codehere 0.3.0-rc.2 → 0.3.0-rc.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -44,7 +44,7 @@ const PATTERNS = [
|
|
|
44
44
|
description: 'Role hijacking attempt',
|
|
45
45
|
},
|
|
46
46
|
{
|
|
47
|
-
regex:
|
|
47
|
+
regex: /\bsystem\s+prompt\b|<\/?system>|(?<!['"\\])<\/?instruction>/i,
|
|
48
48
|
severity: 'critical',
|
|
49
49
|
category: 'Prompt Injection',
|
|
50
50
|
description: 'System prompt injection',
|
|
@@ -56,7 +56,7 @@ const PATTERNS = [
|
|
|
56
56
|
description: 'Instruction override attempt',
|
|
57
57
|
},
|
|
58
58
|
{
|
|
59
|
-
regex:
|
|
59
|
+
regex: /\bjailbreak\b|\bDAN\s+mode\b|\bdeveloper\s+mode\s+enabled\b/i,
|
|
60
60
|
severity: 'critical',
|
|
61
61
|
category: 'Prompt Injection',
|
|
62
62
|
description: 'Jailbreak attempt',
|
|
@@ -93,7 +93,7 @@ const PATTERNS = [
|
|
|
93
93
|
description: 'Exfiltrates env secrets',
|
|
94
94
|
},
|
|
95
95
|
{
|
|
96
|
-
regex:
|
|
96
|
+
regex: /\bprintenv\b|\benv\s*\|\s*(grep|curl|wget|nc)\b/i,
|
|
97
97
|
severity: 'high',
|
|
98
98
|
category: 'Credential Theft',
|
|
99
99
|
description: 'Environment variable exfiltration',
|
|
@@ -119,7 +119,7 @@ const PATTERNS = [
|
|
|
119
119
|
description: 'SSH key tooling access',
|
|
120
120
|
},
|
|
121
121
|
{
|
|
122
|
-
regex:
|
|
122
|
+
regex: /\bkeychain\b|\bsecurity\s+find-generic-password\b/i,
|
|
123
123
|
severity: 'high',
|
|
124
124
|
category: 'Credential Theft',
|
|
125
125
|
description: 'macOS keychain access attempt',
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "codehere",
|
|
3
|
-
"version": "0.3.0-rc.
|
|
3
|
+
"version": "0.3.0-rc.3",
|
|
4
4
|
"description": "A PM for your AI coding agents. Delegate, orchestrate, and audit Claude Code, Codex, Aider, and OpenCode from one local web UI — every AI action traced, every file scored.",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"type": "module",
|