SpyTV v1.2.1
Summary
Bug-fix and feature release over v1.2.0: TV header icon, 13 new free AI provider models, Electron build config improvements, missing python-nmap dependency fix. Ships verified APK + standalone EXE.
Changes
| File |
Change |
c2_dashboard.html |
Added TV header icon (SVG) with .header-tv-icon styles |
c2_cve_feed.py |
Added 13 free OpenRouter models (Nemotron 3 family, Laguna, Inkling, Dots3, Ling) |
android/.../C2Server.kt |
Added matching model entries for the Android standalone C2 |
electron/package.json |
Version bump 1.0.7 -> 1.1.0; extraResources bundle; darwin dmg target; asar false |
electron/main.js |
Removed unused DASHBOARD_URL; hardened frameless window startMove call |
electron/preload.js |
App version 1.0.2 -> 1.1.0 |
requirements.txt |
Added missing python-nmap>=0.6.1 (required by core/scanner.py; was breaking pytest collection) |
SHA256SUMS.txt |
Regenerated for rebuilt assets |
Release Artifacts
| Asset |
Size |
SpyTV.apk |
~6.1 MB |
SpyTV-C2-standalone.exe |
~25 MB |
SHA256 checksums are in the SHA256SUMS.txt file included in the repository.
Security
- pip-audit: No known vulnerabilities in Python dependencies.
- npm audit: 8 moderate vulnerabilities from
sprintf-js (used transitively by electron-builder). All versions vulnerable, no patched release published. Fix via --force requires downgrading electron-builder (breaking change, forbidden by policy). Accepted risk, dev-only build tooling.
- GitHub Dependabot: 1 open moderate alert (#55,
sprintf-js transitive). Same accepted rationale.
- Hardcoded credentials: None found in tracked files.
Pipeline Summary (Phases 1-10)
| Phase |
Description |
Status |
| 1 |
Error-correct (nmap dep, JS duplicates verified clean) |
Completed |
| 2 |
Repo cleanup (temp scripts, __pycache__, electron/node_modules, stale port-8443 process killed) |
Completed |
| 3 |
file_structure.txt regenerated |
Completed (prior run) |
| 4 |
Vulnerability sweep (pip-audit clean, npm 8 accepted, dependabot 1 accepted) |
Completed |
| 5 |
pytest tests/ — 116 passed; compileall clean; tvreaper.js + electron JS syntax OK; YAML valid |
Completed |
| 6 |
Debug (port 8443 freed, no Gradle races, PowerShell ; separators) |
Completed |
| 7 |
APK rebuilt + verified (apksigner, aapt), EXE rebuilt, SHA256SUMS regenerated |
Completed |
| 8 |
Committed (deaf176) |
Completed |
| 9 |
Pushed to main (only branch, already default) |
Completed |
| 10 |
Tagged v1.2.1 |
Completed |
