Mercurial to Git Converter

• Analyzed: Mar 23, 2026, 9:36 PM
• Findings: 1
• Version: 1.0.0
• Hash: 8dcb2e5ebd31994d18b30f2a6d8cdaee79ba0db0ed9245abdf10886afef6da86
• Source: palm
• External report: View on VirusTotal

Findings (1)

The scripts facilitate Mercurial-to-Git migration but include high-risk behaviors such as executing 'sudo apt-get' for package installation in hg-to-git.sh and performing unconfirmed 'rm -rf' on target directories in hg-to-git-large.sh. Additionally, the scripts automatically clone and execute code from an external GitHub repository (https://github.com/frej/fast-export.git) if the required tool is missing, which introduces a supply chain risk.