Cmdjervis
Jervis - JARVIS style smart assistant
Aliases: jarvis, jv
The file makes network requests AND executes dynamically built code. This pairing is how remote-controlled backdoors are written.
const r = Function(`"use strict"; return (${calcText})`)();Runs code that is built at runtime (eval, new Function, vm). This is the most common way malicious payloads are hidden in scripts.
const r = Function(`"use strict"; return (${calcText})`)();Spawns operating-system processes through child_process. A command running shell code can read or change anything the bot's account can.
const { exec } = require("child_process");Calls fs.rm / unlink / rmdir. Check what path it deletes and whether a user can influence it.
if (out.cleanup) setTimeout(() => fs.unlink(out.cleanup, () => {}), 30000);Calls process.exit / process.kill / process.abort, so one command can stop the whole bot.
setTimeout(() => process.exit(2), 1500);Content behind a paste/shortener link can be swapped out by its owner at any time.
const r = await get("https://is.gd/create.php", { format: "simple", url: m[2] });Reads or writes files on the machine running the bot.
const fs = require("fs");Queries an IP-echo service, which reveals where the bot is hosted.
const d = await get(`http://ip-api.com/json/${m[1]}`);Talks to a raw IP address instead of a named host — harder to audit and easy to redirect.
info: "🌍 তথ্য\n• আবহাওয়া ঢাকা • নামাজের সময় • hijri\n• btc price • 100 usd to bdt\n• country Bangladesh • github torvalds • ip 8.8.8.8\n• define love • tr…Makes HTTP/WebSocket requests. Check where the data goes.
const axios = require("axios");axios
Loading source…