Vulnerability Detector is not generating alerts for NPM packages in Windows

[SeyiSoneye]

Wazuh version	Component	Install type	Install method	Platform
4.8.0-rc1	Vulnerability detector	Manager	Packages	Windows 11

Description

It has been detected in #23244 that Vulnerability Detection is currently not generating alerts for NPM packages on Windows 11.

Steps to reproduce

• Install a manager
• Install and register a Windows 11 agent
• Install a NPM package

PS C:\Users\Administrator> npm install -g axios@0.1.0
npm WARN deprecated axios@0.1.0: Critical security vulnerability fixed in v0.21.1. For more information, see https://github.com/axios/axios/pull/3410

added 2 packages in 526ms

PS C:\Users\Administrator> npm list axios
Administrator@ C:\Users\Adminstrator
`-- axios@0.1.0

Check that after Syscollector scans, the package is detected and the vulnerability was included in the inventory but no alert was generated.

Vulnerability detected in Inventory

No event generated

Check that after uninstalling the NPM package, the package is no longer detected and the vulnerability was not included in the inventory but no alert was generated.

Vulnerabilities removed from inventory:

No events in Events tab

[Dwordcito]

Probably the same thing reported here:

#23338 (comment)

If you have tested this without restarting the agent, please reopen the issue.