Malicious code in version

[agallagher]

I have just installed the latest version of Ajax Search Pro on my website and 15 minutes later i received an automated email from VaultPress alerting me to a security issue in my site.

VaultPress detected malicious code in the file “plugins/ajax-search-pro/includes/externals/pdf-smalot/tecnickcom/tcpdf/include/tcpdf_static.php” on line 128. I have attached an image that shows the code identified as malicious.

Can you verify that this is a false positive or whether this is malicious code?

Thanks

[Ernest Marcinko]

Hi,

This is definitely a false positive. It is an exact fork of a very popular open source PDF parser library, it can be found here: https://github.com/smalot/pdfparser

[Author]

Posts