René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Cx7401d0a9-2786 @ Npm-ua-parser-js-0.7.29","articleBody":"**Vulnerable Package** issue exists @ **Npm\\-ua\\-parser\\-js\\-0\\.7\\.29** in branch **main**\r\n\r\nThis package downloads a harmful file.\nFile hash:\n```ea131cc5ccf6aa6544d6cb29cdb78130feed061d2097c6903215be1499464c2e```\n### About\n\nUsing a dynamic analysis environment (also known as a Sandbox) we can monitor filesystem activity such as newly created files within the lifecycle of the code package.\n\nOnce new files are created, our technology analyzes each of the newly created files. In case a file is harmful, this risk is shown. \n\n![infographic](https://checkmarx-scs-cdn.s3.amazonaws.com/sca/infographics/harmful-file-download.png)\r\n\r\n**Namespace:** James-AST\r\n**Repository:** msft\r\n**Repository Url:** https://github.com/James-AST/msft\r\n**CxAST\\-Project:** James-AST/msft\r\n**CxAST platform scan:** [d217bf9e\\-499c\\-4ae8\\-a115\\-08b6cd62b182](https://ast.checkmarx.net/projects/fada48c7-0c49-472a-994a-763d8a847895/scans?id=d217bf9e-499c-4ae8-a115-08b6cd62b182\u0026branch=main)\r\n**Branch:** main\r\n**Application:** msft\r\n**Severity:** HIGH\r\n**State:** NOT_IGNORED\r\n**Status:** RECURRENT\r\n**CWE:** Harmful File Download\r\n\r\n\r\n----\r\n**Addition Info**\r\n","author":{"url":"https://github.com/jbrotsos","@type":"Person","name":"jbrotsos"},"datePublished":"2022-06-16T16:40:04.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/51/msft/issues/51"}