Projects / clonecheck
clonecheck
Scans an untrusted repo for hidden, auto-executing code before you run it.
Highlights
- Catches padding-hidden loaders that fire on npm run dev
- ~20 rules: obfuscation, eval + fetch loaders, install hooks, invisible Unicode
- Tuned for shape, not keywords — single-digit findings on ~15k ordinary files
Built with
Ask me about it
Want the details — why it's built this way, what went wrong, what I'd change? Ask my AI version or get in touch.
More projects
Lyrics 2 LiteratureA Laravel learning platform with teacher, student, and admin sections.3E Digital Solutions WebsiteA responsive, lightweight React single-page website with a focus on UI and UX.LocalClickyFully local macOS voice AI agent — nothing leaves your machine.Supabase Multi-TenancyReference architecture for multi-tenant SaaS on Supabase.