muaddib-scanner 2.4.3 → 2.4.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (29) hide show
  1. package/LICENSE +20 -20
  2. package/README.md +15 -1
  3. package/iocs/builtin.yaml +131 -131
  4. package/iocs/hashes.yaml +214 -214
  5. package/iocs/packages.yaml +276 -276
  6. package/package.json +2 -3
  7. package/src/canary-tokens.js +184 -184
  8. package/src/ioc/bootstrap.js +181 -181
  9. package/src/ioc/yaml-loader.js +223 -223
  10. package/src/maintainer-change.js +224 -224
  11. package/src/output-formatter.js +192 -192
  12. package/src/publish-anomaly.js +206 -206
  13. package/src/report.js +230 -230
  14. package/src/sarif.js +96 -96
  15. package/src/scanner/ai-config.js +183 -183
  16. package/src/scanner/ast-detectors.js +40 -17
  17. package/src/scanner/ast.js +1 -0
  18. package/src/scanner/dataflow.js +14 -2
  19. package/src/scanner/dependencies.js +223 -223
  20. package/src/scanner/entropy.js +7 -0
  21. package/src/scanner/hash.js +118 -118
  22. package/src/scanner/npm-registry.js +128 -128
  23. package/src/scanner/python.js +442 -442
  24. package/src/scoring.js +3 -1
  25. package/src/shared/analyze-helper.js +49 -49
  26. package/src/temporal-analysis.js +260 -260
  27. package/src/temporal-runner.js +139 -139
  28. package/src/utils.js +327 -327
  29. package/src/watch.js +55 -55
package/src/watch.js CHANGED
@@ -1,56 +1,56 @@
1
- const fs = require('fs');
2
- const path = require('path');
3
- const { run } = require('./index.js');
4
-
5
- function watch(targetPath) {
6
- let debounceTimer = null;
7
- const watchers = [];
8
-
9
- console.log(`[MUADDIB] Surveillance de ${targetPath}\n`);
10
- console.log('[INFO] Ctrl+C pour arreter\n');
11
-
12
- // Scan initial
13
- run(targetPath, { json: false }).catch(err => console.error('[ERROR]', err.message));
14
-
15
- // Surveille les changements
16
- const watchPaths = [
17
- path.join(targetPath, 'package.json'),
18
- path.join(targetPath, 'package-lock.json'),
19
- path.join(targetPath, 'node_modules')
20
- ];
21
-
22
- for (const watchPath of watchPaths) {
23
- if (fs.existsSync(watchPath)) {
24
- // Note: recursive option only works on macOS and Windows.
25
- // On Linux, only top-level changes in watchPath are detected.
26
- if (process.platform === 'linux' && watchPath.includes('node_modules')) {
27
- console.log(`[WARN] recursive watch not supported on Linux for ${watchPath}`);
28
- }
29
- const watcher = fs.watch(watchPath, { recursive: true }, (eventType, filename) => {
30
- if (debounceTimer) clearTimeout(debounceTimer);
31
-
32
- debounceTimer = setTimeout(() => {
33
- console.log(`\n[CHANGE] ${filename || 'unknown file'} modifie`);
34
- console.log('[MUADDIB] Re-scan...\n');
35
- run(targetPath, { json: false }).catch(err => console.error('[ERROR]', err.message));
36
- }, 1000);
37
- });
38
- watcher.on('error', (err) => {
39
- console.error(`[WARN] Watcher error on ${watchPath}: ${err.message}`);
40
- });
41
- watchers.push(watcher);
42
- console.log(`[WATCH] ${watchPath}`);
43
- }
44
- }
45
-
46
- // Cleanup on SIGINT
47
- process.once('SIGINT', () => {
48
- console.log('\n[MUADDIB] Arret surveillance...');
49
- for (const w of watchers) {
50
- try { w.close(); } catch { /* ignore */ }
51
- }
52
- process.exit(0);
53
- });
54
- }
55
-
1
+ const fs = require('fs');
2
+ const path = require('path');
3
+ const { run } = require('./index.js');
4
+
5
+ function watch(targetPath) {
6
+ let debounceTimer = null;
7
+ const watchers = [];
8
+
9
+ console.log(`[MUADDIB] Surveillance de ${targetPath}\n`);
10
+ console.log('[INFO] Ctrl+C pour arreter\n');
11
+
12
+ // Scan initial
13
+ run(targetPath, { json: false }).catch(err => console.error('[ERROR]', err.message));
14
+
15
+ // Surveille les changements
16
+ const watchPaths = [
17
+ path.join(targetPath, 'package.json'),
18
+ path.join(targetPath, 'package-lock.json'),
19
+ path.join(targetPath, 'node_modules')
20
+ ];
21
+
22
+ for (const watchPath of watchPaths) {
23
+ if (fs.existsSync(watchPath)) {
24
+ // Note: recursive option only works on macOS and Windows.
25
+ // On Linux, only top-level changes in watchPath are detected.
26
+ if (process.platform === 'linux' && watchPath.includes('node_modules')) {
27
+ console.log(`[WARN] recursive watch not supported on Linux for ${watchPath}`);
28
+ }
29
+ const watcher = fs.watch(watchPath, { recursive: true }, (eventType, filename) => {
30
+ if (debounceTimer) clearTimeout(debounceTimer);
31
+
32
+ debounceTimer = setTimeout(() => {
33
+ console.log(`\n[CHANGE] ${filename || 'unknown file'} modifie`);
34
+ console.log('[MUADDIB] Re-scan...\n');
35
+ run(targetPath, { json: false }).catch(err => console.error('[ERROR]', err.message));
36
+ }, 1000);
37
+ });
38
+ watcher.on('error', (err) => {
39
+ console.error(`[WARN] Watcher error on ${watchPath}: ${err.message}`);
40
+ });
41
+ watchers.push(watcher);
42
+ console.log(`[WATCH] ${watchPath}`);
43
+ }
44
+ }
45
+
46
+ // Cleanup on SIGINT
47
+ process.once('SIGINT', () => {
48
+ console.log('\n[MUADDIB] Arret surveillance...');
49
+ for (const w of watchers) {
50
+ try { w.close(); } catch { /* ignore */ }
51
+ }
52
+ process.exit(0);
53
+ });
54
+ }
55
+
56
56
  module.exports = { watch };