requarks / wiki-v1

Legacy version (1.x) of Wiki.js

Home Page:https://wiki.js.org

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Malware in js/vendor.js

mdyrhaug opened this issue · comments

Actual behavior

After I install Wiki 1.117 the website is reported as having malware.

I was alerted to this via corporate anti-virus scanner and confirmed using third party tool:

Scan using: https://scanner.pcrisk.com

It reports malware in /js/vendor.js

Expected behavior

Clean Scan

Steps to reproduce the behavior

Install using:

curl -sSo- https://wiki.js.org/install.sh | bash

Once running, Scan using: https://scanner.pcrisk.com

The scanner link you provided throws an error when attempting to scan https://docs-legacy.requarks.io (which runs 1.0.117).

I ran the site through a dozen other "website malware scanner" and there was no positives.

So if you can provide a detailed report of what is being reported as malware, I'll look into it, but for now I'll mark this issue as invalid.

Here is a link to a report on the docs-legacy.requarks.io domain. I am going to try to scan just the vendor.js to get more info.

https://scanner.pcrisk.com/detailed_report/docs-legacy.requarks.io#details

scan_result