secure-scan 1.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (569) hide show
  1. package/README.md +564 -0
  2. package/dist/ai/aiAnalyzer.d.ts +99 -0
  3. package/dist/ai/aiAnalyzer.d.ts.map +1 -0
  4. package/dist/ai/aiAnalyzer.js +669 -0
  5. package/dist/ai/aiAnalyzer.js.map +1 -0
  6. package/dist/ai/index.d.ts +5 -0
  7. package/dist/ai/index.d.ts.map +1 -0
  8. package/dist/ai/index.js +21 -0
  9. package/dist/ai/index.js.map +1 -0
  10. package/dist/analyzers/base/baseAnalyzer.d.ts +44 -0
  11. package/dist/analyzers/base/baseAnalyzer.d.ts.map +1 -0
  12. package/dist/analyzers/base/baseAnalyzer.js +53 -0
  13. package/dist/analyzers/base/baseAnalyzer.js.map +1 -0
  14. package/dist/analyzers/base/index.d.ts +5 -0
  15. package/dist/analyzers/base/index.d.ts.map +1 -0
  16. package/dist/analyzers/base/index.js +21 -0
  17. package/dist/analyzers/base/index.js.map +1 -0
  18. package/dist/analyzers/c-cpp/cppAnalyzer.d.ts +60 -0
  19. package/dist/analyzers/c-cpp/cppAnalyzer.d.ts.map +1 -0
  20. package/dist/analyzers/c-cpp/cppAnalyzer.js +218 -0
  21. package/dist/analyzers/c-cpp/cppAnalyzer.js.map +1 -0
  22. package/dist/analyzers/c-cpp/index.d.ts +5 -0
  23. package/dist/analyzers/c-cpp/index.d.ts.map +1 -0
  24. package/dist/analyzers/c-cpp/index.js +21 -0
  25. package/dist/analyzers/c-cpp/index.js.map +1 -0
  26. package/dist/analyzers/core/engine/index.d.ts +5 -0
  27. package/dist/analyzers/core/engine/index.d.ts.map +1 -0
  28. package/dist/analyzers/core/engine/index.js +21 -0
  29. package/dist/analyzers/core/engine/index.js.map +1 -0
  30. package/dist/analyzers/core/engine/ruleEngine.d.ts +46 -0
  31. package/dist/analyzers/core/engine/ruleEngine.d.ts.map +1 -0
  32. package/dist/analyzers/core/engine/ruleEngine.js +173 -0
  33. package/dist/analyzers/core/engine/ruleEngine.js.map +1 -0
  34. package/dist/analyzers/core/index.d.ts +8 -0
  35. package/dist/analyzers/core/index.d.ts.map +1 -0
  36. package/dist/analyzers/core/index.js +24 -0
  37. package/dist/analyzers/core/index.js.map +1 -0
  38. package/dist/analyzers/core/scanner/fileScanner.d.ts +31 -0
  39. package/dist/analyzers/core/scanner/fileScanner.d.ts.map +1 -0
  40. package/dist/analyzers/core/scanner/fileScanner.js +199 -0
  41. package/dist/analyzers/core/scanner/fileScanner.js.map +1 -0
  42. package/dist/analyzers/core/scanner/index.d.ts +5 -0
  43. package/dist/analyzers/core/scanner/index.d.ts.map +1 -0
  44. package/dist/analyzers/core/scanner/index.js +21 -0
  45. package/dist/analyzers/core/scanner/index.js.map +1 -0
  46. package/dist/analyzers/core/scoring/index.d.ts +5 -0
  47. package/dist/analyzers/core/scoring/index.d.ts.map +1 -0
  48. package/dist/analyzers/core/scoring/index.js +21 -0
  49. package/dist/analyzers/core/scoring/index.js.map +1 -0
  50. package/dist/analyzers/core/scoring/riskScoring.d.ts +49 -0
  51. package/dist/analyzers/core/scoring/riskScoring.d.ts.map +1 -0
  52. package/dist/analyzers/core/scoring/riskScoring.js +180 -0
  53. package/dist/analyzers/core/scoring/riskScoring.js.map +1 -0
  54. package/dist/analyzers/core/securityScanner.d.ts +47 -0
  55. package/dist/analyzers/core/securityScanner.d.ts.map +1 -0
  56. package/dist/analyzers/core/securityScanner.js +298 -0
  57. package/dist/analyzers/core/securityScanner.js.map +1 -0
  58. package/dist/analyzers/csharp/csharpAnalyzer.d.ts +64 -0
  59. package/dist/analyzers/csharp/csharpAnalyzer.d.ts.map +1 -0
  60. package/dist/analyzers/csharp/csharpAnalyzer.js +232 -0
  61. package/dist/analyzers/csharp/csharpAnalyzer.js.map +1 -0
  62. package/dist/analyzers/csharp/index.d.ts +5 -0
  63. package/dist/analyzers/csharp/index.d.ts.map +1 -0
  64. package/dist/analyzers/csharp/index.js +21 -0
  65. package/dist/analyzers/csharp/index.js.map +1 -0
  66. package/dist/analyzers/iac/iacAnalyzer.d.ts +36 -0
  67. package/dist/analyzers/iac/iacAnalyzer.d.ts.map +1 -0
  68. package/dist/analyzers/iac/iacAnalyzer.js +182 -0
  69. package/dist/analyzers/iac/iacAnalyzer.js.map +1 -0
  70. package/dist/analyzers/iac/index.d.ts +5 -0
  71. package/dist/analyzers/iac/index.d.ts.map +1 -0
  72. package/dist/analyzers/iac/index.js +21 -0
  73. package/dist/analyzers/iac/index.js.map +1 -0
  74. package/dist/analyzers/index.d.ts +30 -0
  75. package/dist/analyzers/index.d.ts.map +1 -0
  76. package/dist/analyzers/index.js +80 -0
  77. package/dist/analyzers/index.js.map +1 -0
  78. package/dist/analyzers/java/index.d.ts +5 -0
  79. package/dist/analyzers/java/index.d.ts.map +1 -0
  80. package/dist/analyzers/java/index.js +21 -0
  81. package/dist/analyzers/java/index.js.map +1 -0
  82. package/dist/analyzers/java/javaAnalyzer.d.ts +64 -0
  83. package/dist/analyzers/java/javaAnalyzer.d.ts.map +1 -0
  84. package/dist/analyzers/java/javaAnalyzer.js +224 -0
  85. package/dist/analyzers/java/javaAnalyzer.js.map +1 -0
  86. package/dist/analyzers/javascript/astUtils.d.ts +170 -0
  87. package/dist/analyzers/javascript/astUtils.d.ts.map +1 -0
  88. package/dist/analyzers/javascript/astUtils.js +700 -0
  89. package/dist/analyzers/javascript/astUtils.js.map +1 -0
  90. package/dist/analyzers/javascript/index.d.ts +18 -0
  91. package/dist/analyzers/javascript/index.d.ts.map +1 -0
  92. package/dist/analyzers/javascript/index.js +50 -0
  93. package/dist/analyzers/javascript/index.js.map +1 -0
  94. package/dist/analyzers/javascript/javascriptAnalyzer.d.ts +111 -0
  95. package/dist/analyzers/javascript/javascriptAnalyzer.d.ts.map +1 -0
  96. package/dist/analyzers/javascript/javascriptAnalyzer.js +860 -0
  97. package/dist/analyzers/javascript/javascriptAnalyzer.js.map +1 -0
  98. package/dist/analyzers/javascript/malwareDetector.d.ts +102 -0
  99. package/dist/analyzers/javascript/malwareDetector.d.ts.map +1 -0
  100. package/dist/analyzers/javascript/malwareDetector.js +616 -0
  101. package/dist/analyzers/javascript/malwareDetector.js.map +1 -0
  102. package/dist/analyzers/javascript/packageJsonAnalyzer.d.ts +87 -0
  103. package/dist/analyzers/javascript/packageJsonAnalyzer.d.ts.map +1 -0
  104. package/dist/analyzers/javascript/packageJsonAnalyzer.js +553 -0
  105. package/dist/analyzers/javascript/packageJsonAnalyzer.js.map +1 -0
  106. package/dist/analyzers/javascript/taintAnalyzer.d.ts +120 -0
  107. package/dist/analyzers/javascript/taintAnalyzer.d.ts.map +1 -0
  108. package/dist/analyzers/javascript/taintAnalyzer.js +526 -0
  109. package/dist/analyzers/javascript/taintAnalyzer.js.map +1 -0
  110. package/dist/analyzers/php/index.d.ts +5 -0
  111. package/dist/analyzers/php/index.d.ts.map +1 -0
  112. package/dist/analyzers/php/index.js +21 -0
  113. package/dist/analyzers/php/index.js.map +1 -0
  114. package/dist/analyzers/php/phpAnalyzer.d.ts +56 -0
  115. package/dist/analyzers/php/phpAnalyzer.d.ts.map +1 -0
  116. package/dist/analyzers/php/phpAnalyzer.js +202 -0
  117. package/dist/analyzers/php/phpAnalyzer.js.map +1 -0
  118. package/dist/analyzers/python/index.d.ts +5 -0
  119. package/dist/analyzers/python/index.d.ts.map +1 -0
  120. package/dist/analyzers/python/index.js +21 -0
  121. package/dist/analyzers/python/index.js.map +1 -0
  122. package/dist/analyzers/python/pythonAnalyzer.d.ts +64 -0
  123. package/dist/analyzers/python/pythonAnalyzer.d.ts.map +1 -0
  124. package/dist/analyzers/python/pythonAnalyzer.js +226 -0
  125. package/dist/analyzers/python/pythonAnalyzer.js.map +1 -0
  126. package/dist/cli/index.d.ts +7 -0
  127. package/dist/cli/index.d.ts.map +1 -0
  128. package/dist/cli/index.js +281 -0
  129. package/dist/cli/index.js.map +1 -0
  130. package/dist/core/engine/index.d.ts +5 -0
  131. package/dist/core/engine/index.d.ts.map +1 -0
  132. package/dist/core/engine/index.js +21 -0
  133. package/dist/core/engine/index.js.map +1 -0
  134. package/dist/core/engine/ruleEngine.d.ts +46 -0
  135. package/dist/core/engine/ruleEngine.d.ts.map +1 -0
  136. package/dist/core/engine/ruleEngine.js +173 -0
  137. package/dist/core/engine/ruleEngine.js.map +1 -0
  138. package/dist/core/index.d.ts +8 -0
  139. package/dist/core/index.d.ts.map +1 -0
  140. package/dist/core/index.js +24 -0
  141. package/dist/core/index.js.map +1 -0
  142. package/dist/core/scanner/fileScanner.d.ts +31 -0
  143. package/dist/core/scanner/fileScanner.d.ts.map +1 -0
  144. package/dist/core/scanner/fileScanner.js +199 -0
  145. package/dist/core/scanner/fileScanner.js.map +1 -0
  146. package/dist/core/scanner/index.d.ts +5 -0
  147. package/dist/core/scanner/index.d.ts.map +1 -0
  148. package/dist/core/scanner/index.js +21 -0
  149. package/dist/core/scanner/index.js.map +1 -0
  150. package/dist/core/scoring/index.d.ts +5 -0
  151. package/dist/core/scoring/index.d.ts.map +1 -0
  152. package/dist/core/scoring/index.js +21 -0
  153. package/dist/core/scoring/index.js.map +1 -0
  154. package/dist/core/scoring/riskScoring.d.ts +49 -0
  155. package/dist/core/scoring/riskScoring.d.ts.map +1 -0
  156. package/dist/core/scoring/riskScoring.js +180 -0
  157. package/dist/core/scoring/riskScoring.js.map +1 -0
  158. package/dist/core/securityScanner.d.ts +47 -0
  159. package/dist/core/securityScanner.d.ts.map +1 -0
  160. package/dist/core/securityScanner.js +298 -0
  161. package/dist/core/securityScanner.js.map +1 -0
  162. package/dist/dependencies/aiDependencyAnalyzer.d.ts +96 -0
  163. package/dist/dependencies/aiDependencyAnalyzer.d.ts.map +1 -0
  164. package/dist/dependencies/aiDependencyAnalyzer.js +435 -0
  165. package/dist/dependencies/aiDependencyAnalyzer.js.map +1 -0
  166. package/dist/dependencies/database/cveDatabase.d.ts +32 -0
  167. package/dist/dependencies/database/cveDatabase.d.ts.map +1 -0
  168. package/dist/dependencies/database/cveDatabase.js +393 -0
  169. package/dist/dependencies/database/cveDatabase.js.map +1 -0
  170. package/dist/dependencies/database/index.d.ts +6 -0
  171. package/dist/dependencies/database/index.d.ts.map +1 -0
  172. package/dist/dependencies/database/index.js +22 -0
  173. package/dist/dependencies/database/index.js.map +1 -0
  174. package/dist/dependencies/database/maliciousPackages.d.ts +43 -0
  175. package/dist/dependencies/database/maliciousPackages.d.ts.map +1 -0
  176. package/dist/dependencies/database/maliciousPackages.js +279 -0
  177. package/dist/dependencies/database/maliciousPackages.js.map +1 -0
  178. package/dist/dependencies/dependencyAnalyzer.d.ts +74 -0
  179. package/dist/dependencies/dependencyAnalyzer.d.ts.map +1 -0
  180. package/dist/dependencies/dependencyAnalyzer.js +349 -0
  181. package/dist/dependencies/dependencyAnalyzer.js.map +1 -0
  182. package/dist/dependencies/detectors/index.d.ts +7 -0
  183. package/dist/dependencies/detectors/index.d.ts.map +1 -0
  184. package/dist/dependencies/detectors/index.js +28 -0
  185. package/dist/dependencies/detectors/index.js.map +1 -0
  186. package/dist/dependencies/detectors/securityStandards.d.ts +15 -0
  187. package/dist/dependencies/detectors/securityStandards.d.ts.map +1 -0
  188. package/dist/dependencies/detectors/securityStandards.js +178 -0
  189. package/dist/dependencies/detectors/securityStandards.js.map +1 -0
  190. package/dist/dependencies/detectors/vulnerabilityDetector.d.ts +53 -0
  191. package/dist/dependencies/detectors/vulnerabilityDetector.d.ts.map +1 -0
  192. package/dist/dependencies/detectors/vulnerabilityDetector.js +289 -0
  193. package/dist/dependencies/detectors/vulnerabilityDetector.js.map +1 -0
  194. package/dist/dependencies/index.d.ts +14 -0
  195. package/dist/dependencies/index.d.ts.map +1 -0
  196. package/dist/dependencies/index.js +43 -0
  197. package/dist/dependencies/index.js.map +1 -0
  198. package/dist/dependencies/installed/index.d.ts +8 -0
  199. package/dist/dependencies/installed/index.d.ts.map +1 -0
  200. package/dist/dependencies/installed/index.js +24 -0
  201. package/dist/dependencies/installed/index.js.map +1 -0
  202. package/dist/dependencies/installed/installedScanner.d.ts +91 -0
  203. package/dist/dependencies/installed/installedScanner.d.ts.map +1 -0
  204. package/dist/dependencies/installed/installedScanner.js +766 -0
  205. package/dist/dependencies/installed/installedScanner.js.map +1 -0
  206. package/dist/dependencies/installed/malwarePatterns.d.ts +32 -0
  207. package/dist/dependencies/installed/malwarePatterns.d.ts.map +1 -0
  208. package/dist/dependencies/installed/malwarePatterns.js +480 -0
  209. package/dist/dependencies/installed/malwarePatterns.js.map +1 -0
  210. package/dist/dependencies/installed/types.d.ts +274 -0
  211. package/dist/dependencies/installed/types.d.ts.map +1 -0
  212. package/dist/dependencies/installed/types.js +7 -0
  213. package/dist/dependencies/installed/types.js.map +1 -0
  214. package/dist/dependencies/parsers/base/baseParser.d.ts +44 -0
  215. package/dist/dependencies/parsers/base/baseParser.d.ts.map +1 -0
  216. package/dist/dependencies/parsers/base/baseParser.js +80 -0
  217. package/dist/dependencies/parsers/base/baseParser.js.map +1 -0
  218. package/dist/dependencies/parsers/base/index.d.ts +6 -0
  219. package/dist/dependencies/parsers/base/index.d.ts.map +1 -0
  220. package/dist/dependencies/parsers/base/index.js +27 -0
  221. package/dist/dependencies/parsers/base/index.js.map +1 -0
  222. package/dist/dependencies/parsers/cpp/cppParser.d.ts +36 -0
  223. package/dist/dependencies/parsers/cpp/cppParser.d.ts.map +1 -0
  224. package/dist/dependencies/parsers/cpp/cppParser.js +196 -0
  225. package/dist/dependencies/parsers/cpp/cppParser.js.map +1 -0
  226. package/dist/dependencies/parsers/cpp/index.d.ts +6 -0
  227. package/dist/dependencies/parsers/cpp/index.d.ts.map +1 -0
  228. package/dist/dependencies/parsers/cpp/index.js +27 -0
  229. package/dist/dependencies/parsers/cpp/index.js.map +1 -0
  230. package/dist/dependencies/parsers/csharp/csharpParser.d.ts +32 -0
  231. package/dist/dependencies/parsers/csharp/csharpParser.d.ts.map +1 -0
  232. package/dist/dependencies/parsers/csharp/csharpParser.js +125 -0
  233. package/dist/dependencies/parsers/csharp/csharpParser.js.map +1 -0
  234. package/dist/dependencies/parsers/csharp/index.d.ts +6 -0
  235. package/dist/dependencies/parsers/csharp/index.d.ts.map +1 -0
  236. package/dist/dependencies/parsers/csharp/index.js +27 -0
  237. package/dist/dependencies/parsers/csharp/index.js.map +1 -0
  238. package/dist/dependencies/parsers/index.d.ts +24 -0
  239. package/dist/dependencies/parsers/index.d.ts.map +1 -0
  240. package/dist/dependencies/parsers/index.js +69 -0
  241. package/dist/dependencies/parsers/index.js.map +1 -0
  242. package/dist/dependencies/parsers/java/index.d.ts +6 -0
  243. package/dist/dependencies/parsers/java/index.d.ts.map +1 -0
  244. package/dist/dependencies/parsers/java/index.js +27 -0
  245. package/dist/dependencies/parsers/java/index.js.map +1 -0
  246. package/dist/dependencies/parsers/java/javaParser.d.ts +32 -0
  247. package/dist/dependencies/parsers/java/javaParser.d.ts.map +1 -0
  248. package/dist/dependencies/parsers/java/javaParser.js +168 -0
  249. package/dist/dependencies/parsers/java/javaParser.js.map +1 -0
  250. package/dist/dependencies/parsers/javascript/index.d.ts +6 -0
  251. package/dist/dependencies/parsers/javascript/index.d.ts.map +1 -0
  252. package/dist/dependencies/parsers/javascript/index.js +27 -0
  253. package/dist/dependencies/parsers/javascript/index.js.map +1 -0
  254. package/dist/dependencies/parsers/javascript/javascriptParser.d.ts +55 -0
  255. package/dist/dependencies/parsers/javascript/javascriptParser.d.ts.map +1 -0
  256. package/dist/dependencies/parsers/javascript/javascriptParser.js +266 -0
  257. package/dist/dependencies/parsers/javascript/javascriptParser.js.map +1 -0
  258. package/dist/dependencies/parsers/php/index.d.ts +6 -0
  259. package/dist/dependencies/parsers/php/index.d.ts.map +1 -0
  260. package/dist/dependencies/parsers/php/index.js +27 -0
  261. package/dist/dependencies/parsers/php/index.js.map +1 -0
  262. package/dist/dependencies/parsers/php/phpParser.d.ts +35 -0
  263. package/dist/dependencies/parsers/php/phpParser.d.ts.map +1 -0
  264. package/dist/dependencies/parsers/php/phpParser.js +162 -0
  265. package/dist/dependencies/parsers/php/phpParser.js.map +1 -0
  266. package/dist/dependencies/parsers/python/index.d.ts +6 -0
  267. package/dist/dependencies/parsers/python/index.d.ts.map +1 -0
  268. package/dist/dependencies/parsers/python/index.js +27 -0
  269. package/dist/dependencies/parsers/python/index.js.map +1 -0
  270. package/dist/dependencies/parsers/python/pythonParser.d.ts +60 -0
  271. package/dist/dependencies/parsers/python/pythonParser.d.ts.map +1 -0
  272. package/dist/dependencies/parsers/python/pythonParser.js +336 -0
  273. package/dist/dependencies/parsers/python/pythonParser.js.map +1 -0
  274. package/dist/dependencies/types.d.ts +280 -0
  275. package/dist/dependencies/types.d.ts.map +1 -0
  276. package/dist/dependencies/types.js +59 -0
  277. package/dist/dependencies/types.js.map +1 -0
  278. package/dist/i18n/index.d.ts +2 -0
  279. package/dist/i18n/index.d.ts.map +1 -0
  280. package/dist/i18n/index.js +18 -0
  281. package/dist/i18n/index.js.map +1 -0
  282. package/dist/i18n/translations.d.ts +55 -0
  283. package/dist/i18n/translations.d.ts.map +1 -0
  284. package/dist/i18n/translations.js +119 -0
  285. package/dist/i18n/translations.js.map +1 -0
  286. package/dist/index.d.ts +14 -0
  287. package/dist/index.d.ts.map +1 -0
  288. package/dist/index.js +36 -0
  289. package/dist/index.js.map +1 -0
  290. package/dist/reports/dependencyReportGenerator.d.ts +20 -0
  291. package/dist/reports/dependencyReportGenerator.d.ts.map +1 -0
  292. package/dist/reports/dependencyReportGenerator.js +690 -0
  293. package/dist/reports/dependencyReportGenerator.js.map +1 -0
  294. package/dist/reports/htmlReportGenerator.d.ts +43 -0
  295. package/dist/reports/htmlReportGenerator.d.ts.map +1 -0
  296. package/dist/reports/htmlReportGenerator.js +793 -0
  297. package/dist/reports/htmlReportGenerator.js.map +1 -0
  298. package/dist/reports/index.d.ts +7 -0
  299. package/dist/reports/index.d.ts.map +1 -0
  300. package/dist/reports/index.js +23 -0
  301. package/dist/reports/index.js.map +1 -0
  302. package/dist/reports/installedDepsReportGenerator.d.ts +14 -0
  303. package/dist/reports/installedDepsReportGenerator.d.ts.map +1 -0
  304. package/dist/reports/installedDepsReportGenerator.js +872 -0
  305. package/dist/reports/installedDepsReportGenerator.js.map +1 -0
  306. package/dist/rules/index.d.ts +31 -0
  307. package/dist/rules/index.d.ts.map +1 -0
  308. package/dist/rules/index.js +95 -0
  309. package/dist/rules/index.js.map +1 -0
  310. package/dist/rules/malware/categories/backdoors.d.ts +12 -0
  311. package/dist/rules/malware/categories/backdoors.d.ts.map +1 -0
  312. package/dist/rules/malware/categories/backdoors.js +163 -0
  313. package/dist/rules/malware/categories/backdoors.js.map +1 -0
  314. package/dist/rules/malware/categories/cryptominers.d.ts +13 -0
  315. package/dist/rules/malware/categories/cryptominers.d.ts.map +1 -0
  316. package/dist/rules/malware/categories/cryptominers.js +415 -0
  317. package/dist/rules/malware/categories/cryptominers.js.map +1 -0
  318. package/dist/rules/malware/categories/exfiltration.d.ts +20 -0
  319. package/dist/rules/malware/categories/exfiltration.d.ts.map +1 -0
  320. package/dist/rules/malware/categories/exfiltration.js +658 -0
  321. package/dist/rules/malware/categories/exfiltration.js.map +1 -0
  322. package/dist/rules/malware/categories/keyloggers.d.ts +19 -0
  323. package/dist/rules/malware/categories/keyloggers.d.ts.map +1 -0
  324. package/dist/rules/malware/categories/keyloggers.js +763 -0
  325. package/dist/rules/malware/categories/keyloggers.js.map +1 -0
  326. package/dist/rules/malware/categories/loaders.d.ts +20 -0
  327. package/dist/rules/malware/categories/loaders.d.ts.map +1 -0
  328. package/dist/rules/malware/categories/loaders.js +702 -0
  329. package/dist/rules/malware/categories/loaders.js.map +1 -0
  330. package/dist/rules/malware/categories/network.d.ts +19 -0
  331. package/dist/rules/malware/categories/network.d.ts.map +1 -0
  332. package/dist/rules/malware/categories/network.js +622 -0
  333. package/dist/rules/malware/categories/network.js.map +1 -0
  334. package/dist/rules/malware/categories/obfuscation.d.ts +22 -0
  335. package/dist/rules/malware/categories/obfuscation.d.ts.map +1 -0
  336. package/dist/rules/malware/categories/obfuscation.js +766 -0
  337. package/dist/rules/malware/categories/obfuscation.js.map +1 -0
  338. package/dist/rules/malware/constants/index.d.ts +281 -0
  339. package/dist/rules/malware/constants/index.d.ts.map +1 -0
  340. package/dist/rules/malware/constants/index.js +327 -0
  341. package/dist/rules/malware/constants/index.js.map +1 -0
  342. package/dist/rules/malware/engine/index.d.ts +178 -0
  343. package/dist/rules/malware/engine/index.d.ts.map +1 -0
  344. package/dist/rules/malware/engine/index.js +552 -0
  345. package/dist/rules/malware/engine/index.js.map +1 -0
  346. package/dist/rules/malware/index.d.ts +205 -0
  347. package/dist/rules/malware/index.d.ts.map +1 -0
  348. package/dist/rules/malware/index.js +837 -0
  349. package/dist/rules/malware/index.js.map +1 -0
  350. package/dist/rules/malware/scoring/index.d.ts +84 -0
  351. package/dist/rules/malware/scoring/index.d.ts.map +1 -0
  352. package/dist/rules/malware/scoring/index.js +441 -0
  353. package/dist/rules/malware/scoring/index.js.map +1 -0
  354. package/dist/rules/malware/types/index.d.ts +616 -0
  355. package/dist/rules/malware/types/index.d.ts.map +1 -0
  356. package/dist/rules/malware/types/index.js +155 -0
  357. package/dist/rules/malware/types/index.js.map +1 -0
  358. package/dist/rules/malware/utils/index.d.ts +117 -0
  359. package/dist/rules/malware/utils/index.d.ts.map +1 -0
  360. package/dist/rules/malware/utils/index.js +514 -0
  361. package/dist/rules/malware/utils/index.js.map +1 -0
  362. package/dist/rules/standards.d.ts +26 -0
  363. package/dist/rules/standards.d.ts.map +1 -0
  364. package/dist/rules/standards.js +352 -0
  365. package/dist/rules/standards.js.map +1 -0
  366. package/dist/rules/vulnerabilities/constants/index.d.ts +835 -0
  367. package/dist/rules/vulnerabilities/constants/index.d.ts.map +1 -0
  368. package/dist/rules/vulnerabilities/constants/index.js +544 -0
  369. package/dist/rules/vulnerabilities/constants/index.js.map +1 -0
  370. package/dist/rules/vulnerabilities/engine/index.d.ts +145 -0
  371. package/dist/rules/vulnerabilities/engine/index.d.ts.map +1 -0
  372. package/dist/rules/vulnerabilities/engine/index.js +581 -0
  373. package/dist/rules/vulnerabilities/engine/index.js.map +1 -0
  374. package/dist/rules/vulnerabilities/index.d.ts +148 -0
  375. package/dist/rules/vulnerabilities/index.d.ts.map +1 -0
  376. package/dist/rules/vulnerabilities/index.js +252 -0
  377. package/dist/rules/vulnerabilities/index.js.map +1 -0
  378. package/dist/rules/vulnerabilities/rules/authentication.d.ts +8 -0
  379. package/dist/rules/vulnerabilities/rules/authentication.d.ts.map +1 -0
  380. package/dist/rules/vulnerabilities/rules/authentication.js +419 -0
  381. package/dist/rules/vulnerabilities/rules/authentication.js.map +1 -0
  382. package/dist/rules/vulnerabilities/rules/commandInjection.d.ts +8 -0
  383. package/dist/rules/vulnerabilities/rules/commandInjection.d.ts.map +1 -0
  384. package/dist/rules/vulnerabilities/rules/commandInjection.js +300 -0
  385. package/dist/rules/vulnerabilities/rules/commandInjection.js.map +1 -0
  386. package/dist/rules/vulnerabilities/rules/csrf.d.ts +8 -0
  387. package/dist/rules/vulnerabilities/rules/csrf.d.ts.map +1 -0
  388. package/dist/rules/vulnerabilities/rules/csrf.js +261 -0
  389. package/dist/rules/vulnerabilities/rules/csrf.js.map +1 -0
  390. package/dist/rules/vulnerabilities/rules/deserialization.d.ts +8 -0
  391. package/dist/rules/vulnerabilities/rules/deserialization.d.ts.map +1 -0
  392. package/dist/rules/vulnerabilities/rules/deserialization.js +336 -0
  393. package/dist/rules/vulnerabilities/rules/deserialization.js.map +1 -0
  394. package/dist/rules/vulnerabilities/rules/fileUpload.d.ts +8 -0
  395. package/dist/rules/vulnerabilities/rules/fileUpload.d.ts.map +1 -0
  396. package/dist/rules/vulnerabilities/rules/fileUpload.js +325 -0
  397. package/dist/rules/vulnerabilities/rules/fileUpload.js.map +1 -0
  398. package/dist/rules/vulnerabilities/rules/hardcodedSecrets.d.ts +8 -0
  399. package/dist/rules/vulnerabilities/rules/hardcodedSecrets.d.ts.map +1 -0
  400. package/dist/rules/vulnerabilities/rules/hardcodedSecrets.js +446 -0
  401. package/dist/rules/vulnerabilities/rules/hardcodedSecrets.js.map +1 -0
  402. package/dist/rules/vulnerabilities/rules/index.d.ts +17 -0
  403. package/dist/rules/vulnerabilities/rules/index.d.ts.map +1 -0
  404. package/dist/rules/vulnerabilities/rules/index.js +47 -0
  405. package/dist/rules/vulnerabilities/rules/index.js.map +1 -0
  406. package/dist/rules/vulnerabilities/rules/pathTraversal.d.ts +8 -0
  407. package/dist/rules/vulnerabilities/rules/pathTraversal.d.ts.map +1 -0
  408. package/dist/rules/vulnerabilities/rules/pathTraversal.js +351 -0
  409. package/dist/rules/vulnerabilities/rules/pathTraversal.js.map +1 -0
  410. package/dist/rules/vulnerabilities/rules/prototypePollution.d.ts +8 -0
  411. package/dist/rules/vulnerabilities/rules/prototypePollution.d.ts.map +1 -0
  412. package/dist/rules/vulnerabilities/rules/prototypePollution.js +272 -0
  413. package/dist/rules/vulnerabilities/rules/prototypePollution.js.map +1 -0
  414. package/dist/rules/vulnerabilities/rules/securityMisconfiguration.d.ts +8 -0
  415. package/dist/rules/vulnerabilities/rules/securityMisconfiguration.d.ts.map +1 -0
  416. package/dist/rules/vulnerabilities/rules/securityMisconfiguration.js +438 -0
  417. package/dist/rules/vulnerabilities/rules/securityMisconfiguration.js.map +1 -0
  418. package/dist/rules/vulnerabilities/rules/sqlInjection.d.ts +12 -0
  419. package/dist/rules/vulnerabilities/rules/sqlInjection.d.ts.map +1 -0
  420. package/dist/rules/vulnerabilities/rules/sqlInjection.js +636 -0
  421. package/dist/rules/vulnerabilities/rules/sqlInjection.js.map +1 -0
  422. package/dist/rules/vulnerabilities/rules/ssrf.d.ts +8 -0
  423. package/dist/rules/vulnerabilities/rules/ssrf.d.ts.map +1 -0
  424. package/dist/rules/vulnerabilities/rules/ssrf.js +401 -0
  425. package/dist/rules/vulnerabilities/rules/ssrf.js.map +1 -0
  426. package/dist/rules/vulnerabilities/rules/xss.d.ts +11 -0
  427. package/dist/rules/vulnerabilities/rules/xss.d.ts.map +1 -0
  428. package/dist/rules/vulnerabilities/rules/xss.js +724 -0
  429. package/dist/rules/vulnerabilities/rules/xss.js.map +1 -0
  430. package/dist/rules/vulnerabilities/scoring/index.d.ts +80 -0
  431. package/dist/rules/vulnerabilities/scoring/index.d.ts.map +1 -0
  432. package/dist/rules/vulnerabilities/scoring/index.js +414 -0
  433. package/dist/rules/vulnerabilities/scoring/index.js.map +1 -0
  434. package/dist/rules/vulnerabilities/types/index.d.ts +830 -0
  435. package/dist/rules/vulnerabilities/types/index.d.ts.map +1 -0
  436. package/dist/rules/vulnerabilities/types/index.js +164 -0
  437. package/dist/rules/vulnerabilities/types/index.js.map +1 -0
  438. package/dist/rules/vulnerabilities/utils/index.d.ts +206 -0
  439. package/dist/rules/vulnerabilities/utils/index.d.ts.map +1 -0
  440. package/dist/rules/vulnerabilities/utils/index.js +615 -0
  441. package/dist/rules/vulnerabilities/utils/index.js.map +1 -0
  442. package/dist/types/index.d.ts +359 -0
  443. package/dist/types/index.d.ts.map +1 -0
  444. package/dist/types/index.js +61 -0
  445. package/dist/types/index.js.map +1 -0
  446. package/dist/utils/index.d.ts +82 -0
  447. package/dist/utils/index.d.ts.map +1 -0
  448. package/dist/utils/index.js +326 -0
  449. package/dist/utils/index.js.map +1 -0
  450. package/dist/utils/logger.d.ts +40 -0
  451. package/dist/utils/logger.d.ts.map +1 -0
  452. package/dist/utils/logger.js +139 -0
  453. package/dist/utils/logger.js.map +1 -0
  454. package/docs/ARCHITECTURE.md +320 -0
  455. package/docs/V1.2.1-IA_Performances.md +116 -0
  456. package/docs/images/WIN_Defender.png +0 -0
  457. package/package.json +68 -0
  458. package/secure-scan.config.json +134 -0
  459. package/secure-scan.sln +29 -0
  460. package/src/ai/aiAnalyzer.ts +714 -0
  461. package/src/ai/index.ts +5 -0
  462. package/src/analyzers/base/baseAnalyzer.ts +66 -0
  463. package/src/analyzers/base/index.ts +5 -0
  464. package/src/analyzers/c-cpp/cppAnalyzer.ts +308 -0
  465. package/src/analyzers/c-cpp/index.ts +5 -0
  466. package/src/analyzers/core/engine/index.ts +5 -0
  467. package/src/analyzers/core/engine/ruleEngine.ts +221 -0
  468. package/src/analyzers/core/index.ts +8 -0
  469. package/src/analyzers/core/scanner/fileScanner.ts +204 -0
  470. package/src/analyzers/core/scanner/index.ts +5 -0
  471. package/src/analyzers/core/scoring/index.ts +5 -0
  472. package/src/analyzers/core/scoring/riskScoring.ts +198 -0
  473. package/src/analyzers/core/securityScanner.ts +321 -0
  474. package/src/analyzers/csharp/csharpAnalyzer.ts +328 -0
  475. package/src/analyzers/csharp/index.ts +5 -0
  476. package/src/analyzers/iac/iacAnalyzer.ts +318 -0
  477. package/src/analyzers/iac/index.ts +5 -0
  478. package/src/analyzers/index.ts +67 -0
  479. package/src/analyzers/java/index.ts +5 -0
  480. package/src/analyzers/java/javaAnalyzer.ts +320 -0
  481. package/src/analyzers/javascript/PROMPT_JS_ANALYZER.md +267 -0
  482. package/src/analyzers/javascript/astUtils.ts +789 -0
  483. package/src/analyzers/javascript/index.ts +50 -0
  484. package/src/analyzers/javascript/javascriptAnalyzer.ts +984 -0
  485. package/src/analyzers/javascript/malwareDetector.ts +697 -0
  486. package/src/analyzers/javascript/packageJsonAnalyzer.ts +626 -0
  487. package/src/analyzers/javascript/taintAnalyzer.ts +630 -0
  488. package/src/analyzers/php/index.ts +5 -0
  489. package/src/analyzers/php/phpAnalyzer.ts +280 -0
  490. package/src/analyzers/python/index.ts +5 -0
  491. package/src/analyzers/python/pythonAnalyzer.ts +319 -0
  492. package/src/cli/index.ts +276 -0
  493. package/src/dependencies/aiDependencyAnalyzer.ts +496 -0
  494. package/src/dependencies/database/cveDatabase.ts +426 -0
  495. package/src/dependencies/database/index.ts +6 -0
  496. package/src/dependencies/database/maliciousPackages.ts +286 -0
  497. package/src/dependencies/dependencyAnalyzer.ts +394 -0
  498. package/src/dependencies/detectors/index.ts +7 -0
  499. package/src/dependencies/detectors/securityStandards.ts +200 -0
  500. package/src/dependencies/detectors/vulnerabilityDetector.ts +343 -0
  501. package/src/dependencies/index.ts +27 -0
  502. package/src/dependencies/installed/index.ts +8 -0
  503. package/src/dependencies/installed/installedScanner.ts +821 -0
  504. package/src/dependencies/installed/malwarePatterns.ts +492 -0
  505. package/src/dependencies/installed/types.ts +287 -0
  506. package/src/dependencies/parsers/base/baseParser.ts +108 -0
  507. package/src/dependencies/parsers/base/index.ts +6 -0
  508. package/src/dependencies/parsers/cpp/cppParser.ts +245 -0
  509. package/src/dependencies/parsers/cpp/index.ts +6 -0
  510. package/src/dependencies/parsers/csharp/csharpParser.ts +151 -0
  511. package/src/dependencies/parsers/csharp/index.ts +6 -0
  512. package/src/dependencies/parsers/index.ts +56 -0
  513. package/src/dependencies/parsers/java/index.ts +6 -0
  514. package/src/dependencies/parsers/java/javaParser.ts +203 -0
  515. package/src/dependencies/parsers/javascript/index.ts +6 -0
  516. package/src/dependencies/parsers/javascript/javascriptParser.ts +362 -0
  517. package/src/dependencies/parsers/php/index.ts +6 -0
  518. package/src/dependencies/parsers/php/phpParser.ts +208 -0
  519. package/src/dependencies/parsers/python/index.ts +6 -0
  520. package/src/dependencies/parsers/python/pythonParser.ts +437 -0
  521. package/src/dependencies/types.ts +330 -0
  522. package/src/i18n/index.ts +1 -0
  523. package/src/i18n/translations.ts +194 -0
  524. package/src/index.ts +16 -0
  525. package/src/reports/dependencyReportGenerator.ts +717 -0
  526. package/src/reports/htmlReportGenerator.ts +781 -0
  527. package/src/reports/index.ts +7 -0
  528. package/src/reports/installedDepsReportGenerator.ts +899 -0
  529. package/src/rules/index.ts +58 -0
  530. package/src/rules/malware/INFO.md +287 -0
  531. package/src/rules/malware/categories/backdoors.ts +174 -0
  532. package/src/rules/malware/categories/cryptominers.ts +434 -0
  533. package/src/rules/malware/categories/exfiltration.ts +677 -0
  534. package/src/rules/malware/categories/keyloggers.ts +780 -0
  535. package/src/rules/malware/categories/loaders.ts +721 -0
  536. package/src/rules/malware/categories/network.ts +639 -0
  537. package/src/rules/malware/categories/obfuscation.ts +788 -0
  538. package/src/rules/malware/constants/index.ts +358 -0
  539. package/src/rules/malware/engine/index.ts +758 -0
  540. package/src/rules/malware/index.ts +928 -0
  541. package/src/rules/malware/scoring/index.ts +549 -0
  542. package/src/rules/malware/types/index.ts +752 -0
  543. package/src/rules/malware/utils/index.ts +643 -0
  544. package/src/rules/standards.ts +372 -0
  545. package/src/rules/vulnerabilities/PROMPT_VULNERABILITIES.md +226 -0
  546. package/src/rules/vulnerabilities/constants/index.ts +625 -0
  547. package/src/rules/vulnerabilities/engine/index.ts +831 -0
  548. package/src/rules/vulnerabilities/index.ts +312 -0
  549. package/src/rules/vulnerabilities/rules/authentication.ts +426 -0
  550. package/src/rules/vulnerabilities/rules/commandInjection.ts +307 -0
  551. package/src/rules/vulnerabilities/rules/csrf.ts +268 -0
  552. package/src/rules/vulnerabilities/rules/deserialization.ts +343 -0
  553. package/src/rules/vulnerabilities/rules/fileUpload.ts +332 -0
  554. package/src/rules/vulnerabilities/rules/hardcodedSecrets.ts +453 -0
  555. package/src/rules/vulnerabilities/rules/index.ts +17 -0
  556. package/src/rules/vulnerabilities/rules/pathTraversal.ts +358 -0
  557. package/src/rules/vulnerabilities/rules/prototypePollution.ts +279 -0
  558. package/src/rules/vulnerabilities/rules/securityMisconfiguration.ts +445 -0
  559. package/src/rules/vulnerabilities/rules/sqlInjection.ts +669 -0
  560. package/src/rules/vulnerabilities/rules/ssrf.ts +408 -0
  561. package/src/rules/vulnerabilities/rules/xss.ts +753 -0
  562. package/src/rules/vulnerabilities/scoring/index.ts +543 -0
  563. package/src/rules/vulnerabilities/types/index.ts +1004 -0
  564. package/src/rules/vulnerabilities/utils/index.ts +709 -0
  565. package/src/types/index.ts +391 -0
  566. package/src/utils/index.ts +306 -0
  567. package/src/utils/logger.ts +150 -0
  568. package/test-installed-scanner.ts +136 -0
  569. package/tsconfig.json +30 -0
@@ -0,0 +1,514 @@
1
+ "use strict";
2
+ /**
3
+ * @fileoverview Malware Detection Utilities
4
+ * @module rules/malware/utils
5
+ *
6
+ * Core utility functions for malware detection including entropy calculation,
7
+ * code normalization, obfuscation detection, and pattern matching helpers.
8
+ */
9
+ Object.defineProperty(exports, "__esModule", { value: true });
10
+ exports.calculateEntropy = calculateEntropy;
11
+ exports.analyzeEntropyByLine = analyzeEntropyByLine;
12
+ exports.normalizeCode = normalizeCode;
13
+ exports.detectObfuscationLevel = detectObfuscationLevel;
14
+ exports.detectAntiDebugging = detectAntiDebugging;
15
+ exports.detectEnvironmentChecks = detectEnvironmentChecks;
16
+ exports.matchWithTimeout = matchWithTimeout;
17
+ exports.safeRegexMatch = safeRegexMatch;
18
+ exports.getLocationFromIndex = getLocationFromIndex;
19
+ exports.extractSnippet = extractSnippet;
20
+ exports.analyzeBase64Content = analyzeBase64Content;
21
+ exports.extractSuspiciousStrings = extractSuspiciousStrings;
22
+ exports.removeComments = removeComments;
23
+ exports.normalizeWhitespace = normalizeWhitespace;
24
+ exports.decodeEscapeSequences = decodeEscapeSequences;
25
+ exports.normalizeStringConcatenation = normalizeStringConcatenation;
26
+ const types_1 = require("../types");
27
+ const constants_1 = require("../constants");
28
+ // ============================================================================
29
+ // ENTROPY CALCULATION
30
+ // ============================================================================
31
+ /**
32
+ * Calculate Shannon entropy of a string
33
+ * Higher entropy indicates more randomness/potential obfuscation
34
+ *
35
+ * @param content - String to analyze
36
+ * @returns Entropy value (0-8 for ASCII)
37
+ */
38
+ function calculateEntropy(content) {
39
+ if (!content || content.length === 0) {
40
+ return 0;
41
+ }
42
+ const charFrequency = new Map();
43
+ for (const char of content) {
44
+ charFrequency.set(char, (charFrequency.get(char) || 0) + 1);
45
+ }
46
+ let entropy = 0;
47
+ const length = content.length;
48
+ for (const count of Array.from(charFrequency.values())) {
49
+ const probability = count / length;
50
+ entropy -= probability * Math.log2(probability);
51
+ }
52
+ return entropy;
53
+ }
54
+ /**
55
+ * Calculate entropy per line and detect anomalies
56
+ *
57
+ * @param content - Source code content
58
+ * @returns Object with average entropy and lines with high entropy
59
+ */
60
+ function analyzeEntropyByLine(content) {
61
+ const lines = content.split('\n');
62
+ const entropies = lines.map(line => calculateEntropy(line));
63
+ const averageEntropy = entropies.reduce((a, b) => a + b, 0) / entropies.length;
64
+ const maxEntropy = Math.max(...entropies);
65
+ const highEntropyLines = lines
66
+ .map((line, index) => ({
67
+ line: index + 1,
68
+ entropy: entropies[index],
69
+ content: line.substring(0, constants_1.LIMITS.MAX_SNIPPET_LENGTH)
70
+ }))
71
+ .filter(item => item.entropy > constants_1.ENTROPY_THRESHOLDS.SUSPICIOUS);
72
+ return { averageEntropy, maxEntropy, highEntropyLines };
73
+ }
74
+ // ============================================================================
75
+ // CODE NORMALIZATION
76
+ // ============================================================================
77
+ /**
78
+ * Normalize code for analysis by removing common obfuscation patterns
79
+ * IMPORTANT: This does NOT execute any code
80
+ *
81
+ * @param content - Source code to normalize
82
+ * @param language - Programming language
83
+ * @returns Normalized code
84
+ */
85
+ function normalizeCode(content, language) {
86
+ let normalized = content;
87
+ // Remove comments based on language
88
+ normalized = removeComments(normalized, language);
89
+ // Normalize whitespace
90
+ normalized = normalizeWhitespace(normalized);
91
+ // Decode simple escape sequences (safe, no execution)
92
+ normalized = decodeEscapeSequences(normalized);
93
+ // Normalize string concatenations
94
+ normalized = normalizeStringConcatenation(normalized);
95
+ return normalized;
96
+ }
97
+ /**
98
+ * Remove comments from code based on language
99
+ */
100
+ function removeComments(content, language) {
101
+ let result = content;
102
+ switch (language) {
103
+ case types_1.SupportedLanguage.JAVASCRIPT:
104
+ case types_1.SupportedLanguage.TYPESCRIPT:
105
+ case types_1.SupportedLanguage.JAVA:
106
+ case types_1.SupportedLanguage.CSHARP:
107
+ case types_1.SupportedLanguage.C:
108
+ case types_1.SupportedLanguage.CPP:
109
+ // Remove single-line comments
110
+ result = result.replace(/\/\/.*$/gm, '');
111
+ // Remove multi-line comments
112
+ result = result.replace(/\/\*[\s\S]*?\*\//g, '');
113
+ break;
114
+ case types_1.SupportedLanguage.PYTHON:
115
+ case types_1.SupportedLanguage.RUBY:
116
+ // Remove single-line comments
117
+ result = result.replace(/#.*$/gm, '');
118
+ // Remove docstrings (Python)
119
+ result = result.replace(/"""[\s\S]*?"""/g, '');
120
+ result = result.replace(/'''[\s\S]*?'''/g, '');
121
+ break;
122
+ case types_1.SupportedLanguage.PHP:
123
+ // Remove single-line comments
124
+ result = result.replace(/\/\/.*$/gm, '');
125
+ result = result.replace(/#.*$/gm, '');
126
+ // Remove multi-line comments
127
+ result = result.replace(/\/\*[\s\S]*?\*\//g, '');
128
+ break;
129
+ case types_1.SupportedLanguage.SHELL:
130
+ case types_1.SupportedLanguage.POWERSHELL:
131
+ result = result.replace(/#.*$/gm, '');
132
+ break;
133
+ }
134
+ return result;
135
+ }
136
+ /**
137
+ * Normalize whitespace
138
+ */
139
+ function normalizeWhitespace(content) {
140
+ return content
141
+ .replace(/\r\n/g, '\n')
142
+ .replace(/[ \t]+/g, ' ')
143
+ .replace(/\n{3,}/g, '\n\n');
144
+ }
145
+ /**
146
+ * Safely decode escape sequences without execution
147
+ */
148
+ function decodeEscapeSequences(content) {
149
+ let result = content;
150
+ // Decode hex escapes (\x41 -> A)
151
+ result = result.replace(/\\x([0-9a-fA-F]{2})/g, (_, hex) => {
152
+ const charCode = parseInt(hex, 16);
153
+ if (charCode >= 32 && charCode < 127) {
154
+ return String.fromCharCode(charCode);
155
+ }
156
+ return _;
157
+ });
158
+ // Decode unicode escapes (\u0041 -> A)
159
+ result = result.replace(/\\u([0-9a-fA-F]{4})/g, (_, hex) => {
160
+ const charCode = parseInt(hex, 16);
161
+ if (charCode >= 32 && charCode < 127) {
162
+ return String.fromCharCode(charCode);
163
+ }
164
+ return _;
165
+ });
166
+ return result;
167
+ }
168
+ /**
169
+ * Normalize string concatenation
170
+ * "e" + "v" + "a" + "l" -> "eval"
171
+ */
172
+ function normalizeStringConcatenation(content) {
173
+ // Match patterns like 'a' + 'b' + 'c'
174
+ return content.replace(/(['"])(\w)\1\s*\+\s*(['"])(\w)\3(?:\s*\+\s*(['"])(\w)\5)*/g, (match) => {
175
+ const chars = match.match(/['"](\w)['"]/g);
176
+ if (chars) {
177
+ const combined = chars.map(c => c[1]).join('');
178
+ return `"${combined}"`;
179
+ }
180
+ return match;
181
+ });
182
+ }
183
+ // ============================================================================
184
+ // OBFUSCATION DETECTION
185
+ // ============================================================================
186
+ /**
187
+ * Detect obfuscation level in code
188
+ *
189
+ * @param content - Source code to analyze
190
+ * @param language - Programming language
191
+ * @returns Obfuscation score (0-1)
192
+ */
193
+ function detectObfuscationLevel(content, language) {
194
+ let score = 0;
195
+ let maxScore = 0;
196
+ // Check each obfuscation indicator
197
+ for (const [name, indicator] of Object.entries(constants_1.OBFUSCATION_INDICATORS)) {
198
+ maxScore += indicator.weight;
199
+ if ('pattern' in indicator) {
200
+ const matches = content.match(indicator.pattern);
201
+ if (matches && matches.length > 0) {
202
+ // Scale by match density
203
+ const density = Math.min(matches.length / (content.length / 100), 1);
204
+ score += indicator.weight * density;
205
+ }
206
+ }
207
+ else if ('threshold' in indicator) {
208
+ if (name === 'LONG_LINES') {
209
+ const lines = content.split('\n');
210
+ const longLines = lines.filter(l => l.length > indicator.threshold);
211
+ if (longLines.length / lines.length > 0.1) {
212
+ score += indicator.weight;
213
+ }
214
+ }
215
+ else if (name === 'CHAR_DIVERSITY') {
216
+ const uniqueChars = new Set(content).size;
217
+ const diversity = uniqueChars / Math.min(content.length, 256);
218
+ if (diversity < indicator.threshold) {
219
+ score += indicator.weight;
220
+ }
221
+ }
222
+ }
223
+ }
224
+ // Check entropy
225
+ const entropy = calculateEntropy(content);
226
+ if (entropy > constants_1.ENTROPY_THRESHOLDS.HIGH_OBFUSCATION) {
227
+ score += 0.3;
228
+ maxScore += 0.3;
229
+ }
230
+ else if (entropy > constants_1.ENTROPY_THRESHOLDS.SUSPICIOUS) {
231
+ score += 0.15;
232
+ maxScore += 0.15;
233
+ }
234
+ // Language-specific checks
235
+ score += detectLanguageSpecificObfuscation(content, language);
236
+ maxScore += 0.3;
237
+ return Math.min(score / maxScore, 1);
238
+ }
239
+ /**
240
+ * Language-specific obfuscation detection
241
+ */
242
+ function detectLanguageSpecificObfuscation(content, language) {
243
+ let score = 0;
244
+ switch (language) {
245
+ case types_1.SupportedLanguage.JAVASCRIPT:
246
+ case types_1.SupportedLanguage.TYPESCRIPT:
247
+ // JSFuck patterns
248
+ if (/\[\]!\+/.test(content))
249
+ score += 0.15;
250
+ // JavaScript packer
251
+ if (/eval\(function\(p,a,c,k,e,/.test(content))
252
+ score += 0.15;
253
+ // Obfuscator.io patterns
254
+ if (/_0x[a-f0-9]{4,}/gi.test(content))
255
+ score += 0.1;
256
+ break;
257
+ case types_1.SupportedLanguage.PHP:
258
+ // Base64 + eval/gzinflate
259
+ if (/eval\s*\(\s*(?:base64_decode|gzinflate|str_rot13)/i.test(content))
260
+ score += 0.15;
261
+ // Variable function calls
262
+ if (/\$[a-z]+\s*\(/gi.test(content))
263
+ score += 0.05;
264
+ break;
265
+ case types_1.SupportedLanguage.PYTHON:
266
+ // exec(compile(...))
267
+ if (/exec\s*\(\s*compile/i.test(content))
268
+ score += 0.15;
269
+ // __import__ obfuscation
270
+ if (/__import__\s*\([^)]+\)\s*\./gi.test(content))
271
+ score += 0.1;
272
+ break;
273
+ }
274
+ return score;
275
+ }
276
+ // ============================================================================
277
+ // ANTI-DEBUGGING DETECTION
278
+ // ============================================================================
279
+ /**
280
+ * Detect anti-debugging techniques
281
+ */
282
+ function detectAntiDebugging(content, language) {
283
+ const techniques = [];
284
+ // JavaScript anti-debugging
285
+ if (language === types_1.SupportedLanguage.JAVASCRIPT ||
286
+ language === types_1.SupportedLanguage.TYPESCRIPT) {
287
+ // Debugger statements
288
+ if (/\bdebugger\b/.test(content)) {
289
+ techniques.push('debugger-statement');
290
+ }
291
+ // Console detection
292
+ if (/console\.(log|warn|error)\s*=/.test(content)) {
293
+ techniques.push('console-override');
294
+ }
295
+ // DevTools detection
296
+ if (/devtools|firebug/i.test(content)) {
297
+ techniques.push('devtools-detection');
298
+ }
299
+ // Performance timing checks
300
+ if (/performance\.now\s*\(\s*\)|Date\.now\s*\(\s*\)/.test(content) &&
301
+ /setTimeout|setInterval/.test(content)) {
302
+ techniques.push('timing-check');
303
+ }
304
+ // Function.toString detection
305
+ if (/toString\s*\(\s*\)\s*\.(?:indexOf|includes|match)/.test(content)) {
306
+ techniques.push('toString-check');
307
+ }
308
+ }
309
+ // Python anti-debugging
310
+ if (language === types_1.SupportedLanguage.PYTHON) {
311
+ if (/sys\.(settrace|gettrace)/.test(content)) {
312
+ techniques.push('trace-detection');
313
+ }
314
+ if (/pydevd|pdb\.set_trace/.test(content)) {
315
+ techniques.push('debugger-detection');
316
+ }
317
+ }
318
+ return {
319
+ detected: techniques.length > 0,
320
+ techniques
321
+ };
322
+ }
323
+ // ============================================================================
324
+ // ENVIRONMENT CHECKS DETECTION
325
+ // ============================================================================
326
+ /**
327
+ * Detect environment-dependent activation (time bombs, sandbox evasion)
328
+ */
329
+ function detectEnvironmentChecks(content) {
330
+ const checks = [];
331
+ // Time-based activation
332
+ if (/new Date\s*\(\s*\)|Date\.now\s*\(\s*\)/.test(content)) {
333
+ if (/getFullYear|getMonth|getDate|getHours/.test(content)) {
334
+ checks.push('time-based-activation');
335
+ }
336
+ }
337
+ // Environment variable checks
338
+ if (/process\.env|os\.environ|getenv|Environment\.GetEnvironmentVariable/.test(content)) {
339
+ checks.push('environment-variable-check');
340
+ }
341
+ // CI/CD detection
342
+ if (/CI|TRAVIS|JENKINS|GITHUB_ACTIONS|GITLAB_CI|CIRCLECI/.test(content)) {
343
+ checks.push('ci-cd-detection');
344
+ }
345
+ // Sandbox/VM detection
346
+ if (/vmware|virtualbox|sandbox|qemu|xen|hypervisor/i.test(content)) {
347
+ checks.push('sandbox-detection');
348
+ }
349
+ // Production environment checks
350
+ if (/NODE_ENV|RAILS_ENV|APP_ENV|ENVIRONMENT/.test(content) &&
351
+ /production|prod|live/i.test(content)) {
352
+ checks.push('production-check');
353
+ }
354
+ // User/hostname checks
355
+ if (/os\.getlogin|getpass\.getuser|socket\.gethostname|Environment\.UserName/.test(content)) {
356
+ checks.push('user-hostname-check');
357
+ }
358
+ return {
359
+ detected: checks.length > 0,
360
+ checks
361
+ };
362
+ }
363
+ // ============================================================================
364
+ // PATTERN MATCHING UTILITIES
365
+ // ============================================================================
366
+ /**
367
+ * Safe regex matching with timeout protection
368
+ */
369
+ async function matchWithTimeout(content, pattern, timeout = constants_1.LIMITS.REGEX_TIMEOUT) {
370
+ return new Promise((resolve) => {
371
+ const timer = setTimeout(() => {
372
+ resolve(null);
373
+ }, timeout);
374
+ try {
375
+ const result = content.match(pattern);
376
+ clearTimeout(timer);
377
+ resolve(result);
378
+ }
379
+ catch {
380
+ clearTimeout(timer);
381
+ resolve(null);
382
+ }
383
+ });
384
+ }
385
+ /**
386
+ * Apply regex pattern with safety limits
387
+ */
388
+ function safeRegexMatch(content, pattern) {
389
+ const matches = [];
390
+ try {
391
+ const regex = new RegExp(pattern.pattern, pattern.flags || 'g');
392
+ const maxMatches = pattern.maxMatches || constants_1.LIMITS.MAX_MATCHES_PER_PATTERN;
393
+ let match;
394
+ let count = 0;
395
+ while ((match = regex.exec(content)) !== null && count < maxMatches) {
396
+ const location = getLocationFromIndex(content, match.index, match[0].length);
397
+ matches.push({
398
+ pattern,
399
+ matchedText: match[0].substring(0, constants_1.LIMITS.MAX_SNIPPET_LENGTH),
400
+ location,
401
+ captures: match.slice(1)
402
+ });
403
+ count++;
404
+ // Prevent infinite loops for zero-width matches
405
+ if (match[0].length === 0) {
406
+ regex.lastIndex++;
407
+ }
408
+ }
409
+ }
410
+ catch (error) {
411
+ // Log error but don't throw - invalid regex should be handled gracefully
412
+ console.error(`Invalid regex pattern: ${pattern.pattern}`, error);
413
+ }
414
+ return matches;
415
+ }
416
+ /**
417
+ * Convert string index to line/column location
418
+ */
419
+ function getLocationFromIndex(content, startIndex, length) {
420
+ const lines = content.substring(0, startIndex).split('\n');
421
+ const startLine = lines.length;
422
+ const startColumn = lines[lines.length - 1].length;
423
+ const matchedContent = content.substring(startIndex, startIndex + length);
424
+ const matchedLines = matchedContent.split('\n');
425
+ const endLine = startLine + matchedLines.length - 1;
426
+ const endColumn = matchedLines.length === 1
427
+ ? startColumn + length
428
+ : matchedLines[matchedLines.length - 1].length;
429
+ return {
430
+ filePath: '', // Will be set by caller
431
+ startLine,
432
+ endLine,
433
+ startColumn,
434
+ endColumn
435
+ };
436
+ }
437
+ /**
438
+ * Extract code snippet with context
439
+ */
440
+ function extractSnippet(content, location, contextLines = constants_1.LIMITS.CONTEXT_LINES) {
441
+ const lines = content.split('\n');
442
+ const startLine = Math.max(0, location.startLine - contextLines - 1);
443
+ const endLine = Math.min(lines.length, location.endLine + contextLines);
444
+ return lines
445
+ .slice(startLine, endLine)
446
+ .join('\n')
447
+ .substring(0, constants_1.LIMITS.MAX_SNIPPET_LENGTH);
448
+ }
449
+ // ============================================================================
450
+ // BASE64 UTILITIES
451
+ // ============================================================================
452
+ /**
453
+ * Detect and analyze base64 encoded content
454
+ * Does NOT decode potentially malicious content
455
+ */
456
+ function analyzeBase64Content(content) {
457
+ const base64Pattern = /['"]([A-Za-z0-9+/]{50,}={0,2})['"]/g;
458
+ const locations = [];
459
+ let longestLength = 0;
460
+ let count = 0;
461
+ let match;
462
+ while ((match = base64Pattern.exec(content)) !== null) {
463
+ count++;
464
+ longestLength = Math.max(longestLength, match[1].length);
465
+ locations.push(getLocationFromIndex(content, match.index, match[0].length));
466
+ }
467
+ return {
468
+ found: count > 0,
469
+ count,
470
+ longestLength,
471
+ locations
472
+ };
473
+ }
474
+ // ============================================================================
475
+ // STRING ANALYSIS
476
+ // ============================================================================
477
+ /**
478
+ * Extract suspicious strings from code
479
+ */
480
+ function extractSuspiciousStrings(content) {
481
+ const urls = [];
482
+ const ips = [];
483
+ const emails = [];
484
+ const paths = [];
485
+ const commands = [];
486
+ // URLs
487
+ const urlPattern = /https?:\/\/[^\s'"<>]+/gi;
488
+ let match;
489
+ while ((match = urlPattern.exec(content)) !== null) {
490
+ urls.push(match[0]);
491
+ }
492
+ // IP addresses
493
+ const ipPattern = /\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/g;
494
+ while ((match = ipPattern.exec(content)) !== null) {
495
+ ips.push(match[0]);
496
+ }
497
+ // Email addresses
498
+ const emailPattern = /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g;
499
+ while ((match = emailPattern.exec(content)) !== null) {
500
+ emails.push(match[0]);
501
+ }
502
+ // File paths
503
+ const pathPattern = /(?:\/[\w.-]+)+|(?:[A-Z]:\\[\w\\.-]+)/gi;
504
+ while ((match = pathPattern.exec(content)) !== null) {
505
+ paths.push(match[0]);
506
+ }
507
+ // Shell commands
508
+ const cmdPattern = /(?:(?:sh|bash|cmd|powershell)\s+-c\s+['"]?|`)[^'"`]+/gi;
509
+ while ((match = cmdPattern.exec(content)) !== null) {
510
+ commands.push(match[0]);
511
+ }
512
+ return { urls, ips, emails, paths, commands };
513
+ }
514
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/rules/malware/utils/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AA2BH,4CAoBC;AAQD,oDAoBC;AAcD,sCAmBC;AAkHD,wDAkDC;AA+CD,kDAmDC;AASD,0DA2CC;AASD,4CAmBC;AAKD,wCAoCC;AAKD,oDAuBC;AAKD,wCAaC;AAUD,oDAwBC;AASD,4DA6CC;AAOC,wCAAc;AACd,kDAAmB;AACnB,sDAAqB;AACrB,oEAA4B;AAznB9B,oCAOkB;AAClB,4CAIsB;AAEtB,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,aAAa,GAAwB,IAAI,GAAG,EAAE,CAAC;IAErD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAE9B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QACvD,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,CAAC;QACnC,OAAO,IAAI,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,OAAe;IAKlD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAE5D,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;IAC/E,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;IAE1C,MAAM,gBAAgB,GAAG,KAAK;SAC3B,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,GAAG,CAAC;QACf,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC;QACzB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,kBAAM,CAAC,kBAAkB,CAAC;KACtD,CAAC,CAAC;SACF,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,GAAG,8BAAkB,CAAC,UAAU,CAAC,CAAC;IAEhE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;AAC1D,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;;;;;GAOG;AACH,SAAgB,aAAa,CAC3B,OAAe,EACf,QAA2B;IAE3B,IAAI,UAAU,GAAG,OAAO,CAAC;IAEzB,oCAAoC;IACpC,UAAU,GAAG,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAElD,uBAAuB;IACvB,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAE7C,sDAAsD;IACtD,UAAU,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAE/C,kCAAkC;IAClC,UAAU,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAEtD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,QAA2B;IAClE,IAAI,MAAM,GAAG,OAAO,CAAC;IAErB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,yBAAiB,CAAC,UAAU,CAAC;QAClC,KAAK,yBAAiB,CAAC,UAAU,CAAC;QAClC,KAAK,yBAAiB,CAAC,IAAI,CAAC;QAC5B,KAAK,yBAAiB,CAAC,MAAM,CAAC;QAC9B,KAAK,yBAAiB,CAAC,CAAC,CAAC;QACzB,KAAK,yBAAiB,CAAC,GAAG;YACxB,8BAA8B;YAC9B,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACzC,6BAA6B;YAC7B,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;YACjD,MAAM;QAER,KAAK,yBAAiB,CAAC,MAAM,CAAC;QAC9B,KAAK,yBAAiB,CAAC,IAAI;YACzB,8BAA8B;YAC9B,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtC,6BAA6B;YAC7B,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;YAC/C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;YAC/C,MAAM;QAER,KAAK,yBAAiB,CAAC,GAAG;YACxB,8BAA8B;YAC9B,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACzC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtC,6BAA6B;YAC7B,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;YACjD,MAAM;QAER,KAAK,yBAAiB,CAAC,KAAK,CAAC;QAC7B,KAAK,yBAAiB,CAAC,UAAU;YAC/B,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtC,MAAM;IACV,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,OAAe;IAC1C,OAAO,OAAO;SACX,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;SACtB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,OAAe;IAC5C,IAAI,MAAM,GAAG,OAAO,CAAC;IAErB,iCAAiC;IACjC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QACzD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,QAAQ,IAAI,EAAE,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,uCAAuC;IACvC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QACzD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,QAAQ,IAAI,EAAE,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,4BAA4B,CAAC,OAAe;IACnD,sCAAsC;IACtC,OAAO,OAAO,CAAC,OAAO,CACpB,4DAA4D,EAC5D,CAAC,KAAK,EAAE,EAAE;QACR,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/C,OAAO,IAAI,QAAQ,GAAG,CAAC;QACzB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;;;;;GAMG;AACH,SAAgB,sBAAsB,CACpC,OAAe,EACf,QAA2B;IAE3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,mCAAmC;IACnC,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kCAAsB,CAAC,EAAE,CAAC;QACvE,QAAQ,IAAK,SAAgC,CAAC,MAAM,CAAC;QAErD,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,OAAiB,CAAC,CAAC;YAC3D,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,yBAAyB;gBACzB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrE,KAAK,IAAI,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC;YACtC,CAAC;QACH,CAAC;aAAM,IAAI,WAAW,IAAI,SAAS,EAAE,CAAC;YACpC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAI,SAAS,CAAC,SAAoB,CAAC,CAAC;gBAChF,IAAI,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBAC1C,KAAK,IAAI,SAAS,CAAC,MAAM,CAAC;gBAC5B,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACrC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;gBAC1C,MAAM,SAAS,GAAG,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC9D,IAAI,SAAS,GAAI,SAAS,CAAC,SAAoB,EAAE,CAAC;oBAChD,KAAK,IAAI,SAAS,CAAC,MAAM,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,8BAAkB,CAAC,gBAAgB,EAAE,CAAC;QAClD,KAAK,IAAI,GAAG,CAAC;QACb,QAAQ,IAAI,GAAG,CAAC;IAClB,CAAC;SAAM,IAAI,OAAO,GAAG,8BAAkB,CAAC,UAAU,EAAE,CAAC;QACnD,KAAK,IAAI,IAAI,CAAC;QACd,QAAQ,IAAI,IAAI,CAAC;IACnB,CAAC;IAED,2BAA2B;IAC3B,KAAK,IAAI,iCAAiC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9D,QAAQ,IAAI,GAAG,CAAC;IAEhB,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,SAAS,iCAAiC,CACxC,OAAe,EACf,QAA2B;IAE3B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,yBAAiB,CAAC,UAAU,CAAC;QAClC,KAAK,yBAAiB,CAAC,UAAU;YAC/B,kBAAkB;YAClB,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,KAAK,IAAI,IAAI,CAAC;YAC3C,oBAAoB;YACpB,IAAI,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,KAAK,IAAI,IAAI,CAAC;YAC9D,yBAAyB;YACzB,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,KAAK,IAAI,GAAG,CAAC;YACpD,MAAM;QAER,KAAK,yBAAiB,CAAC,GAAG;YACxB,0BAA0B;YAC1B,IAAI,oDAAoD,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,KAAK,IAAI,IAAI,CAAC;YACtF,0BAA0B;YAC1B,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,KAAK,IAAI,IAAI,CAAC;YACnD,MAAM;QAER,KAAK,yBAAiB,CAAC,MAAM;YAC3B,qBAAqB;YACrB,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,KAAK,IAAI,IAAI,CAAC;YACxD,yBAAyB;YACzB,IAAI,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,KAAK,IAAI,GAAG,CAAC;YAChE,MAAM;IACV,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E;;GAEG;AACH,SAAgB,mBAAmB,CACjC,OAAe,EACf,QAA2B;IAE3B,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,4BAA4B;IAC5B,IAAI,QAAQ,KAAK,yBAAiB,CAAC,UAAU;QACzC,QAAQ,KAAK,yBAAiB,CAAC,UAAU,EAAE,CAAC;QAE9C,sBAAsB;QACtB,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,oBAAoB;QACpB,IAAI,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QAED,qBAAqB;QACrB,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,4BAA4B;QAC5B,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC;YAC9D,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QAED,8BAA8B;QAC9B,IAAI,mDAAmD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,IAAI,QAAQ,KAAK,yBAAiB,CAAC,MAAM,EAAE,CAAC;QAC1C,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;QAC/B,UAAU;KACX,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,+BAA+B;AAC/B,+EAA+E;AAE/E;;GAEG;AACH,SAAgB,uBAAuB,CAAC,OAAe;IAIrD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,wBAAwB;IACxB,IAAI,wCAAwC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,IAAI,uCAAuC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,IAAI,qEAAqE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxF,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAED,kBAAkB;IAClB,IAAI,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjC,CAAC;IAED,uBAAuB;IACvB,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAED,gCAAgC;IAChC,IAAI,wCAAwC,CAAC,IAAI,CAAC,OAAO,CAAC;QACtD,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;IAED,uBAAuB;IACvB,IAAI,yEAAyE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5F,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;QAC3B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;GAEG;AACI,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,OAAe,EACf,UAAkB,kBAAM,CAAC,aAAa;IAEtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAC5B,OAAe,EACf,OAAqB;IAErB,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,kBAAM,CAAC,uBAAuB,CAAC;QAExE,IAAI,KAA6B,CAAC;QAClC,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAE7E,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO;gBACP,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,kBAAM,CAAC,kBAAkB,CAAC;gBAC7D,QAAQ;gBACR,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;aACzB,CAAC,CAAC;YAEH,KAAK,EAAE,CAAC;YAER,gDAAgD;YAChD,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,OAAO,CAAC,KAAK,CAAC,0BAA0B,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB,CAClC,OAAe,EACf,UAAkB,EAClB,MAAc;IAEd,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/B,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IAEnD,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,SAAS,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,KAAK,CAAC;QACzC,CAAC,CAAC,WAAW,GAAG,MAAM;QACtB,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IAEjD,OAAO;QACL,QAAQ,EAAE,EAAE,EAAE,wBAAwB;QACtC,SAAS;QACT,OAAO;QACP,WAAW;QACX,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAC5B,OAAe,EACf,QAAwB,EACxB,eAAuB,kBAAM,CAAC,aAAa;IAE3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,GAAG,YAAY,CAAC,CAAC;IAExE,OAAO,KAAK;SACT,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC;SACzB,IAAI,CAAC,IAAI,CAAC;SACV,SAAS,CAAC,CAAC,EAAE,kBAAM,CAAC,kBAAkB,CAAC,CAAC;AAC7C,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,oBAAoB,CAAC,OAAe;IAMlD,MAAM,aAAa,GAAG,qCAAqC,CAAC;IAC5D,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,CAAC;IAEV,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtD,KAAK,EAAE,CAAC;QACR,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACzD,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK,GAAG,CAAC;QAChB,KAAK;QACL,aAAa;QACb,SAAS;KACV,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;GAEG;AACH,SAAgB,wBAAwB,CAAC,OAAe;IAOtD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,OAAO;IACP,MAAM,UAAU,GAAG,yBAAyB,CAAC;IAC7C,IAAI,KAAK,CAAC;IACV,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,eAAe;IACf,MAAM,SAAS,GAAG,yCAAyC,CAAC;IAC5D,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IAED,kBAAkB;IAClB,MAAM,YAAY,GAAG,iDAAiD,CAAC;IACvE,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,aAAa;IACb,MAAM,WAAW,GAAG,wCAAwC,CAAC;IAC7D,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,iBAAiB;IACjB,MAAM,UAAU,GAAG,wDAAwD,CAAC;IAC5E,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAChD,CAAC"}
@@ -0,0 +1,26 @@
1
+ /**
2
+ * Security Standards Database
3
+ * OWASP Top 10, CWE, MITRE ATT&CK, SANS Top 25
4
+ */
5
+ import { SecurityStandard, ThreatType } from '../types';
6
+ /**
7
+ * OWASP Top 10 2021
8
+ */
9
+ export declare const OWASP_TOP_10: Record<string, SecurityStandard>;
10
+ /**
11
+ * Common Weakness Enumeration (CWE)
12
+ */
13
+ export declare const CWE_DATABASE: Record<string, SecurityStandard>;
14
+ /**
15
+ * MITRE ATT&CK Techniques
16
+ */
17
+ export declare const MITRE_ATTACK: Record<string, SecurityStandard>;
18
+ /**
19
+ * SANS Top 25
20
+ */
21
+ export declare const SANS_TOP_25: Record<string, SecurityStandard>;
22
+ /**
23
+ * Map threat types to relevant security standards
24
+ */
25
+ export declare function getStandardsForThreat(threatType: ThreatType): SecurityStandard[];
26
+ //# sourceMappingURL=standards.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"standards.d.ts","sourceRoot":"","sources":["../../src/rules/standards.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAuEzD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAmGzD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAkDzD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAsBxD,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,UAAU,GAAG,gBAAgB,EAAE,CAmGhF"}