From 04779ece8f4da319eacd78bf55c509b4cb75bd63 Mon Sep 17 00:00:00 2001 From: Cuynu Date: Fri, 16 Jan 2026 17:16:24 +0700 Subject: [PATCH] feat: customize.sh: service.sh: detect and uninstall unknown magisk there's new proprietary nirtal magisk, which is found from Telegram, this Magisk is unknown and the developer is anonymous. it might malicious, and takes user data im not going to allow use of this root impl, this commit will uninstall that proprietary nirtal magisk, as long as the app is not hidden with randomized packageName. Signed-off-by: Cuynu --- module_new/zdefend-fix/customize.sh | 9 +++++++++ module_new/zdefend-fix/service.sh | 1 + 2 files changed, 10 insertions(+) diff --git a/module_new/zdefend-fix/customize.sh b/module_new/zdefend-fix/customize.sh index 4e1642c..b942b3d 100644 --- a/module_new/zdefend-fix/customize.sh +++ b/module_new/zdefend-fix/customize.sh @@ -16,6 +16,13 @@ nonfosskitsune() { exit 1 } +maliciousmagisk() { + echo "Nirtal Magisk found! it's not compatible with this module..." + su -lp 2000 -c "cmd notification post -S bigtext -t 'WARNING' tag 'You ARE USING UNKNOWN MAGISK! Please reinstall official Magisk from topjohnwu for your safety!" >/dev/null 2>&1 + pm uninstall io.github.Nirtal0.magisk +} + + notmbcp() { echo "MB Bank [com.mbmobile] is installed, but it seems like that the app is NOT MBCP" echo "Please install MBCP v6.4.60+ in order to use this module !" @@ -31,6 +38,8 @@ tsnghma() { [[ -d /data/data/com.tsng.hidemyapplist ]] && tsnghma +[[ -d /data/data/io.github.Nirtal0.magisk ]] && maliciousmagisk + [[ -d /data/data/io.github.x0eg0.magisk ]] && nonfosskitsune # Check if MB is installed or nope diff --git a/module_new/zdefend-fix/service.sh b/module_new/zdefend-fix/service.sh index 9ae5820..5ed6433 100644 --- a/module_new/zdefend-fix/service.sh +++ b/module_new/zdefend-fix/service.sh @@ -7,6 +7,7 @@ done # Delete /data/magisk if it exists so MB doesnt failling when eKYC with error code EKYC3002-MS6998 for Magisk users [[ -d /data/magisk ]] && rm -r /data/magisk [[ -d /data/data/io.github.x0eg0.magisk ]] && rm -r /data/adb/modules/zdefend-fix +[[ -d /data/data/io.github.Nirtal0.magisk ]] && rm -r /data/adb/modules/zdefend-fix rm -rf /data/data/com.mbmobile/files/0* rm -rf /data/data/com.mbmobile/files/1* rm -rf /data/data/com.mbmobile/files/2*