This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env pwsh | |
| # axios supply chain compromise check — Windows (PowerShell 5.1+) | |
| # Checks for compromised axios@1.14.1 / @0.30.4 and plain-crypto-js@4.2.0 / @4.2.1 | |
| # Reference: https://socket.dev/blog/axios-npm-package-compromised | |
| $global:COMPROMISED = $false | |
| $BACKDOOR_SUMMARY = "" | |
| $C2_SUMMARY = "" | |
| $PKG_SUMMARY = "" | |
| $LOCK_SUMMARY = "" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env bash | |
| # axios supply chain compromise check | |
| # Checks for compromised axios@1.14.1 / @0.30.4 and plain-crypto-js@4.2.0 / @4.2.1 | |
| # Checks for IoC backdoor files and active C2 connections | |
| # Reference: https://socket.dev/blog/axios-npm-package-compromised | |
| set -euo pipefail | |
| RED='\033[0;31m' | |
| GREEN='\033[0;32m' |