w3bs.AccountStart building
PACKAGES / Profullstack

wx93

CLI and TUI for the wx93.me link shortener that creates short links, shows stats and prints QR codes.

ThreatCrush · No malware found
INSTALLw3bs install wx93.me/wx93

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install wx93.me/wx93Install wx93 and track it for updates
  2. wx93 <url>Shorten a URL and print the short link (no account needed)
  3. wx93 loginSign in through your browser so links are saved to your account
  4. wx93 lsList your short links
  5. wx93 stats <code>Show clicks, referrers, countries and devices for a link

Every option: wx93 --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in wx93 0.4.1. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-10-29 04:48 UTC · threatcrush 0.13.30
Files
72 (installer + github.com/profullstack/wx93.me)
Findings
6 critical · 3 high · 44 medium · 12 low
65 other findings (not malware)
  • critical
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:543sql-template-interpolation · CWE-89
  • critical
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:675sql-template-interpolation · CWE-89
  • critical
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:963sql-template-interpolation · CWE-89
  • critical
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1030sql-template-interpolation · CWE-89
  • critical
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1601sql-template-interpolation · CWE-89
  • critical
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1609sql-template-interpolation · CWE-89
  • high
    Database URL with credentialssource/.github/workflows/ci.yml:22secret-database-url · CWE-798
  • high
    outbound request to a non-constant URLsource/apps/web/public/sw.js:29js-ssrf-outbound-request · CWE-918
  • high
    Database URL with credentialssource/docker-compose.yml:18secret-database-url · CWE-798
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/abuse.js:184sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:252sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:523sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:524sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:526sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:771sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:784sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:792sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:943sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1005sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1102sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1290sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1491sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1515sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1610sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/auth.js:119sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/auth.js:152sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/auth.js:192sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/auth.js:207sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/auth.js:209sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/billing.js:81sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/billing.js:87sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/credits.js:142sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/credits.js:145sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/credits.js:162sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/credits.js:177sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/credits.js:190sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:165sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:169sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:171sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:181sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:290sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:348sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:349sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:355sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/oauth.js:41sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/qrcodes.js:45sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/qrcodes.js:52sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/qrcodes.js:57sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/qrcodes.js:82sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/qrcodes.js:87sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/qrcodes.js:88sql-template-interpolation · CWE-89
  • medium
    regular expression compiled from a variablesource/apps/web/src/throttle.js:48js-regex-from-input · CWE-1333
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/migrate.js:31sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:114sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:146sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:177sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:185sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:287sql-template-interpolation · CWE-89
  • low
    Hardcoded Credentialsource/test/api.test.js:390secret-generic-credential · CWE-798
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:570sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:578sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:587sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:663sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:697sql-template-interpolation · CWE-89
  • low
    Hardcoded Credentialsource/test/qr.test.js:153secret-generic-credential · CWE-798

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/wx93.me/wx93/badge.svg)](https://w3bs.org/packages/wx93.me/wx93)