@blamejs/exceptd-skills 0.13.4 → 0.13.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (31) hide show
  1. package/AGENTS.md +16 -0
  2. package/CHANGELOG.md +58 -0
  3. package/bin/exceptd.js +145 -17
  4. package/data/_indexes/_meta.json +8 -8
  5. package/data/_indexes/activity-feed.json +18 -18
  6. package/data/_indexes/catalog-summaries.json +6 -6
  7. package/data/_indexes/chains.json +3943 -0
  8. package/data/_indexes/frequency.json +3 -0
  9. package/data/atlas-ttps.json +74 -1
  10. package/data/attack-techniques.json +125 -8
  11. package/data/cve-catalog.json +1964 -2
  12. package/data/framework-control-gaps.json +47 -4
  13. package/data/playbooks/ai-discovered-cve-triage.json +1146 -0
  14. package/data/playbooks/cicd-pipeline-compromise.json +3 -0
  15. package/data/playbooks/cred-stores.json +1 -0
  16. package/data/playbooks/crypto.json +3 -0
  17. package/data/playbooks/framework.json +3 -0
  18. package/data/playbooks/idp-incident.json +2 -1
  19. package/data/playbooks/kernel.json +1 -0
  20. package/data/playbooks/mcp.json +27 -2
  21. package/data/playbooks/post-quantum-migration.json +1268 -0
  22. package/data/playbooks/runtime.json +1 -0
  23. package/data/playbooks/sbom.json +3 -0
  24. package/data/playbooks/supply-chain-recovery.json +1332 -0
  25. package/data/zeroday-lessons.json +1749 -2
  26. package/lib/schemas/cve-catalog.schema.json +2 -1
  27. package/lib/validate-cve-catalog.js +27 -0
  28. package/manifest.json +44 -44
  29. package/orchestrator/index.js +69 -2
  30. package/package.json +1 -1
  31. package/sbom.cdx.json +62 -29
package/data/framework-control-gaps.json CHANGED
@@ -1140,6 +1140,9 @@
1140
1140
  "opened_date": "2026-01-01",
1141
1141
  "evidence_cves": [
1142
1142
  "CVE-2023-43472",
1143
+ "CVE-2025-0133",
1144
+ "CVE-2025-1094",
1145
+ "CVE-2025-6965",
1143
1146
  "CVE-2026-30623"
1144
1147
  ],
1145
1148
  "atlas_refs": [
@@ -1174,7 +1177,8 @@
1174
1177
  "opened_date": "2026-04-01",
1175
1178
  "evidence_cves": [
1176
1179
  "CVE-2024-3094",
1177
- "CVE-2026-30615"
1180
+ "CVE-2026-30615",
1181
+ "MAL-2024-PYPI-ULTRALYTICS-XMRIG"
1178
1182
  ],
1179
1183
  "atlas_refs": [
1180
1184
  "AML.T0010"
@@ -1209,6 +1213,13 @@
1209
1213
  "opened_date": "2026-03-15",
1210
1214
  "evidence_cves": [
1211
1215
  "CVE-2024-21762",
1216
+ "CVE-2025-10585",
1217
+ "CVE-2025-14174",
1218
+ "CVE-2025-24201",
1219
+ "CVE-2025-38352",
1220
+ "CVE-2025-43300",
1221
+ "CVE-2025-43529",
1222
+ "CVE-2025-4919",
1212
1223
  "CVE-2026-0300",
1213
1224
  "CVE-2026-31431",
1214
1225
  "CVE-2026-42945",
@@ -1388,6 +1399,11 @@
1388
1399
  "status": "open",
1389
1400
  "opened_date": "2026-03-15",
1390
1401
  "evidence_cves": [
1402
+ "CVE-2025-10585",
1403
+ "CVE-2025-1094",
1404
+ "CVE-2025-14174",
1405
+ "CVE-2025-38352",
1406
+ "CVE-2025-43300",
1391
1407
  "CVE-2026-31431",
1392
1408
  "CVE-2026-39884",
1393
1409
  "CVE-2026-45321",
@@ -1574,6 +1590,7 @@
1574
1590
  "opened_date": "2026-04-01",
1575
1591
  "evidence_cves": [
1576
1592
  "CVE-2024-3154",
1593
+ "CVE-2025-49844",
1577
1594
  "CVE-2025-53773",
1578
1595
  "CVE-2026-30615"
1579
1596
  ],
@@ -1644,6 +1661,8 @@
1644
1661
  "status": "open",
1645
1662
  "opened_date": "2026-04-01",
1646
1663
  "evidence_cves": [
1664
+ "CVE-2025-14847",
1665
+ "CVE-2025-22226",
1647
1666
  "CVE-2026-43284"
1648
1667
  ],
1649
1668
  "atlas_refs": [],
@@ -1675,7 +1694,9 @@
1675
1694
  "status": "open",
1676
1695
  "opened_date": "2026-05-17",
1677
1696
  "evidence_cves": [
1678
- "CVE-2024-21626"
1697
+ "CVE-2024-21626",
1698
+ "CVE-2025-22224",
1699
+ "CVE-2025-22225"
1679
1700
  ],
1680
1701
  "atlas_refs": [],
1681
1702
  "attack_refs": [
@@ -1708,6 +1729,7 @@
1708
1729
  "opened_date": "2026-05-01",
1709
1730
  "evidence_cves": [
1710
1731
  "CVE-2024-40635",
1732
+ "CVE-2025-53767",
1711
1733
  "CVE-2026-42897"
1712
1734
  ],
1713
1735
  "atlas_refs": [
@@ -1775,6 +1797,9 @@
1775
1797
  "status": "open",
1776
1798
  "opened_date": "2026-05-13",
1777
1799
  "evidence_cves": [
1800
+ "CVE-2025-0133",
1801
+ "CVE-2025-1094",
1802
+ "CVE-2025-6965",
1778
1803
  "CVE-2026-39884",
1779
1804
  "CVE-2026-42208"
1780
1805
  ],
@@ -1845,7 +1870,14 @@
1845
1870
  "evidence_cves": [
1846
1871
  "CVE-2023-3519",
1847
1872
  "CVE-2024-21762",
1873
+ "CVE-2025-10585",
1848
1874
  "CVE-2025-12686",
1875
+ "CVE-2025-14174",
1876
+ "CVE-2025-24201",
1877
+ "CVE-2025-38352",
1878
+ "CVE-2025-43300",
1879
+ "CVE-2025-43529",
1880
+ "CVE-2025-4919",
1849
1881
  "CVE-2025-59389",
1850
1882
  "CVE-2025-62847",
1851
1883
  "CVE-2025-62848",
@@ -1892,6 +1924,7 @@
1892
1924
  "opened_date": "2026-02-01",
1893
1925
  "evidence_cves": [
1894
1926
  "CVE-2025-11837",
1927
+ "CVE-2026-22778",
1895
1928
  "CVE-2026-32202",
1896
1929
  "CVE-2026-33825"
1897
1930
  ],
@@ -2348,6 +2381,8 @@
2348
2381
  "evidence_cves": [
2349
2382
  "CVE-2023-3519",
2350
2383
  "CVE-2024-21762",
2384
+ "CVE-2025-43300",
2385
+ "CVE-2025-49844",
2351
2386
  "CVE-2026-31431"
2352
2387
  ],
2353
2388
  "atlas_refs": [],
@@ -4030,7 +4065,8 @@
4030
4065
  "opened_date": "2026-05-15",
4031
4066
  "evidence_cves": [
4032
4067
  "CVE-2024-1709",
4033
- "CVE-2026-39987"
4068
+ "CVE-2026-39987",
4069
+ "CVE-2026-7482"
4034
4070
  ],
4035
4071
  "atlas_refs": [
4036
4072
  "AML.T0051"
@@ -4102,6 +4138,8 @@
4102
4138
  "status": "open",
4103
4139
  "opened_date": "2026-05-15",
4104
4140
  "evidence_cves": [
4141
+ "CVE-2025-10725",
4142
+ "CVE-2025-55241",
4105
4143
  "CVE-2026-33825",
4106
4144
  "CVE-2026-6973"
4107
4145
  ],
@@ -4375,6 +4413,7 @@
4375
4413
  "evidence_cves": [
4376
4414
  "CVE-2024-3154",
4377
4415
  "MAL-2026-NODE-IPC-STEALER",
4416
+ "MAL-2026-RUBYGEMS-BUFFERZONECORP-SLEEPER",
4378
4417
  "MAL-2026-SHAI-HULUD-OSS",
4379
4418
  "MAL-2026-TANSTACK-MINI"
4380
4419
  ],
@@ -4508,7 +4547,8 @@
4508
4547
  "status": "open",
4509
4548
  "opened_date": "2026-05-18",
4510
4549
  "evidence_cves": [
4511
- "CVE-2020-10148"
4550
+ "CVE-2020-10148",
4551
+ "CVE-2025-55241"
4512
4552
  ],
4513
4553
  "atlas_refs": [],
4514
4554
  "attack_refs": [
@@ -4608,6 +4648,8 @@
4608
4648
  "opened_date": "2026-05-18",
4609
4649
  "evidence_cves": [
4610
4650
  "CVE-2023-43472",
4651
+ "CVE-2025-55319",
4652
+ "CVE-2025-68664",
4611
4653
  "CVE-2026-30623"
4612
4654
  ],
4613
4655
  "atlas_refs": [
@@ -4713,6 +4755,7 @@
4713
4755
  "status": "open",
4714
4756
  "opened_date": "2026-05-18",
4715
4757
  "evidence_cves": [
4758
+ "CVE-2025-22224",
4716
4759
  "CVE-2025-59389"
4717
4760
  ],
4718
4761
  "atlas_refs": [],