Suspicious ^85% lua Download

buckshot 1.0.0-1

Downloads and executes remote code

Regex component markerGitHub Actions contents write permission

SHA-256f2123365c2c2b9f0a0d6ac045f8607a8be39e4e9ba633b3bfb35d29a4ce6edb0

Evidence

Workflow action pinned to main documentation.yml · lines 71–74

    - name: Create User Documentation
      uses: kdheepak/panvimdoc@main
      with:
        vimdoc: plugin-template

Workflow action pinned to master llscheck.yml · lines 17–19

  steps:
  - name: Checkout
    uses: actions/checkout@master

GitHub Actions apt-get install luacheck.yml · lines 16–20

    - name: Prepare
      run: |
        sudo apt-get update
        sudo apt-get install -y luarocks
        sudo luarocks install luacheck

Regex component marker news.yml · lines 1–2

1# Reference: https://github.com/neovim/neovim/blob/9762c5e3406cab8152d8dd161c0178965d841676/.github/workflows/news.yml
2name: Check news.txt

Executes Lua files (dofile) luacov.lua · line 23

23dofile("spec/minimal_init.lua")

Showing the top 5 files — 2 more files (2 regions) not shown.

No evidence locations were recorded for this file. Raw result