- Deleted .vscode configuration files: extensions.json, launch.json, settings.json, tasks.json, and spellright.dict.
- Removed font files related to Font Awesome: fa-brands-400.eot, fa-brands-400.svg, fa-brands-400.ttf, fa-brands-400.woff, fa-brands-400.woff2, fa-regular-400.eot, fa-regular-400.svg, fa-regular-400.ttf, fa-regular-400.woff, fa-regular-400.woff2, fa-solid-400.woff2, fa-solid-900.eot, fa-solid-900.svg, fa-solid-900.ttf, fa-solid-900.woff, and fa-solid-900.woff2.
- Cleaned up .gitignore by removing specific temporary files.
Adds a third JS_VARIANTS entry for the dot-notation, decoder-array-free
payload that slipped past both known-signature matching and the old
generic heuristic (which required bracket notation, a decoder array,
and eval - all three, none of which this variant used). Also broadens
the generic heuristic to OR-based shape categories and adds a separate
technique-fingerprint detector for the EtherHiding blockchain C2
pattern, matched against unicode-decoded text so escaping individual
strings can't evade it.
- Updated import statements to use single quotes for consistency.
- Simplified function definitions and removed unnecessary line breaks for improved readability.
- Enhanced code clarity by streamlining conditional checks and formatting across various functions.
- Introduced core files including Dockerfile, action.yml, and entry point script (bin/polinrider.js) for the PolinRider malware scanner.
- Created configuration files: .env.example, .gitignore, and .npmrc for environment setup and dependency management.
- Added CI workflows for testing, building, and releasing the action, along with examples for usage in GitHub Actions.
- Implemented a README.md to provide documentation on usage, features, and setup instructions.
- Included necessary scripts for building the action and handling security measures during execution.
- Established a structured directory for reports and workspace management within Docker.
- Ensured all files are set up for a secure and efficient scanning process of GitHub repositories for PolinRider malware.
jodosjodos