
telemetry
files 3/9rules hit 13engine v5commit 90bf0ce
github
thakur2309/PAGASUS-PRO
461
134
374d
9 files
3 scanned(33%)
90bf0ce
architecture░▒▓
entry (0) flagged (3) pkg (5)
8 nodes · 15 edgesscroll to zoom · click node to jump to finding