Skip to content

Bump anchore/scan-action from 7.4.0 to 7.4.2 - #682

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/anchore/scan-action-7.4.2
Open

Bump anchore/scan-action from 7.4.0 to 7.4.2#682
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/anchore/scan-action-7.4.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps anchore/scan-action from 7.4.0 to 7.4.2.

Release notes

Sourced from anchore/scan-action's releases.

v7.4.2

Additional Changes

(Full Changelog)

Commits
  • 27805bf chore(deps): update Grype to latest release (#755) (#756)
  • 8964e60 chore(deps): update Grype to latest release (#755)
  • 6875336 chore: bump fast-xml-parser from 5.5.8 to 5.7.3 (#654)
  • 65b5fb1 chore: bump esbuild from 0.28.0 to 0.28.2 (#753)
  • b905e0e chore(deps): update Grype to latest release (#713)
  • e49c028 fix: pin grype install.sh to the release tag being installed (#750)
  • db8f0b6 chore: bump globals from 17.9.0 to 17.11.0 (#754)
  • 35bf076 chore: bump eslint from 10.8.0 to 10.8.1 (#752)
  • bd77fb5 chore: bump anchore/workflows/.github/workflows/check-gate.yaml (#720)
  • d04f6c4 chore: bump lint-staged from 17.2.0 to 17.3.0 (#748)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 7.4.0 to 7.4.2.
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](anchore/scan-action@e116508...27805bf)

---
updated-dependencies:
- dependency-name: anchore/scan-action
  dependency-version: 7.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code patch Patch semver labels Aug 31, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-cursor/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/ansi-regex/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/ansi-regex/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/ansi-regex?sponsor=1
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/ansi-styles/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/chalk/blob/main/readme.md

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/ansi-styles/index.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM anti-static/obfuscation/math complex math with parseInt or fromCharCode conversions (green / 255 * 5)
(blue / 255 * 5)
(red / 255 * 5)
(remainder / 6)
(code - 232)
(code / 36)
49/conversi
(code - 8)
(red - 8)
parseInt
-LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(h
-LOW data/encoding/int parses integers parseInt(
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/Qix-/color-convert/blob/3f0e0d4e92e235796ccb17f6e85c72

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/ansi-styles/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW fs/file/delete_forcibly Forcibly deletes files rm --command
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/ansi-styles?sponsor=1
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/is-fullwidth-code-point/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://en.wikipedia.org/wiki/Halfwidth_and_fullwidth_forms
https://en.wikipedia.org/wiki/Code_point

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/is-fullwidth-code-point/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/slice-ansi/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://en.wikipedia.org/wiki/ANSI_escape_code
https://github.com/chalk/chalk

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/slice-ansi/index.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW data/encoding/int parses integers parseInt(

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/slice-ansi/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW anti-behavior/random_behavior uses a random number generator random
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/slice-ansi?sponsor=1

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/string-width/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/http Uses the HTTP protocol http
-LOW net/url/embedded contains embedded HTTPS URLs https://en.wikipedia.org/wiki/Halfwidth_and_fullwidth_forms
https://en.wikipedia.org/wiki/ANSI_escape_code
https://www.unicode.org/reports/tr11/

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/string-width/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/strip-ansi/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://en.wikipedia.org/wiki/ANSI_escape_code
https://github.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/strip-ansi/index.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/node_modules/strip-ansi/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/strip-ansi?sponsor=1
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/cli-truncate/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/colorette/index.cjs [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW exec/shell/TERM Look up or override terminal settings TERM
-LOW os/env/get Retrieve environment variable values env.TERM

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/colorette/index.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW exec/shell/TERM Look up or override terminal settings TERM
-LOW os/env/get Retrieve environment variable values env.TERM

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/colorette/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./package
./index
-LOW 3P/guarddog/capability_process_hooks Detects install hooks that can execute code during package installation, by GuardDog Team, Datadog

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/environment/index.d.ts [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM c2/tool_transfer/os references multiple operating systems https://
Windows
Linux
macOS
-LOW net/url/embedded contains embedded HTTPS URLs https://developer.mozilla.org/en-US/docs/Web/API/DedicatedWorkerGlobalSco
https://developer.mozilla.org/en-US/docs/Web/API/ServiceWorkerGlobalScope
https://developer.mozilla.org/en-US/docs/Web/API/SharedWorkerGlobalScope
https://developer.mozilla.org/en-US/docs/Web/API/Web_Workers_API
https://github.com/jsdom/jsdom
https://nodejs.org

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/environment/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM c2/tool_transfer/os references multiple operating systems https://
windows
linux
macos
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/eventemitter3/index.mjs [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW exec/imports/python imports python modules import EventEmitter

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/eventemitter3/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./package
./index
-LOW exec/plugin references a 'plugin' plugin
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/primus/eventemitter3/issues

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/fast-xml-parser/lib/fxp.d.cts [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./pem
-LOW exec/imports/python imports python modules import type

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/fast-xml-parser/src/pem.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/NaturalIntelligence/path-expression-matcher

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/get-east-asian-width/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/http Uses the HTTP protocol http
-LOW net/url/embedded contains embedded HTTP URLs http://www.unicode.org/reports/tr11/

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/get-east-asian-width/index.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./lookup
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sindresorhus/is-fullwidth-code-point

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/get-east-asian-width/lookup.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM anti-static/obfuscation/hex many references to hexadecimal values 0x100000
0x10FFFD
0x16FE0
0x16FE4
0x16FF0
0x16FF6
0x17000
0x18CD5
0x18CFF
0x18D1E
0x18D80
0x18DF2
0x1AFF0
0x1AFF3
0x1AFF5
0x1AFFB
0x1AFFD
0x1AFFE
0x1B000
0x1B122
0x1B132
0x1B150
0x1B152
0x1B155
0x1B164
0x1B167
0x1B170
0x1B2FB
0x1D300
0x1D356
0x1D360
0x1D376
0x1F004
0x1F0CF
0x1F100
0x1F10A
0x1F110
0x1F12D
0x1F130
0x1F169
0x1F170
0x1F18D
0x1F18E
0x1F18F
0x1F190
0x1F191
0x1F19A
0x1F19B
0x1F1AC
0x1F200
0x1F202
0x1F210
0x1F23B
0x1F240
0x1F248
0x1F250
0x1F251
0x1F260
0x1F265
0x1F300
0x1F320
0x1F32D
0x1F335
0x1F337
0x1F37C
0x1F37E
0x1F393
0x1F3A0
0x1F3CA
0x1F3CF
0x1F3D3
0x1F3E0
0x1F3F0
0x1F3F4
0x1F3F8
0x1F43E
0x1F440
0x1F442
0x1F4FC
0x1F4FF
0x1F53D
0x1F54B
0x1F54E
0x1F550
0x1F567
0x1F57A
0x1F595
0x1F596
0x1F5A4
0x1F5FB
0x1F64F
0x1F680
0x1F6C5
0x1F6CC
0x1F6D0
0x1F6D2
0x1F6D5
0x1F6D8
0x1F6DC
0x1F6DF
0x1F6EB
0x1F6EC
0x1F6F4
0x1F6FC
0x1F7E0
0x1F7EB
0x1F7F0
0x1F90C
0x1F93A
0x1F93C
0x1F945
0x1F947
0x1F9FF
0x1FA70
0x1FA7C
0x1FA80
0x1FA8A
0x1FA8E
0x1FAC6
0x1FAC8
0x1FACD
0x1FADC
0x1FADF
0x1FAEA
0x1FAEF
0x1FAF8
0x20000
0x2FFFD
0x30000
0x3FFFD
0xE0100
0xE01EF
0xF0000
0xFFFFD
0x1100
0x115F
0x2010
0x2013
0x2016
0x2018
0x2019
0x201C
0x201D
0x2020
0x2022
0x2024
0x2027
0x2030
0x2032
0x2033
0x2035
0x203B
0x203E
0x2074
0x207F
0x2081
0x2084
0x20A9
0x20AC
0x2103
0x2105
0x2109
0x2113
0x2116
0x2121
0x2122
0x2126
0x212B
0x2153
0x2154
0x215B
0x215E
0x2160
0x216B
0x2170
0x2179
0x2189
0x2190
0x2199
0x21B8
0x21B9
0x21D2
0x21D4
0x21E7
0x2200
0x2202
0x2203
0x2207
0x2208
0x220B
0x220F
0x2211
0x2215
0x221A
0x221D
0x2220
0x2223
0x2225
0x2227
0x222C
0x222E
0x2234
0x2237
0x223C
0x223D
0x2248
0x224C
0x2252
0x2260
0x2261
0x2264
0x2267
0x226A
0x226B
0x226E
0x226F
0x2282
0x2283
0x2286
0x2287
0x2295
0x2299
0x22A5
0x22BF
0x2312
0x231A
0x231B
0x2329
0x232A
0x23E9
0x23EC
0x23F0
0x23F3
0x2460
0x24E9
0x24EB
0x254B
0x2550
0x2573
0x2580
0x258F
0x2592
0x2595
0x25A0
0x25A1
0x25A3
0x25A9
0x25B2
0x25B3
0x25B6
0x25B7
0x25BC
0x25BD
0x25C0
0x25C1
0x25C6
0x25C8
0x25CB
0x25CE
0x25D1
0x25E2
0x25E5
0x25EF
0x25FD
0x25FE
0x2605
0x2606
0x2609
0x260E
0x260F
0x2614
0x2615
0x261C
0x261E
0x2630
0x2637
0x2640
0x2642
0x2648
0x2653
0x2660
0x2661
0x2663
0x2665
0x2667
0x266A
0x266C
0x266D
0x266F
0x267F
0x268A
0x268F
0x2693
0x269E
0x269F
0x26A1
0x26AA
0x26AB
0x26BD
0x26BE
0x26BF
0x26C4
0x26C5
0x26C6
0x26CD
0x26CE
0x26CF
0x26D3
0x26D4
0x26D5
0x26E1
0x26E3
0x26E8
0x26E9
0x26EA
0x26EB
0x26F1
0x26F2
0x26F3
0x26F4
0x26F5
0x26F6
0x26F9
0x26FA
0x26FB
0x26FC
0x26FD
0x26FE
0x26FF
0x2705
0x270A
0x270B
0x2728
0x273D
0x274C
0x274E
0x2753
0x2755
0x2757
0x2776
0x277F
0x2795
0x2797
0x27B0
0x27BF
0x27E6
0x27ED
0x2985
0x2986
0x2B1B
0x2B1C
0x2B50
0x2B55
0x2B56
0x2B59
0x2E80
0x2E99
0x2E9B
0x2EF3
0x2F00
0x2FD5
0x2FF0
0x3001
0x303E
0x3041
0x3096
0x3099
0x30FF
0x3105
0x312F
0x3131
0x318E
0x3190
0x31E5
0x31EF
0x321E
0x3220
0x3247
0x3248
0x324F
0x3250
0xA48C
0xA490
0xA4C6
0xA960
0xA97C
0xAC00
0xD7A3
0xE000
0xF8FF
0xF900
0xFAFF
0xFE00
0xFE0F
0xFE10
0xFE19
0xFE30
0xFE52
0xFE54
0xFE66
0xFE68
0xFE6B
0xFF01
0xFF60
0xFF61
0xFFBE
0xFFC2
0xFFC7
0xFFCA
0xFFCF
0xFFD2
0xFFD7
0xFFDA
0xFFDC
0xFFE0
0xFFE6
0xFFE8
0xFFEE
0xFFFD
0x101
0x111
0x113
0x11B
0x126
0x127
0x12B
0x131
0x133
0x138
0x13F
0x142
0x144
0x148
0x14B
0x14D
0x152
0x153
0x166
0x167
0x16B
0x1CE
0x1D0
0x1D2
0x1D4
0x1D6
0x1D8
0x1DA
0x1DC
0x251
0x2C4
0x2C7
0x2C9
0x2CB
0x2CD
0x2D0
0x2D8
0x2DB
0x2DD
0x2DF
0x36F
0x391
0x3A1
0x3A3
0x3A9
0x3B1
0x3C1
0x3C3
0x3C9
0x401
0x410
0x44F
0x451
0x7E
0xA1
0xA2
0xA3
0xA5
0xA6
0xA7
0xA8
0xAA
0xAD
0xAE
0xAF
0xB0
0xB4
0xB6
0xBA
0xBC
0xBF
0xC6
0xD0
0xD8
0xDE
0xE1
0xE6
0xE8
0xEA
0xEC
0xED
0xF2
0xF3
0xF7
0xFC

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/get-east-asian-width/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/lint-staged/lib/chunkFiles.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./debug
-LOW 3P/guarddog/capability_network_outbound Detects network request capabilities (HTTP, sockets, etc.), by GuardDog Team, Datadog resolve(

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/lint-staged/lib/getRenderer.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW os/env/get Retrieve environment variable values env.NODE_ENV

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/lint-staged/node_modules/commander/esm.mjs [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW exec/imports/python imports python modules import commander

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/lint-staged/node_modules/commander/index.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./lib

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/lint-staged/node_modules/commander/lib/argument.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./error

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/lint-staged/node_modules/commander/lib/command.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM anti-static/obfuscation/math complex math with parseInt or fromCharCode conversions [sub --unknown uuu op]
[--unknown uuu op]
(client-code)
[output-file]
(index + 1)
parseInt
(/ +/)
[i++]
-MEDIUM discover/system/platform get system identification process.platform
process.versions
-MEDIUM exec/cmd executes a command runningCommand
-MEDIUM fs/path/relative references and possibly executes relative path ./argument
./option
./error
./help
-MEDIUM net/ip/host_port connects to an arbitrary host:port host:]port
-LOW 3P/guarddog/capability_network_outbound Detects network request capabilities (HTTP, sockets, etc.), by GuardDog Team, Datadog resolve(
-LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(v
spawn(
-LOW c2/tool_transfer/os references a specific operating system https://
Windows
-LOW data/encoding/int parses integers parseInt(
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/supports-color/blob/c214314a14bcb174b12b3014b2b0
https://github.com/nodejs/node/blob/0a00217a5f67ef4a22384cfc80eb6dd9a917f
https://bixense.com/clicolors/
https://force-color.org
https://no-color.org
-LOW os/env/get Retrieve environment variable values env.CLICOLOR_FORCE
env.FORCE_COLOR
env.NO_COLOR
-LOW os/fd/write writes to a file handle outputContext.write(helpInformation)
stderr.write(str)
stdout.write(str)

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/lint-staged/node_modules/commander/lib/help.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./argument
./command
./option
-LOW data/encoding/json_encode encodes JSON JSON.stringify
-LOW net/url/embedded contains embedded HTTPS URLs https://www.typescriptlang.org/docs/handbook/jsdoc-supported-types.html

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/lint-staged/node_modules/commander/lib/option.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./error

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/lint-staged/node_modules/commander/lib/suggestSimilar.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://en.wikipedia.org/wiki/Damerau

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/lint-staged/node_modules/commander/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./typings
./index
./tests
./esm
-LOW exec/plugin references a 'plugin' plugin
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/tj/commander.js.git

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/lint-staged/node_modules/commander/typings/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sindresorhus/type-fest/blob/main/source/literal-union.
https://github.com/sindresorhus/type-fest/blob/main/source/primitive.d.ts
https://github.com/microsoft/TypeScript/issues/29729
https://github.com/alan-agius4
https://github.com/sveinburne
https://github.com/vvakame
https://github.com/mdezem

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/dist/index.cjs [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM 3P/guarddog/capability_process_schedule Detects ability to create scheduled tasks (cron, at, schtasks), by GuardDog Team, Datadog .timer
-MEDIUM crypto/uuid generates a random UUID randomUUID
-MEDIUM discover/system/platform get system identification process.platform
-MEDIUM os/time/clock_sleep uses setInterval to wait setInterval(
-LOW 3P/guarddog/capability_network_download Detects downloading files from network, by GuardDog Team, Datadog fetch(
-LOW 3P/guarddog/capability_network_outbound Detects network request capabilities (HTTP, sockets, etc.), by GuardDog Team, Datadog resolve(
fetch(
-LOW anti-behavior/random_behavior uses a random number generator randomUUID
-LOW data/encoding/json_encode encodes JSON JSON.stringify
-LOW exec/shell/TERM Look up or override terminal settings TERM
-LOW net/url/embedded contains embedded HTTPS URLs https://listr2.kilic.dev/renderer/process-output.html
https://listr2.kilic.dev/task/error-handling.html
https://listr2.kilic.dev/renderer/logger.html
https://listr2.kilic.dev/task/subtasks.html
https://listr2.kilic.dev/listr/events.html
https://listr2.kilic.dev/task/prompts.html
https://listr2.kilic.dev/listr/listr.html
https://listr2.kilic.dev/task/events.html
https://listr2.kilic.dev/task/output.html
https://listr2.kilic.dev/task/prompt.html
https://listr2.kilic.dev/task/retry.html
https://listr2.kilic.dev/task/title.html
https://listr2.kilic.dev/task/skip.html
https://listr2.kilic.dev/task/task.html
https://www.npmjs.com/package/colorette
-LOW os/env/get Retrieve environment variable values env.TERM_PROGRAM
env.WT_SESSION
-LOW os/fd/write writes to a file handle stderr.write(buffer)
stdout.write(buffer)

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/dist/index.d.cts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW 3P/guarddog/capability_network_download Detects downloading files from network, by GuardDog Team, Datadog fetch(
-LOW 3P/guarddog/capability_network_outbound Detects network request capabilities (HTTP, sockets, etc.), by GuardDog Team, Datadog fetch(
-LOW net/url/embedded contains embedded HTTPS URLs https://listr2.kilic.dev/renderer/process-output.html
https://listr2.kilic.dev/task/error-handling.html
https://listr2.kilic.dev/renderer/renderer.html
https://listr2.kilic.dev/renderer/logger.html
https://listr2.kilic.dev/listr/context.html
https://listr2.kilic.dev/task/rollback.html
https://listr2.kilic.dev/task/subtasks.html
https://listr2.kilic.dev/listr/events.html
https://listr2.kilic.dev/task/prompts.html
https://listr2.kilic.dev/listr/listr.html
https://listr2.kilic.dev/task/enable.html
https://listr2.kilic.dev/task/events.html
https://listr2.kilic.dev/task/output.html
https://listr2.kilic.dev/task/prompt.html
https://listr2.kilic.dev/task/retry.html
https://listr2.kilic.dev/task/title.html
https://listr2.kilic.dev/task/skip.html
https://listr2.kilic.dev/task/task.html
https://www.npmjs.com/package/colorette

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/dist/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW 3P/guarddog/capability_network_download Detects downloading files from network, by GuardDog Team, Datadog fetch(
-LOW 3P/guarddog/capability_network_outbound Detects network request capabilities (HTTP, sockets, etc.), by GuardDog Team, Datadog fetch(
-LOW net/url/embedded contains embedded HTTPS URLs https://listr2.kilic.dev/renderer/process-output.html
https://listr2.kilic.dev/task/error-handling.html
https://listr2.kilic.dev/renderer/renderer.html
https://listr2.kilic.dev/renderer/logger.html
https://listr2.kilic.dev/listr/context.html
https://listr2.kilic.dev/task/rollback.html
https://listr2.kilic.dev/task/subtasks.html
https://listr2.kilic.dev/listr/events.html
https://listr2.kilic.dev/task/prompts.html
https://listr2.kilic.dev/listr/listr.html
https://listr2.kilic.dev/task/enable.html
https://listr2.kilic.dev/task/events.html
https://listr2.kilic.dev/task/output.html
https://listr2.kilic.dev/task/prompt.html
https://listr2.kilic.dev/task/retry.html
https://listr2.kilic.dev/task/title.html
https://listr2.kilic.dev/task/skip.html
https://listr2.kilic.dev/task/task.html
https://www.npmjs.com/package/colorette

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/dist/index.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM 3P/guarddog/capability_process_schedule Detects ability to create scheduled tasks (cron, at, schtasks), by GuardDog Team, Datadog .timer
-MEDIUM crypto/uuid generates a random UUID randomUUID
-MEDIUM discover/system/platform get system identification process.platform
-MEDIUM os/time/clock_sleep uses setInterval to wait setInterval(
-LOW 3P/guarddog/capability_network_download Detects downloading files from network, by GuardDog Team, Datadog fetch(
-LOW 3P/guarddog/capability_network_outbound Detects network request capabilities (HTTP, sockets, etc.), by GuardDog Team, Datadog resolve(
fetch(
-LOW anti-behavior/random_behavior uses a random number generator randomUUID
-LOW data/encoding/json_encode encodes JSON JSON.stringify
-LOW exec/shell/TERM Look up or override terminal settings TERM
-LOW net/url/embedded contains embedded HTTPS URLs https://listr2.kilic.dev/renderer/process-output.html
https://listr2.kilic.dev/task/error-handling.html
https://listr2.kilic.dev/renderer/logger.html
https://listr2.kilic.dev/task/subtasks.html
https://listr2.kilic.dev/listr/events.html
https://listr2.kilic.dev/task/prompts.html
https://listr2.kilic.dev/listr/listr.html
https://listr2.kilic.dev/task/events.html
https://listr2.kilic.dev/task/output.html
https://listr2.kilic.dev/task/prompt.html
https://listr2.kilic.dev/task/retry.html
https://listr2.kilic.dev/task/title.html
https://listr2.kilic.dev/task/skip.html
https://listr2.kilic.dev/task/task.html
https://www.npmjs.com/package/colorette
-LOW os/env/get Retrieve environment variable values env.TERM_PROGRAM
env.WT_SESSION
-LOW os/fd/write writes to a file handle stderr.write(buffer)
stdout.write(buffer)
stdout.write(EOL)

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/ansi-regex/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/ansi-regex/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/ansi-regex?sponsor=1
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/ansi-styles/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/chalk/blob/main/readme.md

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/ansi-styles/index.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM anti-static/obfuscation/math complex math with parseInt or fromCharCode conversions (green / 255 * 5)
(blue / 255 * 5)
(red / 255 * 5)
(remainder / 6)
(code - 232)
(code / 36)
49/conversi
(code - 8)
(red - 8)
parseInt
-LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(h
-LOW data/encoding/int parses integers parseInt(
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/Qix-/color-convert/blob/3f0e0d4e92e235796ccb17f6e85c72

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/ansi-styles/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW fs/file/delete_forcibly Forcibly deletes files rm --command
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/ansi-styles?sponsor=1
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/emoji-regex/index.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://mths.be/emoji

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/emoji-regex/package.json [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/mathiasbynens/emoji-regex/issues
https://github.com/mathiasbynens/emoji-regex.git
https://mths.be/emoji-regex
https://mathiasbynens.be/

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/string-width/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/http Uses the HTTP protocol http
-LOW net/url/embedded contains embedded HTTPS URLs https://en.wikipedia.org/wiki/Halfwidth_and_fullwidth_forms
https://en.wikipedia.org/wiki/ANSI_escape_code
https://www.unicode.org/reports/tr11/

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/string-width/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/strip-ansi/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://en.wikipedia.org/wiki/ANSI_escape_code
https://github.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/strip-ansi/index.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/strip-ansi/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/strip-ansi?sponsor=1
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/wrap-ansi/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/chalk

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/wrap-ansi/index.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(l
exec(p

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/node_modules/wrap-ansi/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/wrap-ansi?sponsor=1
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/listr2/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./package
./dist
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/listr2/listr2
https://cenk.kilic.dev

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/index.d.ts [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM os/time/clock_sleep uses setInterval to wait setInterval(

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/ansi-escapes/base.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW 3P/guarddog/capability_filesystem_read Detects filesystem read capabilities, by GuardDog Team, Datadog fs.readFile
-LOW fs/file/read reads files fs.readFile
-LOW net/url/embedded contains embedded HTTPS URLs https://coderwall.com/p/b7e82q/quickly-open-files-in-iterm-with-cmd-click
https://user-images.githubusercontent.com/924465/64382136-b60ac700-cfe9-1
https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda
https://www.iterm2.com/documentation-escape-codes.html
https://github.com/jamestalmage/supports-hyperlinks
https://iterm2.com/documentation-escape-codes.html
https://conemu.github.io/en/AnsiEscapeCodes.html
https://terminalguide.namepad.de/mode/p47/
https://github.com/sindresorhus/type-fest
https://github.com/sindresorhus/term-img

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/ansi-escapes/base.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM discover/system/platform get system identification process.platform
-MEDIUM sus/leetspeak References 1337 terminology' 1337
-LOW c2/tool_transfer/os references a specific operating system https://
Windows
-LOW data/encoding/base64 Supports base64 encoded strings base64
-LOW exec/shell/TERM Look up or override terminal settings TERM
-LOW net/url/embedded contains embedded HTTPS URLs https://www.real-world-systems.com/docs/ANSIcode.html
-LOW os/env/get Retrieve environment variable values env.TERM_PROGRAM

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/ansi-escapes/index.d.ts [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./base

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/ansi-escapes/index.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./base

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/ansi-escapes/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/ansi-regex/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/ansi-regex/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/ansi-regex?sponsor=1
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/ansi-styles/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/chalk/blob/main/readme.md

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/ansi-styles/index.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM anti-static/obfuscation/math complex math with parseInt or fromCharCode conversions (green / 255 * 5)
(blue / 255 * 5)
(red / 255 * 5)
(remainder / 6)
(code - 232)
(code / 36)
49/conversi
(code - 8)
(red - 8)
parseInt
-LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(h
-LOW data/encoding/int parses integers parseInt(
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/Qix-/color-convert/blob/3f0e0d4e92e235796ccb17f6e85c72

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/ansi-styles/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW fs/file/delete_forcibly Forcibly deletes files rm --command
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/ansi-styles?sponsor=1
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/emoji-regex/index.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://mths.be/emoji

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/emoji-regex/package.json [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/mathiasbynens/emoji-regex/issues
https://github.com/mathiasbynens/emoji-regex.git
https://mths.be/emoji-regex
https://mathiasbynens.be/

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/is-fullwidth-code-point/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://en.wikipedia.org/wiki/Halfwidth_and_fullwidth_forms
https://en.wikipedia.org/wiki/Code_point

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/is-fullwidth-code-point/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/slice-ansi/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://en.wikipedia.org/wiki/ANSI_escape_code
https://github.com/chalk/chalk

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/slice-ansi/index.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW data/encoding/int parses integers parseInt(

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/slice-ansi/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW anti-behavior/random_behavior uses a random number generator random
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/slice-ansi?sponsor=1

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/string-width/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/http Uses the HTTP protocol http
-LOW net/url/embedded contains embedded HTTPS URLs https://en.wikipedia.org/wiki/Halfwidth_and_fullwidth_forms
https://en.wikipedia.org/wiki/ANSI_escape_code
https://www.unicode.org/reports/tr11/

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/string-width/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/strip-ansi/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://en.wikipedia.org/wiki/ANSI_escape_code
https://github.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/strip-ansi/index.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/strip-ansi/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/strip-ansi?sponsor=1
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/wrap-ansi/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/chalk

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/wrap-ansi/index.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(l
exec(p

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/node_modules/wrap-ansi/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/chalk/wrap-ansi?sponsor=1
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/log-update/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/mimic-function/index.d.ts [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW net/url/embedded contains embedded HTTPS URLs https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/mimic-function/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/prettier/plugins/acorn.mjs [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM data/encoding/utf16 assembles strings from UTF-16 code units (String.fromCharCode(e)))++t
(String.fromCharCode(e)):t==
,String.fromCharCode((e>>10)
,String.fromCharCode(r)}retu
:String.fromCharCode(t)}};b.
=String.fromCharCode(i);brea
=String.fromCharCode(parseIn
=String.fromCharCode(x),this
?String.fromCharCode(e):(e-=
String.fromCharCode(this.re
-LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(e
exec(t
-LOW crypto/public_key references a 'public key' PublicKey
-LOW data/encoding/int parses integers parseInt(

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/prettier/plugins/graphql.mjs [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW data/encoding/json_encode encodes JSON JSON.stringify
-LOW net/url/embedded contains embedded HTTPS URLs https://yarnpkg.com/en/docs/selective-version-resolutions

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/restore-cursor/node_modules/onetime/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/restore-cursor/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/sponsors/sindresorhus
https://sindresorhus.com

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/rfdc/default.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/rfdc/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./default
./index
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/davidmarkclements/rfdc/issues
https://github.com/davidmarkclements/rfdc.git

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/rfdc/test/index.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW anti-behavior/random_behavior uses a random number generator random

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/signal-exit/dist/cjs/browser.d.ts [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/signal-exit/dist/cjs/index.d.ts [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./signals

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/signal-exit/dist/cjs/index.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM discover/system/platform get system identification process.platform
-MEDIUM fs/path/relative references and possibly executes relative path ./signals
-LOW anti-behavior/random_behavior uses a random number generator random

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/signal-exit/dist/cjs/index.js.map [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW anti-behavior/random_behavior uses a random number generator random

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/signal-exit/dist/cjs/signals.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM discover/system/platform get system identification process.platform

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/signal-exit/dist/mjs/browser.d.ts [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./index

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/signal-exit/dist/mjs/index.d.ts [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/path/relative references and possibly executes relative path ./signals

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/signal-exit/dist/mjs/index.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM discover/system/platform get system identification process.platform
-MEDIUM fs/path/relative references and possibly executes relative path ./signals
-LOW anti-behavior/random_behavior uses a random number generator random

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/signal-exit/dist/mjs/index.js.map [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW anti-behavior/random_behavior uses a random number generator random

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/signal-exit/dist/mjs/signals.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM discover/system/platform get system identification process.platform

Deleted: /tmp/prior-commit ∴ /tmp/prior-commit/node_modules/signal-exit/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM fs/file/delete_forcibly Forcibly deletes files recursively rm -rf dist
-MEDIUM fs/path/relative references and possibly executes relative path ./browser
./scripts
./signals
./dist
./src
-LOW 3P/guarddog/capability_process_hooks Detects install hooks that can execute code during package installation, by GuardDog Team, Datadog
-LOW net/url/embedded contains embedded HTTPS URLs https://github.com/tapjs/signal-exit.git
https://github.com/sponsors/isaacs

Added: /tmp/current-commit ∴ /tmp/current-commit/.make/main.go [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW fs/file/write writes to file WriteFile

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/@eslint/config-helpers/dist/cjs/index.cjs [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM fs/path/relative references and possibly executes relative path ./types
+LOW 3P/guarddog/capability_filesystem_read Detects filesystem read capabilities, by GuardDog Team, Datadog fs.readFile
+LOW exec/plugin references a 'plugin' function deepNormalizePluginConfig
Deeply normalizes a plugin config
t do anything if the plugin doesn
return deepNormalizePluginConfig
function normalizePluginConfig
The name of the plugin config
The normalized plugin config
return normalizePluginConfig
The namespace of the plugin
function findPluginConfig
function getPluginMember
plugin The plugin object
not found in plugin
pluginConfigElement
return pluginConfig
const pluginConfig
The plugin config
pluginConfigName
pluginNamespace
pluginSubConfig
core plugin so
Plugin config
plugins
+LOW fs/file/read reads files fs.readFile

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/@nodable/entities/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM fs/path/relative references and possibly executes relative path ./src
+LOW net/url/embedded contains embedded HTTPS URLs https://github.com/nodable/val-parsers.git
https://github.com/sponsors/nodable
https://solothought.com

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/@nodable/entities/src/EntityDecoder.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM anti-static/obfuscation/math complex math with parseInt or fromCharCode conversions (DEFAULT_XML_ENTITIES + user-supplied namedEntities)
(parsed into flat fields for hot-path speed)
(except U+0009/000A/000D)
parseInt
(j - i)
U+0000
U+0001
U+001
U+007
U+009
+MEDIUM fs/file/copy copy files using cp cp
+MEDIUM fs/path/relative references and possibly executes relative path ./entities
+LOW data/encoding/int parses integers parseInt(

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/@nodable/entities/src/entityTries.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM fs/path/relative references and possibly executes relative path ./entities

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/@nodable/entities/src/index.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM fs/path/relative references and possibly executes relative path ./entities

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/eslint/messages/rule-unsupported-language.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW net/url/embedded contains embedded HTTPS URLs https://eslint.org/docs/latest/use/configure/rules

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/fast-uri/test/security-normalization.test.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW net/http Uses the HTTP protocol http
+LOW net/url/embedded contains embedded HTTP URLs http://example.com/public/
http://example.com/admin
http://example.com/a/b

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/fast-uri/test/security.test.js [🛑 HIGH]

RISK KEY DESCRIPTION EVIDENCE
+HIGH c2/addr/ip hardcoded IP address within a URL https://169.254.169.254
+MEDIUM c2/addr/url contains hardcoded endpoint with a question mark http://host.example.com/?x=
require
+MEDIUM net/http/websocket supports web sockets wss://
+MEDIUM net/ip/host_port connects to an arbitrary hostname:port hostname
port
+LOW 3P/guarddog/capability_network_outbound Detects network request capabilities (HTTP, sockets, etc.), by GuardDog Team, Datadog resolve(
+LOW data/encoding/json_encode encodes JSON JSON.stringify
+LOW net/http Uses the HTTP protocol http
+LOW net/url/embedded contains embedded HTTPS URLs https://169.254.169.254
https://allowed.com/
https://attacker.com
https://trusted.com
https://good.com/
+LOW net/url/parse Handles URL strings new URL

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/fast-xml-builder/lib/fxb.cjs [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW data/encoding/int parses integers parseInt(

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/fast-xml-builder/src/util.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW fs/file/delete_forcibly Forcibly deletes files rm -- with the closing

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/js-yaml/dist/js-yaml.js.map [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM anti-static/obfuscation/hex many references to hexadecimal values 0xFFFFFFFF
0x00007E
0x00D7FF
0x00FFFD
0x010000
0x10FFFF
0x00020
0x000A1
0x0E000
0x10000
0x03FF
0x2028
0x2029
0xD800
0xDBFF
0xDC00
0xDFFF
0xFEFF
0x400
0x07
0x08
0x09
0x0A
0x0B
0x0C
0x0D
0x1B
0x21
0x22
0x23
0x25
0x26
0x27
0x2A
0x2B
0x2C
0x2D
0x2E
0x2F
0x30
0x37
0x39
0x3A
0x3C
0x3D
0x3E
0x3F
0x41
0x46
0x4C
0x4E
0x50
0x55
0x5B
0x5C
0x5D
0x5F
0x60
0x61
0x62
0x65
0x66
0x6E
0x72
0x74
0x75
0x76
0x78
0x7B
0x7C
0x7D
0x85
0xA0
\x00
\x07
\x08
\x09
\x0A
\x0B
\x0C
\x0D
\x0E
\x1B
\x1F
\x22
\x5C
\x7F
\x84
\x85
\x86
\x9F
\xA0
+MEDIUM data/encoding/int performs math directly against parsed integers * parseInt(
+MEDIUM data/encoding/url decodes URL components decodeURIComponent
+MEDIUM data/encoding/utf16 assembles strings from UTF-16 code units point","fromCharCode","setPr
String.fromCharCode(\n (
String.fromCharCode(c)\n }
+LOW c2/tool_transfer/arch references a specific architecture https://
http://
x86
+LOW net/http Uses the HTTP protocol http
+LOW net/resolve/hostname resolve network host name to IP address cannot resolve
+LOW net/url/embedded contains embedded HTTPS URLs https://mathiasbynens.be/notes/javascript-encoding
https://github.com/nodeca/js-yaml/issues/164
https://en.wikipedia.org/wiki/UTF-16

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/js-yaml/dist/js-yaml.min.js.map [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM anti-static/obfuscation/hex many references to hexadecimal values 0xFFFFFFFF
0x00007E
0x00D7FF
0x00FFFD
0x010000
0x10FFFF
0x00020
0x000A1
0x0E000
0x10000
0x03FF
0x2028
0x2029
0xD800
0xDBFF
0xDC00
0xDFFF
0xFEFF
0x400
0x07
0x08
0x09
0x0A
0x0B
0x0C
0x0D
0x1B
0x21
0x22
0x23
0x25
0x26
0x27
0x2A
0x2B
0x2C
0x2D
0x2E
0x2F
0x30
0x37
0x39
0x3A
0x3C
0x3D
0x3E
0x3F
0x41
0x46
0x4C
0x4E
0x50
0x55
0x5B
0x5C
0x5D
0x5F
0x60
0x61
0x62
0x65
0x66
0x6E
0x72
0x74
0x75
0x76
0x78
0x7B
0x7C
0x7D
0x85
0xA0
\x00
\x07
\x08
\x09
\x0A
\x0B
\x0C
\x0D
\x0E
\x1B
\x1F
\x22
\x5C
\x7F
\x84
\x85
\x86
\x9F
\xA0
+MEDIUM data/encoding/int performs math directly against parsed integers * parseInt(
+MEDIUM data/encoding/url decodes URL components decodeURIComponent
+MEDIUM data/encoding/utf16 assembles strings from UTF-16 code units point","fromCharCode","setPr
String.fromCharCode(\n (
String.fromCharCode(c)\n }
+LOW c2/tool_transfer/arch references a specific architecture https://
http://
x86
+LOW net/http Uses the HTTP protocol http
+LOW net/resolve/hostname resolve network host name to IP address cannot resolve
+LOW net/url/embedded contains embedded HTTPS URLs https://mathiasbynens.be/notes/javascript-encoding
https://github.com/nodeca/js-yaml/issues/164
https://en.wikipedia.org/wiki/UTF-16

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/js-yaml/dist/js-yaml.mjs.map [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM anti-static/obfuscation/hex many references to hexadecimal values 0xFFFFFFFF
0x00007E
0x00D7FF
0x00FFFD
0x010000
0x10FFFF
0x00020
0x000A1
0x0E000
0x10000
0x03FF
0x2028
0x2029
0xD800
0xDBFF
0xDC00
0xDFFF
0xFEFF
0x400
0x07
0x08
0x09
0x0A
0x0B
0x0C
0x0D
0x1B
0x21
0x22
0x23
0x25
0x26
0x27
0x2A
0x2B
0x2C
0x2D
0x2E
0x2F
0x30
0x37
0x39
0x3A
0x3C
0x3D
0x3E
0x3F
0x41
0x46
0x4C
0x4E
0x50
0x55
0x5B
0x5C
0x5D
0x5F
0x60
0x61
0x62
0x65
0x66
0x6E
0x72
0x74
0x75
0x76
0x78
0x7B
0x7C
0x7D
0x85
0xA0
\x00
\x07
\x08
\x09
\x0A
\x0B
\x0C
\x0D
\x0E
\x1B
\x1F
\x22
\x5C
\x7F
\x84
\x85
\x86
\x9F
\xA0
+MEDIUM anti-static/obfuscation/math complex math with parseInt or fromCharCode conversions (tzHour * 60 + tzMinute)
[previousLineBreak + 1]
(more-indented lines)
(or lineWidth is -1)
(maxLineLength / 2)
[foundLineNo + i]
[foundLineNo - i]
(first - 0xD800)
uestions/8458984
(_position + 1)
(_position + 2)
(c - 0x010000)
[0-9A-Za-z-]
fromCharCode
(curr + 1)
issues/164
(pos + 1)
[++index]
[0-9a-f]
parseInt
[i + 1]
5e-100
UTF-16
[0-9_]
[ */)
[0-9]
+MEDIUM data/encoding/int performs math directly against parsed integers * parseInt(
+MEDIUM data/encoding/url decodes URL components decodeURIComponent
+MEDIUM data/encoding/utf16 assembles strings from UTF-16 code units String.fromCharCode(\n (
String.fromCharCode(c)\n }
+LOW 3P/guarddog/capability_network_outbound Detects network request capabilities (HTTP, sockets, etc.), by GuardDog Team, Datadog resolve(
+LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(a
exec(d
exec(l
exec(m
exec(s
+LOW c2/tool_transfer/arch references a specific architecture https://
http://
x86
+LOW net/http Uses the HTTP protocol http
+LOW net/resolve/hostname resolve network host name to IP address cannot resolve
+LOW net/url/embedded contains embedded HTTPS URLs https://mathiasbynens.be/notes/javascript-encoding
https://github.com/nodeca/js-yaml/issues/164
https://en.wikipedia.org/wiki/UTF-16

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/js-yaml/lib/index_vite_proxy.tmp.mjs [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW exec/imports/python imports python modules import yaml

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/lint-staged/lib/assertGitVersion.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(v
+LOW net/url/embedded contains embedded HTTPS URLs https://github.com/git/git/blob/master/Documentation/RelNotes/2.32.0.adoc

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/lint-staged/lib/cli.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW data/encoding/json_decode Decodes JSON messages JSON.parse

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/lint-staged/lib/runParallelTasks.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM fs/path/relative references and possibly executes relative path ./figures
./colors
./debug

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/prettier/plugins/meriyah.mjs [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM 3P/guarddog/capability_filesystem_write_executable Detects writing executable files or changing file permissions to executable, by GuardDog Team, Datadog 0777
+LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(e
+LOW crypto/public_key references a 'public key' PublicKey

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/xml-naming/package.json [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM fs/path/relative references and possibly executes relative path ./src
+LOW net/url/embedded contains embedded HTTPS URLs https://github.com/NaturalIntelligence/xml-naming/issues
https://github.com/sponsors/NaturalIntelligence
https://solothought.com

Added: /tmp/current-commit ∴ /tmp/current-commit/node_modules/xml-naming/src/index.js [🔵 LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW net/url/embedded contains embedded HTTPS URLs https://www.w3.org/TR/xml-names/
https://www.w3.org/TR/xml11/
https://www.w3.org/TR/xml/

Added: /tmp/current-commit ∴ /tmp/current-commit/tests/install_grype.test.js [🟡 MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM c2/tool_transfer/download downloads program from a hardcoded URL https://raw.githubusercontent.com/anchore/grype/main/install.sh
+MEDIUM c2/tool_transfer/github References raw.githubusercontent.com raw.githubusercontent.com
+MEDIUM net/download download files let downloadedUrl
downloadTool
+LOW 3P/guarddog/capability_process_spawn Detects process execution and spawning, by GuardDog Team, Datadog exec(c
+LOW net/url/embedded contains embedded HTTPS URLs https://raw.githubusercontent.com/anchore/grype/main/install.sh
+LOW os/env/get Retrieve environment variable values env.DOWNLOAD_TAG_INS

Changed (1 added, 5 removed): /tmp/current-commit/node_modules/prettier/internal/experimental-cli.mjs

1 new behavior

RISK KEY DESCRIPTION EVIDENCE
+LOW 3P/guarddog/threat_runtime_obfuscation Detects heavy obfuscation techniques commonly used by malware, by GuardDog Team, Datadog \uDE4F\uDE51\uDE52\uDE54\uDE57\uDE59\uDE5B\uDE5D\uDE5F\uDE61\uDE62\uDE64\uDE67
"+"

5 removed behaviors

RISK KEY DESCRIPTION EVIDENCE
-LOW 3P/guarddog/capability_network_download Detects downloading files from network, by GuardDog Team, Datadog fetch(
-LOW c2/tool_transfer/arch references a specific architecture https://
x86
-LOW c2/tool_transfer/os references a specific operating system https://
linux
-LOW data/encoding/yaml Decodes YAML content yaml.load
-LOW net/url/embedded contains embedded HTTPS URLs https://registry.npmjs.org/

Changed (7 added, 15 removed): /tmp/current-commit/node_modules/prettier/plugins/flow.js

7 new behaviors

RISK KEY DESCRIPTION EVIDENCE
+HIGH data/embedded/base64_terms Contains base64 technical content contains_base64_technical::bGludXgtZ251
contains_base64_technical::xpbnV4LWdud
+MEDIUM data/base64/decode decode base64 strings js_base64_decode::atob(
+MEDIUM fs/path/relative references and possibly executes relative path ./this
+LOW data/encoding/base64 Supports base64 encoded strings base64
+LOW data/encoding/json_decode Decodes JSON messages JSON.parse
+LOW data/encoding/json_encode encodes JSON JSON.stringify
+LOW net/url/parse Handles URL strings new URL

15 removed behaviors

RISK KEY DESCRIPTION EVIDENCE
-HIGH anti-static/obfuscation/bitwise uses an excessive amount of unsigned bitwise math function(
charAt(c
charAt(r
charAt(t
r>>>12
r>>>16
r>>>17
r>>>18
v>>>12
v>>>18
v>>>32
x>>>16
x>>>19
x>>>24
a>>>0
c>>>0
c>>>6
e>>>0
h>>>0
h>>>3
i>>>0
i>>>1
i>>>8
k>>>0
l>>>0
n>>>0
o>>>0
o>>>1
o>>>6
q>>>0
r>>>0
r>>>6
s>>>0
t>>>0
u>>>0
v>>>0
v>>>6
w>>>0
x>>>0
-MEDIUM 3P/guarddog/threat_runtime_obfuscation_general Detects heavy code obfuscation techniques, by GuardDog Team, Datadog \x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07\x07
-MEDIUM anti-static/obfuscation/hex many references to hexadecimal values 0xd1342543
0xdaba0b6e
\x00
\x07
\x1B
\x7f
\xBD
\xBF
\xEF
\xff
-MEDIUM anti-static/obfuscation/math complex math with parseInt or fromCharCode conversions var gB=1000000010;
charAt
-MEDIUM discover/system/platform get system identification process.platform
process.versions
-MEDIUM fs/path/dev path reference within /dev /dev/stdin
-LOW 3P/guarddog/capability_filesystem_delete Detects file/directory deletion capabilities, by GuardDog Team, Datadog fs.unlinkSync(
-LOW 3P/guarddog/capability_network_outbound Detects network request capabilities (HTTP, sockets, etc.), by GuardDog Team, Datadog .lookup(
-LOW fs/directory/create creates directories mkdir
-LOW fs/directory/list Uses NodeJS functions to list a directory .readdirSync(
-LOW fs/directory/remove Uses libc functions to remove directories rmdir
-LOW fs/file/delete deletes files unlink
-LOW fs/file/stat access filesystem metadata fs.statSync(this.nm(x)).isDirectory()
fs.statSync(this.nm(x)).isFile()
-LOW fs/link_read read value of a symbolic link readlink
-LOW fs/tempdir looks up location of temp directory TMPDIR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code patch Patch semver

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants