security: remove code that runs automatically when the project is opened or built - #119

⚠ PARTIAL remediation for Ndevu12/RichTextEditor by StayAwakeBot Security Sentinel — this branch applies what is provably safe but is NOT a clean tree (see below).

Changes applied

• strip-gitignore — .gitignore

🚨 Still infected — confirmed indicators NOT auto-fixed (manual action required)

1 confirmed finding(s) could not be safely auto-remediated and remain in this tree. Do NOT merge this as a completed fix — the security gate stays red. Resolve each, then re-run saw fix --pr:

• 8acf0688f2 — evil-merge-loader (evil-merge): Worm payload smuggled via this merge COMMIT (a history finding, not a file edit; files: .gitignore, eslint.config.js). ʼsaw fixʼ never rewrites history — it breaks clones/forks/tags. If the payload is gone from your working tree the tree is clean but the commit persists; verify no fork/tag still shi

⚠ Still needs review (not auto-fixed)

These are suspicious (heuristic) matches — possibly a legitimate inlined asset/minified file, possibly a payload the confirmed signatures didn't name. Review each; allowlist if legitimate, or remove if not.

• evil-merge — 222e2c763c
• whitespace-concealment — eslint.config.js:66
• oversized-config-line — eslint.config.js:66
• obfuscated-source-file — eslint.config.js

Originals are recoverable from git history. Evil-merge findings (if any) are reported separately and need a manual history rewrite.

Review and merge if correct. This is a single rolling PR — re-runs update it rather than opening duplicates.

Extended beyond the automatic fix. The original change removed what could be stripped safely.
This branch now also handles the files the automatic pass left alone:

• files inflated with appended code are restored to the content they had before it was added —
  the real configuration is kept, not deleted
• files that never existed before the injection are removed outright

Verified afterwards: no file on this branch still matches any campaign marker.

Worth knowing: merging this cleans this branch only. Other branches in this repository may carry
the same files and should be checked separately.