git log -p --all
Named by 2 kept items in this workspace.
Search every workspace for git log -p --all. It matches the name as written, so it can find other things that share it.
The items that name it 2
used by the malicious payload to dump and grep the entire git history across all branches for credential patterns
Git command used by the malicious payload to read full patch text of every branch and tag, including unreachable/rewritten history; also recommended for defenders to scan full history during incident response.
All technologies in this workspace.