muaddib-scanner 1.4.1 → 1.4.2

package/README.fr.md

@@ -246,13 +246,21 @@ Ajoutez a `.pre-commit-config.yaml`:
 ```yaml
 repos:
   - repo: https://github.com/DNSZLSK/muad-dib
-    rev: v1.2.7
+    rev: v1.4.1
     hooks:
       - id: muaddib-scan        # Scanner toutes les menaces
       # - id: muaddib-diff      # Ou: seulement les nouvelles
       # - id: muaddib-paranoid  # Ou: mode ultra-strict
 ```
 
+#### Supprimer les hooks
+
+```bash
+muaddib remove-hooks [path]
+```
+
+Supprime tous les hooks MUAD'DIB (husky et git natif).
+
 #### Avec husky
 
 ```bash
@@ -261,6 +269,10 @@ npx husky add .husky/pre-commit "npx muaddib scan . --fail-on high"
 npx husky add .husky/pre-commit "npx muaddib diff HEAD --fail-on high"
 ```
 
+### Version check
+
+MUAD'DIB verifie automatiquement les nouvelles versions au demarrage et vous notifie si une mise a jour est disponible.
+
 ---
 
 ## Features
@@ -446,7 +458,7 @@ Editez les fichiers YAML dans `iocs/` :
   mitre: T1195.002
 ```
 
-### Développer
+### Developper
 
 ```bash
 git clone https://github.com/DNSZLSK/muad-dib
@@ -455,6 +467,13 @@ npm install
 npm test
 ```
 
+### Tests
+
+- **145 tests unitaires/integration** — 80% coverage via [Codecov](https://codecov.io/gh/DNSZLSK/muad-dib)
+- **56 tests de fuzzing** — YAML malformé, JSON invalide, fichiers binaires, ReDoS, unicode, inputs 10MB
+- **15 tests adversariaux** — Packages malveillants simulés, taux de détection 15/15
+- **Audit ESLint securité** — `eslint-plugin-security` avec 14 règles activées
+
 ---
 
 ## Communauté
@@ -465,8 +484,9 @@ npm test
 
 ## Documentation
 
-- [Threat Model](docs/threat-model.md) - Ce que MUAD'DIB détecte et ne détecte pas
-- [IOCs YAML](iocs/) - Base de données des menaces
+- [Threat Model](docs/threat-model.md) - Ce que MUAD'DIB detecte et ne detecte pas
+- [Rapport d'audit securité v1.4.1](docs/MUADDIB_Security_Audit_Report_v1.4.1.pdf) - Audit complet (58 issues corrigees)
+- [IOCs YAML](iocs/) - Base de donnees des menaces
 
 ---
 

package/README.md

@@ -264,7 +264,7 @@ Add to `.pre-commit-config.yaml`:
 ```yaml
 repos:
   - repo: https://github.com/DNSZLSK/muad-dib
-    rev: v1.2.7
+    rev: v1.4.1
     hooks:
       - id: muaddib-scan        # Scan all threats
       # - id: muaddib-diff      # Or: only new threats
@@ -279,6 +279,14 @@ npx husky add .husky/pre-commit "npx muaddib scan . --fail-on high"
 npx husky add .husky/pre-commit "npx muaddib diff HEAD --fail-on high"
 ```
 
+#### Remove hooks
+
+```bash
+muaddib remove-hooks [path]
+```
+
+Removes all MUAD'DIB hooks (husky and git native).
+
 #### Native git hooks
 
 ```bash
@@ -286,6 +294,10 @@ muaddib init-hooks --type git
 # Creates .git/hooks/pre-commit
 ```
 
+### Version check
+
+MUAD'DIB automatically checks for new versions on startup and notifies you if an update is available.
+
 ---
 
 ## Features
@@ -480,6 +492,13 @@ npm install
 npm test
 ```
 
+### Testing
+
+- **145 unit/integration tests** — 80% code coverage via [Codecov](https://codecov.io/gh/DNSZLSK/muad-dib)
+- **56 fuzz tests** — Malformed YAML, invalid JSON, binary files, ReDoS, unicode, 10MB inputs
+- **15 adversarial tests** — Simulated malicious packages, 15/15 detection rate
+- **ESLint security audit** — `eslint-plugin-security` with 14 rules enabled
+
 ---
 
 ## Community
@@ -491,6 +510,7 @@ npm test
 ## Documentation
 
 - [Threat Model](docs/threat-model.md) - What MUAD'DIB detects and doesn't detect
+- [Security Audit Report v1.4.1](docs/MUADDIB_Security_Audit_Report_v1.4.1.pdf) - Full security audit (58 issues fixed)
 - [IOCs YAML](iocs/) - Threat database
 
 ---

package/eslint.config.mjs

@@ -1,17 +1,32 @@
 import js from "@eslint/js";
 import globals from "globals";
+import security from "eslint-plugin-security";
 import { defineConfig } from "eslint/config";
 
 export default defineConfig([
   {
     files: ["**/*.{js,mjs,cjs}"],
-    plugins: { js },
+    plugins: { js, security },
     extends: ["js/recommended"],
     languageOptions: {
       globals: globals.node
     },
     rules: {
-      "no-unused-vars": ["error", { "argsIgnorePattern": "^_", "varsIgnorePattern": "^_" }]
+      "no-unused-vars": ["error", { "argsIgnorePattern": "^_", "varsIgnorePattern": "^_" }],
+      "security/detect-buffer-noassert": "warn",
+      "security/detect-child-process": "warn",
+      "security/detect-disable-mustache-escape": "warn",
+      "security/detect-eval-with-expression": "warn",
+      "security/detect-new-buffer": "warn",
+      "security/detect-no-csrf-before-method-override": "warn",
+      "security/detect-non-literal-fs-filename": "warn",
+      "security/detect-non-literal-regexp": "warn",
+      "security/detect-non-literal-require": "warn",
+      "security/detect-object-injection": "warn",
+      "security/detect-possible-timing-attacks": "warn",
+      "security/detect-pseudoRandomBytes": "warn",
+      "security/detect-unsafe-regex": "warn",
+      "security/detect-bidi-characters": "warn"
     }
   },
   {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "muaddib-scanner",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "Supply-chain threat detection & response for npm",
   "main": "src/index.js",
   "bin": {
@@ -47,6 +47,7 @@
   "devDependencies": {
     "@eslint/js": "9.39.2",
     "eslint": "9.39.2",
+    "eslint-plugin-security": "^3.0.1",
     "globals": "17.3.0"
   }
 }

package/src/ioc/data/iocs.json

@@ -17564,7 +17564,7 @@
     "pigS3cr3ts.json"
   ],
   "files": [],
-  "updated": "2026-02-09T22:02:04.174Z",
+  "updated": "2026-02-09T23:17:51.587Z",
   "sources": [
     "shai-hulud-detector",
     "datadog-consolidated",