MalDet · Static Security Report
2 findings likely need attention, 61 look like noise. Most notable: YARA rule matched: detect_download_and_execute — Downloads a remote resource AND execut... (1% confidence).
Generated from finding counts. A plain-English summary was not available for this scan.
MalDet scores two different questions separately, because they call for different responses: code can be badly written without being hostile, and hostile code is not always badly written.
| Detector | Looks for | High | Medium | Low | Total |
|---|---|---|---|---|---|
| dep_checker | Vulnerable, unpinned or typosquatted dependencies | 0 | 0 | 33 | 33 |
| yara | Signatures of malicious behaviour in source files | 19 | 0 | 9 | 28 |
| guarddog | Malicious package and install-time behaviour | 0 | 0 | 2 | 2 |
2 of 63 findings were rated more likely genuine than noise by the classifier.
Identical findings are grouped, so a single rule firing many times takes one row. Ordered worst first. “Seen” is how many times that finding occurred.
| Severity | Detector | Finding | Seen | Example location |
|---|---|---|---|---|
| high | yara | YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone | 3 | /resources/content/archive/pulls/v13.0.0/chunk-5/pr-10914.md |
| high | yara | YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this | 16 | /resources/content/archive/issues/v13.0.0/chunk-8/issue-10781.md |
| low | guarddog | Detects reading of environment variables (credential access, often contains secrets) [threat-runtime-environment-read] | 2 | /buildScripts/dataSyncPipeline.mjs:427 |
| low | dep_checker | Loose version constraint: 'webpack-dev-server^6.0.0' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'url^0.11.4' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'jsdoc-api^9.3.6' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'html-minifier-terser^7.2.0' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'parse5^8.0.1' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: '@playwright/test^1.63.0' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'acorn^8.17.0' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'astring^1.9.0' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'ws^8.21.3' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'webpack^5.111.1' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'webpack-hook-plugin^1.0.7' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'autoprefixer^10.6.1' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'webpack-cli^7.2.3' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'chalk^6.0.0' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'terser^5.51.2' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'semver^7.8.5' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'sass^1.104.1' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'postcss^8.5.28' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'cssnano^9.0.5' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'mermaid^12.0.0' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'marked^18.0.13' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'lint-staged^17.5.1' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: '@fortawesome/fontawesome-free^7.3.1' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'js-yaml^5.4.2' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'inquirer^14.2.2' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'husky^9.1.7' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'commander^15.0.0' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'highlightjs-line-numbers.js^2.9.1' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'gray-matter^4.0.3' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'fs-extra^11.4.0' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'fast-glob^3.3.3' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'esbuild^0.28.2' — attacker could push malicious update | 1 | package.json |
| low | dep_checker | Loose version constraint: 'envinfo^7.21.0' — attacker could push malicious update | 1 | package.json |
| low | yara | YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version | 9 | /resources/content/archive/issues/v13.0.0/chunk-9/issue-10913.md |