TH17117
Detected presence of files containing URLs that link to blacklisted domains.
| priority | CI/CD status | severity | effort | RL level | RL assessment |
|---|---|---|---|---|---|
 | fail | high | high | 1 | tampering: fail Reason: malicious network references |
About the issue
Uniform Resource Locators (URLs) are structured addresses that point to locations and assets on the internet. URLs allow software developers to build complex applications that exchange data with servers that can be hosted in multiple geographical regions. URLs can commonly be found embedded in documentation, configuration files, source code and compiled binaries. One or more embedded URLs were discovered to link to an address found on a proprietary ReversingLabs domain blacklist. Software components that contain links to blacklisted domains are reported as malicious.
How to resolve the issue
- If the software intent does not relate to malicious behavior, investigate the build and release environment for software supply chain compromise.
- Avoid using this software package.
Recommended reading
- Catching deceptive links before the phish (ReversingLabs blog)