github.com / wsg138

wsg138/EnthusiaAutoClicker

Java·218 files·commit a29dac9·scanned 4d ago·cached ✓

14/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

verdict accurate?

10% file coverage

threat-state: lowlive

FINDINGS ░▒▓

infoSuspicious file in repoExecutable file (gradlew.bat) in repositorygradlew.bat+2

infoSuspicious file in repoExecutable file (gradlew.bat) in repositoryversions/1.20.2-1.20.4/gradlew.bat+2

infoSuspicious file in repoExecutable file (gradlew.bat) in repositoryversions/1.20.5-1.20.6/gradlew.bat+2

infoAuthor has no other public repositoriesGitHub user "Lincoln" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

21 files scanned @ a29dac9 | 10/25/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access0

obfuscation0

supply chain12

owasp / injection0

telemetry

files 21/218rules hit 4engine v7commit a29dac9

github

wsg138/EnthusiaAutoClicker

Java

145d

218 files

21 scanned(10%)

a29dac9

architecture░▒▓

No architecture graph available. This usually happens when the repo contains no scannable JS/TS/Python files or only a single file was analyzed.