DANGER
malware detected
github.com / xscriptor-colors
xscriptor-colors/ vscode
HTML·3908 files·commit f676442·scanned 4d ago·cached ✓
85/100
MALICIOUS
Matches known-malicious patterns. Do not clone or install.
This repository contains patterns associated with malware. Do NOT run this code.
verdict accurate?
2% file coverage
threat-state: maliciouslive
FINDINGS ░▒▓
criticalchild_process / exec usageExecuting shell commands can be used to download and run malware, exfiltrate data, or modify system files.extensions/xglass/extension.js
if (process.platform === 'win32') {
const { execFile } = require('child_process');
const psFile = context.asAbsolutePath('./SetTransparency.cs');
+8criticalRemote script piped into a shellA shell script downloads remote content and executes it directly (e.g. `curl … | bash`). The payload is never stored or reviewable and can change server-side — a classic malware/backdoor install pattern.mods/wayland-fractional-scaling/install.sh
# Remote usage:
# curl -fsSL https://raw.githubusercontent.com/xscriptor-colors/vscode/main/mods/wayland-fractional-scaling/install.sh | bash -s -- --insiders
#
# Run with --help for all options.+10Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
90 files scanned @ f676442 | 10/25/2026 | heuristic scan — always review manually
risk by category
code execution20
network & exfiltration0
file system access0
obfuscation0
supply chain0
owasp / injection0
telemetry
files 90/3908rules hit 3engine v7commit f676442
github
xscriptor-colors/vscode
A complete collection of Xscriptor customizations for VSCode & Forks, including themes, code snippets, and UI mods.
18
1
405d
3908 files
90 scanned(2%)
f676442
architecture░▒▓
entry (0) flagged (1) pkg (7)
27 nodes · 7 edgesscroll to zoom · click node to jump to finding