DataDog / guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages
https://securitylabs.datadoghq.com/articles/guarddog-identify-malicious-pypi-packages/
Apache License 2.0
590 stars 43 forks source link

Adding FP case to npm-obfuscation #366

Closed sobregosodd closed 3 months ago

sobregosodd commented 3 months ago

The following is detected as JSFuck

    console.warn(`
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

    WARNING

    Version discrepancies between server and "${clientRole}" client:
    + server: ${serverVersion} | client: ${clientVersion}

    This might lead to unexpected behavior, you should consider to re-install your
    dependencies on both your server and clients.

    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!`);
}

This PR fixes it