Benign rust 37,478 installs Download

export-cef-dir 152.3.0+152.0.6

Legitimate CEF export tool

“Export pre-built CEF (Chromium Embedded Framework) archives.”

AArch64 (ARM64) architecture stringAction declares a main entrypoint

SHA-256740e0938af221eb4ffa49b1e93e4ec2d8508bf8832a6ee88f7394397b55b9cf2

URLhttps://crates.io/api/v1/crates/export-cef-dir/152.3.0+152.0.6/download

MaleculeH₂(FOs)

Evidence

At least four Markdown section headings README.md · lines 6–20

6:9… se](https://img.shields.io/npm/l/is-unsafe.svg)](LICENSE)
7
8---
9
10## Why `is-unsafe`?
11
12Sanitizer libraries like [DOMPurify](https://github.com/cure53/DOMPurify) require a DOM. They cannot run inside XML parsers, template engines, or server-side pipelines that process strings before they ever reach a browser.
13
14`is-unsafe` fills that gap. It is a **pure predicate** — it answers one question:
15
16> *Is this string value unsafe in a given context?*
17
18It never mutates strings. It never touches the DOM. It has zero runtime dependencies.
19
20### Motivating use case: `@nodable/entities` / `fast-xm …

Mentions WAF bypass capability README.md · lines 372–376

76… ors |
`log-log4shell-jndi` | `${jndi:...}` — Log4Shell RCE (CVE-2021-44228) |
`log-log4shell-obfuscated` | `${::-` — Log4j WAF-bypass prefix |
`log-log4j-lookup` | `${env:}`, `${sys:}`, `${ctx:}` — data exfiltration lookups |
`log-ssti-double-brace` | `{{ …

Markdown-style heading precedes a code fence README.md · lines 408–416

408:45… ML`, `SQL`, and all other contexts are excluded automatically.
409
410### `fast-xml-parser` — entity check for HTML + XML contexts
411
412```js
⋯4 lines

Security heading or confirmation requirement README.md · lines 527–535

527:15… value\nfake log entry");      // throws — CRLF injection
528```
529
530### Checking all contexts (tooling / security scanners)
531
532```js
533import { isUnsafe, VALID_CONTEXTS } from 'is-unsafe';
534
535for (const [name, ctx] of Object.entries(VALID_CONTEXTS …

imports std::fs main.rs · lines 1–13

1#![doc = include_str!("../README.md")]
2
3use clap::Parser;
4use download_cef::{CefFile, CefIndex, OsAndArch, DEFAULT_TARGET};
5use std::{
6    env, fs,
7    path::{Path, PathBuf},
8    sync::OnceLock,
9    time::Duration,
10};
11
12fn default_version() -> &'static str {
13    static DEFAULT_VERSION: OnceLock<String> = OnceLock: …

No evidence locations were recorded for this file. Raw result