Ron Chmara

Chocolatey 6.3.1 windows binaries flagged as malicious

1

For: https://community.chocolatey.org/packages/aws-vault#virus aws-vault.6.3.1.nupkg flagged by Cylance https://www.virustotal.com/gui/file/16f8ccfcfc19c6b9148734df2c7b184c5e6f20f50d9ab6bb2e0432e19935aaca/detection/f-16f8ccfcfc19c6b9148734df2c7b184c5e6f20f50d9ab6bb2e0432e19935aaca-1617792896 aws-vault.exe flagged by SecureAge APEX https://www.virustotal.com/gui/file/acba56d994a5666b16c92928299aeb52d5691ddb3ddc76015ef20bfde3d29108/detection/f-acba56d994a5666b16c92928299aeb52d5691ddb3ddc76015ef20bfde3d29108-1617792941

Leaves behind artifacts as `root` user

2

Scenario: Invoked as a github actions, running on self-hosted runners Runners are using `runner.runner` for their UID/GID Running with: ``` depcheck: runs-on: self-hosted name: OWASP DepCheck steps: - name: Depcheck...