Benign Download

README.md

Encoded payload detected: base64Encoded payload detected: url

SHA-25637cc01c5064dbd884f19c3c7346ac52a6aec86de53dc11b27832e05352ae278d

URLhttps://github.com/robertpiosik/CodeWebChat/blob/dev/README.md

Evidence

"copilot" identity lines 52–54

52  <script type="application/json" id="client-env">{"locale":"en","featureFlags":["actions_custom_images_storage_billing_ui_visibility","actions_enable_background_steps","actions_image_version_event","actions_workflow_language_service_allow_concurrency_queue","agent_author_search_expansion","agent_author_search_expansion_ui_pulls","agent_conflict_resolution","alternate_user_config_repo","artifact_ui_v2","billing_billable_licenses_cost_center_bucket_fix","billing_cost_center_user_level_budgets","billing_discount_threshold_notification","billing_user_level_budgets","billing_user_level_budgets_manage","code_quality_new_repo_selection_card","code_scanning_dfa_degraded_experience_notice","code_view_raf_sticky_lines","codespaces_prebuild_region_target_update","codeview_sidebar_combined_payload","coding_agent_model_selection","coding_agent_model_selection_all_skus","comment_viewer_copy_raw_markdown","contentful_primer_code_blocks","copilot_agent_snippy","copilot_api_agentic_issue_marshal_yaml","copilot_ask_mode_dropd
53<script crossorigin="anonymous" type="module" src="https://github.githubassets.com/assets/high-contrast-cookie-e99d8801a8e707d0.js"></script>
54<script crossorigin="anonymous" type="module" src="https://github.githubassets.com/assets/wp-runtime-b90fb286456c71bc.js" defer="defer"></script>

Encoded payload detected: base64 line 158

158  <meta name="request-id" content="AF46:32425C:B9895A:F9B292:6A54321C" data-pjax-transient="true"/><meta name="html-safe-nonce" content="7b4cead95d5c2590e52543d01a576e891ed7cba795f475bc4dcbdf6e66dd8ea9" data-pjax-transient="true"/><meta name="visitor-payload" content="eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBRjQ2OjMyNDI1QzpCOTg5NUE6RjlCMjkyOjZBNTQzMjFDIiwidmlzaXRvcl9pZCI6IjQxNTAzNzA5NTMxMTE4MTA1OTUiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==" data-pjax-transient="true"/><meta name="visitor-hmac" content="fe773ed20d85c1203dc3f4a344ba44b2b4f2dfe0d71df631c2b2ce10c5fe3fbd" data-pjax-transient="true"/>

Encoded payload detected: url lines 331–335

    <div class="d-flex flex-1 flex-order-2 text-right d-lg-none gap-2 flex-justify-end">
        <a
          href="/login?return_to=https%3A%2F%2Fgithub.com%2Frobertpiosik%2FCodeWebChat%2Fblob%2Fdev%2FREADME.md"
          class="HeaderMenu-link HeaderMenu-button d-inline-flex f5 no-underline border color-border-default rounded-2 px-2 py-1 color-fg-inherit js-prevent-focus-on-mobile-nav"
          data-hydro-click="{&quot;event_type&quot;:&quot;authentication.click&quot;,&quot;payload&quot;:{&quot;location_in_page&quot;:&quot;site header menu&quot;,&quot;repository_id&quot;:null,&quot;auth_type&quot;:&quot;SIGN_UP&quot;,&quot;originating_url&quot;:&quot;https://github.com/robertpiosik/CodeWebChat/blob/dev/README.md&quot;,&quot;user_id&quot;:null}}" data-hydro-click-hmac="c3d54077ce927ac3172471b8bcbf974c9aaf776e0e702a64863ad6f248e1be84"

Encoded shell interpreter (unicode escapes) lines 1310–1315

1310>

<script type="application/json" data-target="react-app.embeddedData">{"payload":{"codeViewBlobRoute":{"csv":null,"csvError":null,"headerInfo":{"toc":[{"level":2,"text":"Introduction","anchor":"introduction","htmlText":"Introduction"},{"level":2,"text":"Enabling autofill","anchor":"enabling-autofill","htmlText":"Enabling autofill"},{"level":2,"text":"Prompt caching","anchor":"prompt-caching","htmlText":"Prompt caching"},{"level":2,"text":"Privacy","anchor":"privacy","htmlText":"Privacy"},{"level":2,"text":"Commands","anchor":"commands","htmlText":"Commands"},{"level":3,"text":"Code at Cursor","anchor":"code-at-cursor","htmlText":"Code at Cursor"},{"level":3,"text":"Context","anchor":"context","htmlText":"Context"},{"level":3,"text":"Commit messages","anchor":"commit-messages","htmlText":"Commit messages"},{"level":2,"text":"Build from source","anchor":"build-from-source","htmlText":"Build from source"},{"level":3,"text":"Prerequisites","anchor":"prerequisites","htmlText":"Prerequisites"},{"level":3,"text":"S
<div data-target="react-app.reactRoot"><meta name="github-code-view-meta-stats" id="github-code-view-meta-stats" data-hydrostats="publish"/> <!-- --> <a hidden="" id="code-view-repo-link" href="/robertpiosik/CodeWebChat" data-discover="true"></a> <div class="d-none"></div><div><div style="--spacing:var(--spacing-none)" class="prc-PageLayout-PageLayoutRoot--KH-d" data-component="PageLayout" data-has-sidebar="true"><div class="prc-PageLayout-SidebarWrapper-kLG4B CopilotSidePanelSidebar-module__SidePanel__L3O0C CopilotSidePanelSidebar-module__HiddenSidePanel__TBRGn" style="--spacing-column:var(--spacing-none)" data-is-hidden="false" data-position="end" data-sticky="true" data-responsive-variant="fullscreen"><div class="prc-PageLayout-VerticalDivider-9QRmK prc-PageLayout-SidebarVerticalDivider-0Rl0V" data-component="PageLayout.VerticalDivider" data-variant="line" data-position="end" style="--spacing:var(--spacing-none)"><div class="prc-PageLayout-DraggableHandle-9s6B4" data-component="PageLayout.DragHandle" rol
<a href="https://codeweb.chat" rel="nofollow">
  <themed-picture data-catalyst-inline="true"><picture>