muaddib-scanner 2.5.10 → 2.5.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/logs/alerts/{2026-03-06T20-13-43-891-evil-pkg.json → 2026-03-06T20-50-14-544-evil-pkg.json} +1 -1
  2. package/logs/alerts/{2026-03-06T20-13-43-892-evil-pkg.json → 2026-03-06T20-50-14-545-evil-pkg.json} +1 -1
  3. package/logs/alerts/{2026-03-06T20-13-43-892-suspect-pkg.json → 2026-03-06T20-50-14-545-suspect-pkg.json} +1 -1
  4. package/logs/alerts/{2026-03-06T20-13-44-264-evil-pkg.json → 2026-03-06T20-50-15-036-evil-pkg.json} +1 -1
  5. package/logs/daily-reports/2026-03-06.json +4 -4
  6. package/package.json +1 -1
  7. package/scripts/fix-permissions.sh +24 -0
package/logs/alerts/{2026-03-06T20-13-43-891-evil-pkg.json → 2026-03-06T20-50-14-544-evil-pkg.json} RENAMED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "target": "npm/evil-pkg@1.0.0",
3
- "timestamp": "2026-03-06T20:13:43.891Z",
3
+ "timestamp": "2026-03-06T20:50:14.544Z",
4
4
  "ecosystem": "npm",
5
5
  "summary": {
6
6
  "critical": 1,
package/logs/alerts/{2026-03-06T20-13-43-892-evil-pkg.json → 2026-03-06T20-50-14-545-evil-pkg.json} RENAMED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "target": "npm/evil-pkg@1.0.0",
3
- "timestamp": "2026-03-06T20:13:43.892Z",
3
+ "timestamp": "2026-03-06T20:50:14.545Z",
4
4
  "ecosystem": "npm",
5
5
  "summary": {
6
6
  "critical": 1,
package/logs/alerts/{2026-03-06T20-13-43-892-suspect-pkg.json → 2026-03-06T20-50-14-545-suspect-pkg.json} RENAMED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "target": "npm/suspect-pkg@1.0",
3
- "timestamp": "2026-03-06T20:13:43.892Z",
3
+ "timestamp": "2026-03-06T20:50:14.545Z",
4
4
  "ecosystem": "npm",
5
5
  "summary": {
6
6
  "critical": 0,
package/logs/alerts/{2026-03-06T20-13-44-264-evil-pkg.json → 2026-03-06T20-50-15-036-evil-pkg.json} RENAMED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "target": "npm/evil-pkg@2.0.0",
3
- "timestamp": "2026-03-06T20:13:44.264Z",
3
+ "timestamp": "2026-03-06T20:50:15.036Z",
4
4
  "ecosystem": "npm",
5
5
  "summary": {
6
6
  "critical": 1,
package/logs/daily-reports/2026-03-06.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "date": "2026-03-06",
3
- "timestamp": "2026-03-06T20:13:44.379Z",
3
+ "timestamp": "2026-03-06T20:50:15.113Z",
4
4
  "embed": {
5
5
  "embeds": [
6
6
  {
@@ -34,14 +34,14 @@
34
34
  },
35
35
  {
36
36
  "name": "Top Suspects",
37
- "value": "1. **npm/test-dedup-detection-1772828023889@1.0.0** — 1 finding(s)",
37
+ "value": "1. **npm/test-dedup-detection-1772830214542@1.0.0** — 1 finding(s)",
38
38
  "inline": false
39
39
  }
40
40
  ],
41
41
  "footer": {
42
- "text": "MUAD'DIB - Daily summary | 2026-03-06 20:13:44 UTC"
42
+ "text": "MUAD'DIB - Daily summary | 2026-03-06 20:50:15 UTC"
43
43
  },
44
- "timestamp": "2026-03-06T20:13:44.379Z"
44
+ "timestamp": "2026-03-06T20:50:15.113Z"
45
45
  }
46
46
  ]
47
47
  },
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "muaddib-scanner",
3
- "version": "2.5.10",
3
+ "version": "2.5.11",
4
4
  "description": "Supply-chain threat detection & response for npm & PyPI/Python",
5
5
  "main": "src/index.js",
6
6
  "bin": {
package/scripts/fix-permissions.sh ADDED
@@ -0,0 +1,24 @@
1
+ #!/bin/bash
2
+ # Fix EROFS/EACCES on /opt/muaddib/logs/ directories
3
+ # Run on VPS: sudo bash scripts/fix-permissions.sh
4
+
5
+ set -e
6
+
7
+ MUADDIB_DIR="${MUADDIB_DIR:-/opt/muaddib}"
8
+ LOG_DIR="$MUADDIB_DIR/logs"
9
+ OWNER="${SUDO_USER:-ubuntu}"
10
+
11
+ echo "[fix-permissions] Fixing log directory permissions..."
12
+
13
+ sudo mkdir -p "$LOG_DIR/alerts"
14
+ sudo mkdir -p "$LOG_DIR/daily-reports"
15
+ sudo chown -R "$OWNER:$OWNER" "$LOG_DIR"
16
+ sudo chmod -R 755 "$LOG_DIR"
17
+
18
+ echo "[fix-permissions] Done. Verifying..."
19
+ ls -la "$LOG_DIR/"
20
+ echo "[fix-permissions] Owner: $(stat -c '%U:%G' "$LOG_DIR")"
21
+
22
+ # Verify writability
23
+ PROBE="$LOG_DIR/alerts/.write-test"
24
+ touch "$PROBE" && rm "$PROBE" && echo "[fix-permissions] Write test OK" || echo "[fix-permissions] ERROR: Still not writable!"