Observed arrival · 2026-11-11
$SNIFF Repo Scanner
Credibility concern recorded. The source reference remains available for verification and correction.
A browser-based scanner for checking public GitHub repositories or ZIP files for malware clues before running the code.
- For
- People checking unfamiliar repositories before running them
- Worth noticing
- It says public GitHub repositories can be scanned by link; non-public repositories need to be supplied as ZIP files.
Field notes
The page accepts a public GitHub link or a ZIP; it says non-public repositories require the ZIP route. Its checklist ranges from npm install hooks and VS Code folder-open tasks to lookalike packages, outbound webhooks, wallet or browser-credential searches, and new-repository history. The site says uploaded files are read in memory and not retained, while result links are saved for sharing; it also recommends a VM or cloud development environment even after a clean scan.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue