penthera 1.7.0 → 1.8.0

package/lib/rules/core/secrets.json

@@ -0,0 +1,161 @@
+{
+  "kind": "secret",
+  "rules": [
+    {
+      "id": "secret.anthropic-api-key",
+      "name": "Anthropic API key",
+      "pattern": "sk-ant-(?:api|admin)\\d{2}-[A-Za-z0-9_-]{32,}",
+      "severity": "critical",
+      "source": "https://github.com/danoszz/penthera/blob/afafb24/lib/whitebox/secrets.js",
+      "date": "2026-10-19",
+      "confidence": "likely",
+      "references": [
+        "meli2019bad",
+        "basak2023secretbench"
+      ]
+    },
+    {
+      "id": "secret.openrouter-api-key",
+      "name": "OpenRouter API key",
+      "pattern": "sk-or-v1-[a-f0-9]{64}",
+      "severity": "critical",
+      "source": "https://github.com/danoszz/penthera/blob/afafb24/lib/whitebox/secrets.js",
+      "date": "2026-10-19",
+      "confidence": "likely",
+      "references": [
+        "meli2019bad",
+        "basak2023secretbench"
+      ]
+    },
+    {
+      "id": "secret.openai-api-key",
+      "name": "OpenAI API key",
+      "pattern": "sk-(?:proj|svcacct|admin)-[A-Za-z0-9_-]{20,}",
+      "severity": "critical",
+      "source": "https://github.com/danoszz/penthera/blob/afafb24/lib/whitebox/secrets.js",
+      "date": "2026-10-19",
+      "confidence": "likely",
+      "references": [
+        "meli2019bad",
+        "basak2023secretbench"
+      ]
+    },
+    {
+      "id": "secret.openai-api-key-legacy-format",
+      "name": "OpenAI API key (legacy format)",
+      "pattern": "sk-[a-zA-Z0-9]{20,}",
+      "severity": "critical",
+      "source": "https://github.com/danoszz/penthera/blob/afafb24/lib/whitebox/secrets.js",
+      "date": "2026-10-19",
+      "confidence": "likely",
+      "references": [
+        "meli2019bad",
+        "basak2023secretbench"
+      ]
+    },
+    {
+      "id": "secret.google-api-key-gemini-firebase-maps",
+      "name": "Google API key (Gemini / Firebase / Maps)",
+      "pattern": "AIza[0-9A-Za-z_-]{35}",
+      "severity": "high",
+      "source": "https://github.com/danoszz/penthera/blob/afafb24/lib/whitebox/secrets.js",
+      "date": "2026-10-19",
+      "confidence": "likely",
+      "references": [
+        "meli2019bad",
+        "basak2023secretbench"
+      ]
+    },
+    {
+      "id": "secret.groq-api-key",
+      "name": "Groq API key",
+      "pattern": "gsk_[A-Za-z0-9]{48,}",
+      "severity": "critical",
+      "source": "https://github.com/danoszz/penthera/blob/afafb24/lib/whitebox/secrets.js",
+      "date": "2026-10-19",
+      "confidence": "likely",
+      "references": [
+        "meli2019bad",
+        "basak2023secretbench"
+      ]
+    },
+    {
+      "id": "secret.hugging-face-token",
+      "name": "Hugging Face token",
+      "pattern": "hf_[A-Za-z0-9]{34,}",
+      "severity": "critical",
+      "source": "https://github.com/danoszz/penthera/blob/afafb24/lib/whitebox/secrets.js",
+      "date": "2026-10-19",
+      "confidence": "likely",
+      "references": [
+        "meli2019bad",
+        "basak2023secretbench"
+      ]
+    },
+    {
+      "id": "secret.replicate-api-token",
+      "name": "Replicate API token",
+      "pattern": "r8_[A-Za-z0-9]{37,}",
+      "severity": "critical",
+      "source": "https://github.com/danoszz/penthera/blob/afafb24/lib/whitebox/secrets.js",
+      "date": "2026-10-19",
+      "confidence": "likely",
+      "references": [
+        "meli2019bad",
+        "basak2023secretbench"
+      ]
+    },
+    {
+      "id": "secret.xai-api-key",
+      "name": "xAI API key",
+      "pattern": "xai-[A-Za-z0-9]{70,}",
+      "severity": "critical",
+      "source": "https://github.com/danoszz/penthera/blob/afafb24/lib/whitebox/secrets.js",
+      "date": "2026-10-19",
+      "confidence": "likely",
+      "references": [
+        "meli2019bad",
+        "basak2023secretbench"
+      ]
+    },
+    {
+      "id": "secret.perplexity-api-key",
+      "name": "Perplexity API key",
+      "pattern": "pplx-[A-Za-z0-9]{40,}",
+      "severity": "critical",
+      "source": "https://github.com/danoszz/penthera/blob/afafb24/lib/whitebox/secrets.js",
+      "date": "2026-10-19",
+      "confidence": "likely",
+      "references": [
+        "meli2019bad",
+        "basak2023secretbench"
+      ]
+    },
+    {
+      "id": "secret.langsmith-api-key",
+      "name": "LangSmith API key",
+      "pattern": "lsv2_(?:pt|sk)_[a-f0-9]{32}_[a-f0-9]{10}",
+      "severity": "high",
+      "source": "https://github.com/danoszz/penthera/blob/afafb24/lib/whitebox/secrets.js",
+      "date": "2026-10-19",
+      "confidence": "likely",
+      "references": [
+        "meli2019bad",
+        "basak2023secretbench"
+      ]
+    },
+    {
+      "id": "secret.pinecone-api-key",
+      "name": "Pinecone API key",
+      "pattern": "pcsk_[A-Za-z0-9_]{50,}",
+      "severity": "high",
+      "source": "https://github.com/danoszz/penthera/blob/afafb24/lib/whitebox/secrets.js",
+      "date": "2026-10-19",
+      "confidence": "likely",
+      "references": [
+        "meli2019bad",
+        "basak2023secretbench"
+      ]
+    }
+  ]
+}

package/lib/rules/core/templates.json

@@ -0,0 +1,52 @@
+{
+  "kind": "nuclei-template",
+  "rules": [
+    {
+      "id": "template.env-file-exposure",
+      "template": {
+        "id": "env-file-exposure",
+        "info": {
+          "name": ".env file exposed",
+          "severity": "critical",
+          "tags": [
+            "exposure",
+            "config"
+          ]
+        },
+        "http": [
+          {
+            "method": "GET",
+            "path": "/.env",
+            "matchers": [
+              {
+                "type": "status",
+                "status": [
+                  200
+                ]
+              },
+              {
+                "type": "word",
+                "words": [
+                  "DB_",
+                  "API_KEY",
+                  "SECRET",
+                  "PASSWORD",
+                  "FIREBASE_",
+                  "STRIPE_"
+                ],
+                "condition": "or"
+              }
+            ],
+            "matchers-condition": "and"
+          }
+        ]
+      },
+      "source": "https://github.com/danoszz/penthera/blob/afafb24/lib/templates.js",
+      "date": "2026-06-30",
+      "confidence": "confirmed",
+      "references": [
+        "owaspwstg42"
+      ]
+    }
+  ]
+}

package/lib/rules/index.js

@@ -0,0 +1,107 @@
+/**
+ * The rule-pack registry: which packs are active in this process. Bundled
+ * packs (lib/rules/<name>/) load at import; packs given with --rules are added
+ * by the CLI through addRulePack. Engines read rules with rulesOf(kind).
+ * Verification lives in ./pack.js; see docs/rule-packs.md.
+ */
+import { readdirSync, existsSync } from "node:fs";
+import { join, basename } from "node:path";
+import { verifyPack, loadSigners, RULES_DIR, PACK_INPUT_CAP } from "./pack.js";
+
+export { verifyPack, loadSigners, KINDS, NAMESPACE, RULES_DIR, BUILTIN_SIGNERS, PACK_INPUT_CAP } from "./pack.js";
+
+// ── Registry ──────────────────────────────────────────────────────────────
+
+const active = [];
+let generation = 0;
+
+/** Packs bundled with this release: lib/rules/<name>/pack.json. */
+export function bundledPackDirs() {
+  return readdirSync(RULES_DIR, { withFileTypes: true })
+    .filter((d) => d.isDirectory() && existsSync(join(RULES_DIR, d.name, "pack.json")))
+    .map((d) => join(RULES_DIR, d.name))
+    .sort((a, b) => (basename(a) === "core" ? -1 : basename(b) === "core" ? 1 : a.localeCompare(b)));
+}
+
+function activate(v, origin) {
+  if (active.some((p) => p.name === v.name)) throw new Error(`rule pack "${v.name}" is already loaded`);
+  active.push({ name: v.name, version: v.version, dir: v.dir, origin, signature: v.signature, signer: v.signer, rules: v.rules, count: v.count });
+  generation++;
+}
+
+/**
+ * Bundled packs ship inside the npm release, so they carry the same trust as
+ * the code beside them; they are hash-checked so a partial edit or corrupted
+ * install fails loudly. Their signatures are enforced at release time
+ * (scripts/rules/check-bundled.mjs), not on every run.
+ */
+function loadBundled() {
+  for (const dir of bundledPackDirs()) {
+    const v = verifyPack(dir);
+    if (!v.ok) throw new Error(`Bundled rule pack ${basename(dir)} failed verification, so this Penthera install is damaged (reinstall it): ${v.errors.join("; ")}`);
+    activate(v, "bundled");
+  }
+}
+loadBundled();
+
+/**
+ * Verify and activate a pack given by path (`--rules <dir>`).
+ * Refuses unsigned or badly signed packs unless allowUnsigned. Hash, schema
+ * and ReDoS failures are refused always.
+ * @returns {{ pack: object, warnings: string[] }}
+ */
+export function addRulePack(dir, opts = {}) {
+  const v = verifyPack(dir, { signers: opts.signers || loadSigners(opts.signersFiles), now: opts.now });
+  if (!v.ok) throw new Error(`Rule pack ${dir} refused: ${v.errors.join("; ")}`);
+  const warnings = [...v.warnings];
+  if (v.signature !== "valid") {
+    const why = v.signature === "missing" ? "it is not signed (no pack.json.sig)" : `its signature is invalid: ${v.signatureError}`;
+    if (!opts.allowUnsigned) {
+      throw new Error(`Rule pack ${dir} refused: ${why}. Only packs signed by a key in allowed_signers load. Pass --allow-unsigned-rules to load it anyway, if you wrote it or have reviewed every rule.`);
+    }
+    warnings.unshift(`LOADING AN UNTRUSTED RULE PACK: ${v.name}@${v.version} from ${v.dir}: ${why}. --allow-unsigned-rules is set, so it loads anyway. Its rules decide what this scan reports.`);
+  }
+  activate(v, "path");
+  return { pack: active[active.length - 1], warnings };
+}
+
+/** Drop packs added by path (tests, and long-lived library callers). */
+export function resetRulePacks() {
+  for (let i = active.length - 1; i >= 0; i--) if (active[i].origin !== "bundled") active.splice(i, 1);
+  generation++;
+}
+
+/** Active packs, for `penthera rules list` and reports. */
+export function activePacks() {
+  return active.map(({ rules, ...p }) => ({ ...p }));
+}
+
+/** Changes whenever packs are added or removed; engines key caches on it. */
+export function rulesGeneration() {
+  return generation;
+}
+
+/**
+ * Compiled rules of one kind from active packs.
+ * @param {string} kind
+ * @param {{ pack?: string, exceptPack?: string }} [filter]
+ */
+export function rulesOf(kind, filter = {}) {
+  const out = [];
+  for (const p of active) {
+    if (filter.pack && p.name !== filter.pack) continue;
+    if (filter.exceptPack && p.name === filter.exceptPack) continue;
+    for (const r of p.rules[kind] || []) out.push({ ...r, origin: p.origin });
+  }
+  return out;
+}
+
+/** Test a pack regex, capping input for packs added by path. */
+export function packTest(rule, s) {
+  return rule.pattern.test(rule.origin === "bundled" || s.length <= PACK_INPUT_CAP ? s : s.slice(0, PACK_INPUT_CAP));
+}
+
+/** Match a pack regex, capping input for packs added by path. */
+export function packMatch(rule, s) {
+  return (rule.origin === "bundled" || s.length <= PACK_INPUT_CAP ? s : s.slice(0, PACK_INPUT_CAP)).match(rule.pattern);
+}

package/lib/rules/ioc-2025-2026/files.json

@@ -0,0 +1,43 @@
+{
+  "kind": "ioc-file",
+  "rules": [
+    {
+      "id": "shai-hulud-1-bundle",
+      "campaign": "Shai-Hulud worm (first wave)",
+      "description": "The worm payload. bundle.js is a common file name, so it only matches with this SHA-256.",
+      "files": [
+        {
+          "path": "bundle.js",
+          "sha256": "46faab8ab153fae6e80e7cca38eab363075bb524edd79e42269217a083628f09"
+        }
+      ],
+      "source": "https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-packages-compromised",
+      "date": "2025-09-15",
+      "confidence": "confirmed",
+      "references": [
+        "ohm2020backstabber",
+        "ladisa2023sok"
+      ]
+    },
+    {
+      "id": "shai-hulud-2-loader",
+      "campaign": "Shai-Hulud 2.0 (Sha1-Hulud: The Second Coming)",
+      "description": "The preinstall loader and payload file names. Matched by name: Wiz publishes SHA-1 hashes only.",
+      "files": [
+        {
+          "path": "setup_bun.js"
+        },
+        {
+          "path": "bun_environment.js"
+        }
+      ],
+      "source": "https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack",
+      "date": "2025-11-24",
+      "confidence": "likely",
+      "references": [
+        "ohm2020backstabber",
+        "ladisa2023sok"
+      ]
+    }
+  ]
+}

package/lib/rules/ioc-2025-2026/hosts.json

@@ -0,0 +1,35 @@
+{
+  "kind": "ioc-host",
+  "rules": [
+    {
+      "id": "shai-hulud-1-exfil",
+      "campaign": "Shai-Hulud worm (first wave)",
+      "description": "The worm's exfiltration endpoint. webhook.site is a legitimate service, so only this exact URL is an indicator.",
+      "urls": [
+        "https://webhook.site/bb8ca5f6-4175-45d2-b042-fc9ebb8170b7"
+      ],
+      "source": "https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-packages-compromised",
+      "date": "2025-09-15",
+      "confidence": "confirmed",
+      "references": [
+        "ohm2020backstabber",
+        "ladisa2023sok"
+      ]
+    },
+    {
+      "id": "postmark-mcp-exfil",
+      "campaign": "postmark-mcp backdoor",
+      "description": "Attacker domain that received the BCC copies (phan@giftshop.club).",
+      "hosts": [
+        "giftshop.club"
+      ],
+      "source": "https://snyk.io/blog/malicious-mcp-server-on-npm-postmark-mcp-harvests-emails/",
+      "date": "2025-09-25",
+      "confidence": "confirmed",
+      "references": [
+        "ohm2020backstabber",
+        "ladisa2023sok"
+      ]
+    }
+  ]
+}

package/lib/rules/ioc-2025-2026/pack.json

@@ -0,0 +1,25 @@
+{
+  "schema": 1,
+  "name": "ioc-2025-2026",
+  "version": "1.0.0",
+  "created_at": "2026-10-19T14:09:27Z",
+  "min_penthera": "1.2.0",
+  "description": "Indicators for named npm supply-chain campaigns of 2025: s1ngularity (Nx), Shai-Hulud and Shai-Hulud 2.0, and the postmark-mcp backdoor. Every entry cites the advisory or vendor list it came from.",
+  "rules": [
+    {
+      "file": "files.json",
+      "kind": "ioc-file",
+      "sha256": "83ab6ecd29a4ff387ce0a3409a1f8a7ee9e451070fc68fbb7a9e989437e9cdaa"
+    },
+    {
+      "file": "hosts.json",
+      "kind": "ioc-host",
+      "sha256": "f172e6858de39e41c84f340477dbd403afbaa66730e3c9295a1bad57278377bd"
+    },
+    {
+      "file": "packages.json",
+      "kind": "ioc-package",
+      "sha256": "9c2d5378917f61894bbb12feba104e49e9cdfb2b7547c19da7ded4eaa1b28ca9"
+    }
+  ]
+}

package/lib/rules/ioc-2025-2026/pack.json.sig

@@ -0,0 +1,6 @@
+-----BEGIN SSH SIGNATURE-----
+U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgDgRSZTRaMM36gE32AzSZRuHiqG
+VstB30pUKdNOYLIywAAAAOcGVudGhlcmEtcnVsZXMAAAAAAAAABnNoYTUxMgAAAFMAAAAL
+c3NoLWVkMjU1MTkAAABA0GfNaDjNeTRDBD39zj6gltV0b3fUgPcyQ+5x+HWeI7ReCrpUwv
+jEn40N4V8BqPEtl1odxx3LBUEuOzcSm/KOAw==
+-----END SSH SIGNATURE-----