← back to browse
goat command grade F

fluxpro

Fluxpro Image Generator via API

0
views
0
likes
0
installs
analysis — static scan, nothing executed
0 grade F
Dangerous — do not install without a full manual review
Security 18
Privacy 96
Quality 86
Maintenance 90
Community 0
critical Downloads data and runs dynamic code

The file makes network requests AND executes dynamically built code. This pairing is how remote-controlled backdoors are written.

L27return eval(
high Dynamic code execution

Runs code that is built at runtime (eval, new Function, vm). This is the most common way malicious payloads are hidden in scripts.

L27return eval(
medium Large encoded blob

A very long base64/hex-looking string is embedded in the file. Payloads are often smuggled this way.

L25const _0x12a9 = "KGFzeW5jICgpID0+IHsKICBjb25zdCBvYmZ1c2NhdGVkQXV0aG9yID0gU3RyaW5…
low Network access

Makes HTTP/WebSocket requests. Check where the data goes.

L1const axios = require("axios");
capabilities — what this file can do, regardless of intent
Network Filesystem Shell Env vars Dynamic code Session data Installs packages Process control
dependencies

axios

checks
Exports a command/module
Handles errors (try/catch or .catch)
Readable, not minified
Has explanatory comments
No deprecated dependencies
Reasonable size (< 200 KB)
raw source — loaded on demand
Loading source…

View raw file · View analysis as JSON