Ask HN: How do you check desktop apps for malicious code?

Just wondering how people are dealing with security checks on the flurry of vibe coded apps that are coming out these days.

I've been a linux user for a long time and really enjoy the wave of new rust apps based on GPUI or similar tech to bring more polished and performant desktop apps. But with AI driven attacks becoming more advanced I'm getting more and more suspicous of projects with only one contributor, despite them being public. I know that it doesnt mean a project with many contributors is automatically safe and supply chain attacks can occur for different reasons too. But I'm just imagining someone exfiltrating files or secrets from my local machine and sending them off somewhere. This probably wouldve been easy to spot with some pattern matching in the past but nowadays an AI could split up the logic across 1000s of files and make it really hard to see??

Are there any services or tools you can recommend to perform these checks?