APEX IA Scanner

• Analyzed: May 11, 2026, 2:11 AM
• Findings: 1
• Version: 2.4.0
• Hash: 41b41ad4a9c6e9a973e7b3e97194c23b13c89107968a6660f300e70ecac47ae6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains multiple versions of a Binance Futures trading bot with several high-risk indicators. Most notably, multiple files (e.g., `apex-ia-aggressive.mjs`, `apex-ia-final-20x.mjs`, `apex-ia-robot.mjs`) contain hardcoded Binance API keys and secrets, which is a severe security vulnerability and potentially a honeypot risk. Additionally, `realtime-scanner.js` uses `child_process.execSync` to automatically execute shell commands for package installation, a practice that can be exploited for arbitrary command execution. While the scripts appear to implement the described trading logic, the combination of hardcoded credentials, broad shell execution capabilities, and aggressive promotional content for a 'PRO' version via email contact ([e-mail]) makes the bundle highly untrustworthy.