▸ yeet-src/poolnarcscreen
poolnarc
396by yeet-src·updated Aug 2026#248
Behavioral hidden-cryptominer detector for Linux in eBPF — flags processes talking to mining-pool ports while spoofing kernel-thread names. No signatures, no agent, no cloud. CO-RE portable.
$ run it on a Linux host with yeet installed
no yeet yet? get started →$ yeet run gh:yeet-src/poolnarccopy