Conversation
…ock.json - Updated ESLint from version 10.1.0 to 10.9.1. - Upgraded @eslint/config-array to version 0.23.5. - Upgraded @eslint/config-helpers to version 0.7.0. - Upgraded @eslint/core to version 1.2.1. - Upgraded @eslint/object-schema to version 3.0.5. - Upgraded @eslint/plugin-kit to version 0.7.2. - Updated minimatch from version 10.2.4 to 10.2.6. - Adjusted linting scripts in package.json for improved command usage.
Add reusable AST checks for checksum/literal-hop augmentation, memoized string-array factories, proxy-wrapper clusters, and CFF/sequence shapes. Co-authored-by: Cursor <cursoragent@cursor.com>
Recognize memoized self-reassign string-array factories and treat both literal-hop and parseInt checksum IIFEs as the augmented_ modifier. Co-authored-by: Cursor <cursoragent@cursor.com>
Match decoder tables reached through single-return argument-remapping wrappers without requiring a rotate IIFE. Co-authored-by: Cursor <cursoragent@cursor.com>
Detect javascript-obfuscator control-flow extras: 5-letter-key storage objects and pipe-split or numeric sequenced switch dispatchers. Co-authored-by: Cursor <cursoragent@cursor.com>
Introduce product labels for short-string banks with non-trivial indexers and sum(states)-style loops with switch or if dispatch. Co-authored-by: Cursor <cursoragent@cursor.com>
Wire the new labels into the detector registry and hide replacements-family plus CFF extras under obfuscator_io in reduced mode. Co-authored-by: Cursor <cursoragent@cursor.com>
Update detector expectations and add true-negative cases for ordinary helpers, passthrough wrappers, and non-augmenting rotates. Co-authored-by: Cursor <cursoragent@cursor.com>
Add module-level algorithm notes and examples across detectors, and refresh the README detector catalog. Co-authored-by: Cursor <cursoragent@cursor.com>
ctrl-escp
changed the title
…2.x, 24.x, and 26.x
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
proxied_array_function_replacements, richeraugmented_proxied_*).cff_storage_object,sequenced_index_switch) and js-confuser shapes (js_confuser_string_bank,js_confuser_state_machine).obfuscator_ioreduced-mode suppressions so it can remain the primary label when it fires alongside replacements-family / CFF hits; document algorithms and refresh the detector catalog.