🔒 RepoGuard: Security fixes — 1 issue resolved

[repoguard-ifecodes]

🔒 RepoGuard Security Report

This PR was opened automatically by RepoGuard after scanning your codebase.
Each affected file has been patched where possible. Please review all changes carefully before merging.

Summary

🔴 Critical	🟠 High	🟡 Medium
1	2	0

• Resolved (Patched): 1 finding
• Remaining (Requires Manual Review): 2 findings

Findings by File

📄 backend/src/utils/ai.js

Severity	Rule	Description	Status
🟠 high	env-exfiltration	Environment variable exfiltration — secrets being sent externally	⚠️ Requires Manual Review

📄 frontend/.env

Severity	Rule	Description	Status
🟠 high	dotenv-file-committed	.env file committed to repository — likely contains secrets	⚠️ Requires Manual Review

📄 frontend/vite.config.js

Severity	Rule	Description	Status
🔴 critical	obfuscated-malware-pattern	Suspicious obfuscated string array pattern or global require assignment	✅ Patched

What was done

• Obfuscated string array malware payloads and createRequire bypasses commented out

What requires manual review

• Env exfiltration — audit any network calls that reference env variables
• Rule dotenv-file-committed requires manual verification

How the malware likely re-infected your repo

1. A compromised PAT or OAuth token — revoke all personal access tokens and re-issue them
2. A malicious GitHub Actions workflow — check .github/workflows/ for unexpected changes
3. A compromised collaborator account — audit your org's active sessions

---

Opened by RepoGuard · Do not ignore this PR