“DEX_Nova_MVP is a minimal viable product that demonstrates a full-stack DEX/marketplace flow combining a REST API backend, a React frontend…”
AI
VS Code task executes remote shell payload
Local reference
Suspicious dependency
Inferred
Loading file contents…
Loading traits…
Identity
| SHA-256 | 0ccec519d71159969952327fc8b85b3a2a8dc0732c4cc20b612674d463330daf |
|---|---|
| Canonical SHA-256 | 000340653f98040e3d9947108d29f70d42fb0a89d563da1177635da1d43f5fd8 |
| Filename | Sabbirnde-Nava.tar.gz |
| Package | Sabbirnde/Nava |
| PURL | pkg:github/sabbirnde/nava |
Origin
| Source | forager |
|---|---|
| Feed | opensourcemalware.com |
| Ecosystem | github |
| Domain | github.com |
| URL | https://github.com/Sabbirnde/Nava/archive/HEAD.tar.gz |
Timeline
| First seen | 27 Jul 2026 18:16 UTC |
|---|---|
| First analyzed | 24 Aug 2026 14:34 UTC |
| Last analyzed | 24 Aug 2026 14:56 UTC |
| Last updated | 24 Aug 2026 14:56 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 14c51 |
Not seeing what you expected? Let us know