live · scanning repos
Scanrepo
github.com
DANGER
malware detected
github.com / xscriptor-colors

xscriptor-colors/vscode

HTML·3908 files·commit f676442·scanned 4d ago·cached ✓
85/100
MALICIOUS
Matches known-malicious patterns. Do not clone or install.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?
2% file coverage
threat-state: maliciouslive

FINDINGS ░▒▓

criticalchild_process / exec usageExecuting shell commands can be used to download and run malware, exfiltrate data, or modify system files.extensions/xglass/extension.js
  if (process.platform === 'win32') {
    const { execFile } = require('child_process');
    const psFile = context.asAbsolutePath('./SetTransparency.cs');

+8
criticalRemote script piped into a shellA shell script downloads remote content and executes it directly (e.g. `curl … | bash`). The payload is never stored or reviewable and can change server-side — a classic malware/backdoor install pattern.mods/wayland-fractional-scaling/install.sh
# Remote usage:
#   curl -fsSL https://raw.githubusercontent.com/xscriptor-colors/vscode/main/mods/wayland-fractional-scaling/install.sh | bash -s -- --insiders
#
# Run with --help for all options.
+10
infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

90 files scanned @ f676442 | 10/25/2026 | heuristic scan — always review manually

risk by category
code execution20
network & exfiltration0
file system access0
obfuscation0
supply chain0
owasp / injection0
telemetry
files 90/3908rules hit 3engine v7commit f676442

github

xscriptor-colors/vscode

A complete collection of Xscriptor customizations for VSCode & Forks, including themes, code snippets, and UI mods.

HTML
18
1
405d
3908 files
90 scanned(2%)
f676442

architecture░▒▓

entry (0) flagged (1) pkg (7)
27 nodes · 7 edgesscroll to zoom · click node to jump to finding
⚠️ MALICIOUS (85/100) — xscriptor-colors/vscode — ScanRepo