Benign php 10 installs Download

kinetis/skeleton v1.2.1

“The smallest possible runnable Kinetis application: nginx + PHP-FPM, one controller, one route, a welcome page.”

Executes a child processchmod makes an absolute path executable

SHA-256136920ddc11681615de33bc729e2f3e87466b467308a0b797c1bc797647ae968

URLhttps://api.github.com/repos/kinetis-dev/skeleton/zipball/9be07c05ac16810edf2a83966994699fdbfbd3b1

Evidence

Contains an HTML document string literal WelcomeController.php · lines 17–23

5… {
      return HtmlResponse::create(<<<'HTML'
      <!doctype html>
      <html lang="en">
      <head>
          <meta charset="utf-8">
          <meta name="viewport" content="width=device-width, init …

English function-word token "for" WelcomeController.php · lines 161–163

161:4…              <p class="tagline">A PHP framework for API-first applications on persistent-worker runtimes.</p>
162
163                <div class="features …

English function-word token "the" WelcomeController.php · lines 166–168

                      <p>Add a new controller and it's live on the next request — nothing to register by hand.</p>
                  </div>
                 …

chmod makes an absolute path executable Dockerfile · lines 10–16

10:62… ini
11
12COPY docker/entrypoint.sh /usr/local/bin/entrypoint.sh
13RUN chmod +x /usr/local/bin/entrypoint.sh
14
15ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
16CMD ["php-fpm", "-F"]

Uses shell exec to replace process entrypoint.sh · lines 1–6

1#!/bin/sh
2set -e
3
4composer install --no-interaction --no-progress
5
6exec "$@"

No evidence locations were recorded for this file. Raw result