Skip to content

Synchronize repository#266696

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:a0ea36e1-425d-4346-a1a3-536f19e95f0d
Jul 12, 2026
Merged

Synchronize repository#266696
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:a0ea36e1-425d-4346-a1a3-536f19e95f0d

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 12, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Low Risk
Config-only blocklist additions with no application logic changes; risk is limited to false positives if a domain were misclassified upstream.

Overview
Automated sync extends the phishing domain blocklist in config.json with three entries: metamaskm.com.cn, exstensionmetamask.gitbook.io, and metamask-welltg.gitbook.io. The previous last entry is updated to include a trailing comma so the JSON array stays valid.

Those hosts are fed into the existing PhishingDetector via src/index.ts, so lookups for these domains should now be treated as phishing without other code changes.

Reviewed by Cursor Bugbot for commit 0ffe0c3. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 12, 2026
@samczsun samczsun merged commit ed6e839 into MetaMask:main Jul 12, 2026
6 checks passed
@security-alliance-bot security-alliance-bot deleted the a0ea36e1-425d-4346-a1a3-536f19e95f0d branch July 12, 2026 02:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants