cool-website

This is a simple static file server, not apparent malware. Its path containment check is flawed and can allow access to sibling paths sharing the root's string prefix; symlinks can also expose files outside the root. Because it listens on all interfaces by default and has no authentication, restrict its network exposure and use resolved, boundary-aware path validation.