> 1. Where can I find information about what kind of threat this?
\.[A-Za-z]{3}\.js$
FP Source example:
https://www.mobileread.com/forums/showthread.php?p=3496981
Ie. any .js inside a zip file that's starts with 3 letters will get blocked.
--
Cheers,
Steve
Twitter: @sanesecurity