muaddib-scanner 2.10.71 → 2.10.72

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "muaddib-scanner",
-  "version": "2.10.71",
+  "version": "2.10.72",
   "description": "Supply-chain threat detection & response for npm & PyPI/Python",
   "main": "src/index.js",
   "bin": {

package/src/monitor/classify.js

@@ -179,8 +179,21 @@ function isSuspectClassification(result) {
     return { suspect: true, tier: 3 };
   }
 
-  // 2+ distinct types with non-passive types not in tier 2 active list -- tier 2
-  return { suspect: true, tier: 2 };
+  // Fallback: 2+ distinct types with non-passive types not in tier 2 active list.
+  // Previously this returned tier 2 unconditionally, but that was permissive —
+  // packages with 2 LOW findings in uncategorized types (e.g., @eeacms/* with
+  // score 2 observed 2026-04-11) landed in tier 2 and flooded the deferred
+  // sandbox queue, starving legitimate T1b/T2 candidates of the dedicated
+  // deferred slot.
+  //
+  // A sandbox slot is only justified when there is real signal. Require at
+  // least one non-LOW finding to reach tier 2 via this fallback — otherwise
+  // downgrade to tier 3 (log only, no sandbox consumption).
+  const hasNonLowFinding = result.threats.some(t => t.severity !== 'LOW');
+  if (hasNonLowFinding) {
+    return { suspect: true, tier: 2 };
+  }
+  return { suspect: true, tier: 3 };
 }
 
 /**

package/src/monitor/deferred-sandbox.js

@@ -26,6 +26,12 @@ const DEFERRED_TTL_MS = 24 * 60 * 60 * 1000; // 24h
 const DEFERRED_MAX_RETRIES = 2;
 const DEFERRED_WORKER_INTERVAL_MS = 30_000; // 30s
 const DEFERRED_STATE_FILE = path.join(__dirname, '..', '..', 'data', 'deferred-queue.json');
+// Defense-in-depth: sandbox slot is precious. A T1b/T2 below this score
+// threshold is almost certainly a classification fallback false positive
+// (cf. classify.js:183 remediation) and should never consume the deferred
+// slot. HIGH=10 pts is the intended T1b floor — values below 5 are LOW-only
+// aggregates which carry no actionable sandbox signal.
+const DEFERRED_MIN_SCORE = 5;
 
 // ── Mutable state ──
 const _deferredQueue = [];
@@ -51,6 +57,16 @@ function enqueueDeferred(item) {
     return false;
   }
 
+  // Defense-in-depth: block low-score items regardless of tier. With the
+  // classify.js:183 fallback fix in place, no legitimate enqueue should
+  // reach this function with score < DEFERRED_MIN_SCORE. Logging with
+  // console.error makes a future regression (new classification path that
+  // leaks low-score items) loud in operator logs.
+  if ((item.riskScore || 0) < DEFERRED_MIN_SCORE) {
+    console.error(`[DEFERRED] REJECTED: ${item.name}@${item.version} — score=${item.riskScore || 0} below minimum ${DEFERRED_MIN_SCORE} (possible classification regression)`);
+    return false;
+  }
+
   const key = `${item.name}@${item.version}`;
 
   // Dedup