Search code examples
raspberry-piraspberry-pi3raspbian

How do I know this is not a virus?


So I want to install XMrig on the RPI, I happen to find the following article

https://dev.to/ijason/cpu-mining-on-a-raspberry-pi-1e1d

I wanted to know if anything in there is not written, I do have a pool ID and everything I just don't know if any packages contain any damaging effects to my RPI. (Reason, why I am mining, is for experimental purposes I know I won't gain much)


Solution

  • Submit files to Virustotal:

    Virustotal website

    The website search the cybersecurity community uploads and check if any of the binaries or URLs were already reported as malicious.

    Also, you can use ShiftLeftScan for Python code, Github code, etc:

    wget https://github.com/ShiftLeftSecurity/sast-scan/releases/download/v1.9.27/scan
    
    chmod +x scan
    
    sh <(curl https://slscan.sh)
    
    sudo apt install docker.io
    sudo systemctl enable --now docker
    sudo usermod -aG docker USER
    
    sudo docker run --rm -e "WORKSPACE=${PWD}" -v "$PWD:/app" shiftleft/sast-scan scan
    

    https://github.com/ShiftLeftSecurity/sast-scan