supply-chain-guard 6.4.3 → 6.5.0

package/README.md

@@ -30,7 +30,7 @@ Gate every pull request:
 
 ```yaml
 - uses: actions/checkout@v4
-- uses: homeofe/supply-chain-guard@v6.4.3
+- uses: homeofe/supply-chain-guard@v6.5.0
 ```
 
 Let your AI coding agent check a package before it installs it (MCP):
@@ -204,7 +204,7 @@ Run the scanner as a [pre-commit](https://pre-commit.com) hook (Python-ecosystem
 ```yaml
 repos:
   - repo: https://github.com/homeofe/supply-chain-guard
-    rev: v6.4.3
+    rev: v6.5.0
     hooks:
       - id: supply-chain-guard
 ```
@@ -236,7 +236,7 @@ The hook scans the repository root on every commit and fails on high or critical
 Run the scanner without a Node toolchain via the official multi-arch image (linux/amd64, linux/arm64), published to GHCR on every release tag:
 
 ```bash
-docker run --rm -v ${PWD}:/scan ghcr.io/homeofe/supply-chain-guard:6.4.3 scan /scan
+docker run --rm -v ${PWD}:/scan ghcr.io/homeofe/supply-chain-guard:6.5.0 scan /scan
 ```
 
 `${PWD}` works in bash, zsh, and PowerShell; in cmd.exe use `%cd%` instead.
@@ -245,8 +245,8 @@ The image keeps the catalog cache in `/cache` (`SCG_CACHE_DIR`), so it is gone
 after `--rm`. To keep it across runs, mount a named volume there:
 
 ```bash
-docker run --rm -v scg-cache:/cache ghcr.io/homeofe/supply-chain-guard:6.4.3 feed refresh
-docker run --rm -v scg-cache:/cache -v ${PWD}:/scan ghcr.io/homeofe/supply-chain-guard:6.4.3 scan /scan
+docker run --rm -v scg-cache:/cache ghcr.io/homeofe/supply-chain-guard:6.5.0 feed refresh
+docker run --rm -v scg-cache:/cache -v ${PWD}:/scan ghcr.io/homeofe/supply-chain-guard:6.5.0 scan /scan
 ```
 
 ## Quickstart
@@ -750,13 +750,13 @@ malicious package is known in that ecosystem yet, and the importer or a curated
 <!-- ecosystem-coverage:begin (generated by scripts/generate-coverage-table.mjs; edit src/ecosystem-coverage.json) -->
 | Ecosystem | Files read | Rule | Indicators shipped | Imported automatically from |
 | --- | --- | --- | --- | --- |
-| npm | `package.json`, `package-lock.json`, `yarn.lock`, `pnpm-lock.yaml`, `bun.lock` | `MALICIOUS_DEPENDENCY`, `LOCKFILE_MALICIOUS_VERSION`, `LOCKFILE_MALICIOUS_PACKAGE` | bundle + catalog | GitHub Advisory Database, OpenSSF / OSV |
-| PyPI | `requirements.txt`, `pyproject.toml`, `poetry.lock`, `uv.lock`, `Pipfile.lock` | `PYTHON_MALICIOUS_PACKAGE` | bundle + catalog | GitHub Advisory Database, OpenSSF / OSV |
+| npm | `package.json`, `package-lock.json`, `yarn.lock`, `pnpm-lock.yaml`, `bun.lock` | `MALICIOUS_DEPENDENCY`, `LOCKFILE_MALICIOUS_VERSION`, `LOCKFILE_MALICIOUS_PACKAGE` | bundle + catalog | GitHub Advisory Database, OpenSSF / OSV, DataDog dataset |
+| PyPI | `requirements.txt`, `pyproject.toml`, `poetry.lock`, `uv.lock`, `Pipfile.lock` | `PYTHON_MALICIOUS_PACKAGE` | bundle + catalog | GitHub Advisory Database, OpenSSF / OSV, DataDog dataset |
 | RubyGems | `Gemfile`, `Gemfile.lock` | `RUBY_MALICIOUS_GEM` | bundle + catalog | GitHub Advisory Database, OpenSSF / OSV |
 | Composer (PHP) | `composer.json`, `composer.lock` | `COMPOSER_MALICIOUS_PACKAGE` | bundle + catalog | GitHub Advisory Database, OpenSSF / OSV |
 | NuGet (.NET) | `packages.lock.json`, `*.csproj`, `packages.config` | `NUGET_MALICIOUS_PACKAGE` | bundle + catalog | GitHub Advisory Database, OpenSSF / OSV |
 | Cargo (Rust) | `Cargo.toml`, `Cargo.lock` | `CARGO_MALICIOUS_CRATE` | bundle + catalog | GitHub Advisory Database, OpenSSF / OSV |
-| Go modules | `go.mod`, `go.sum` | `GO_MALICIOUS_MODULE` | bundle | GitHub Advisory Database, OpenSSF / OSV |
+| Go modules | `go.mod`, `go.sum` | `GO_MALICIOUS_MODULE` | bundle + catalog | GitHub Advisory Database, OpenSSF / OSV |
 | Maven / Gradle / SBT / Bazel | `pom.xml`, `gradle.lockfile`, `build.gradle`, `build.gradle.kts`, `libs.versions.toml`, `build.sbt`, `maven_install.json` | `MAVEN_MALICIOUS_PACKAGE` | bundle + catalog | GitHub Advisory Database, OpenSSF / OSV |
 | Dart / Flutter (pub) | `pubspec.lock`, `pubspec.yaml` | `PUB_MALICIOUS_PACKAGE` | bundle | GitHub Advisory Database, OSV |
 | Swift Package Manager | `Package.resolved`, `Package.swift` | `SWIFT_MALICIOUS_PACKAGE` | none yet (matcher ready) | GitHub Advisory Database, OSV (SwiftURL) |
@@ -801,7 +801,7 @@ There is one axis where it goes somewhere the others do not go at all. Credentia
 
 | Tool | Focus | Malware / behavior detection | Known-CVE lookup | Ecosystems | Open source | Account needed |
 |---|---|---|---|---|---|---|
-| **supply-chain-guard** | Malware campaigns, IOCs, behavior heuristics in installed artifacts; SBOM + SLSA provenance grading (in-toto/DSSE structural validation) | Yes: 350+ static heuristics plus multi-source GHSA/OpenSSF package verdicts and campaign-IOC matching, local at scan time (recent and curated indicators offline, the historical package catalog after a `feed refresh`) | No | 15 ecosystems of packages, extensions, plugins, providers, images and CI actions with shipped indicators, and tested matchers for more (see [Ecosystem Coverage](#ecosystem-coverage)), plus GitHub repos | Yes (Apache-2.0) | No |
+| **supply-chain-guard** | Malware campaigns, IOCs, behavior heuristics in installed artifacts; SBOM + SLSA provenance grading (in-toto/DSSE structural validation) | Yes: 350+ static heuristics plus multi-source GHSA/OpenSSF/DataDog package verdicts and campaign-IOC matching, local at scan time (recent and curated indicators offline, the historical package catalog after a `feed refresh`) | No | 15 ecosystems of packages, extensions, plugins, providers, images and CI actions with shipped indicators, and tested matchers for more (see [Ecosystem Coverage](#ecosystem-coverage)), plus GitHub repos | Yes (Apache-2.0) | No |
 | [OSV-Scanner](https://github.com/google/osv-scanner) | Known vulnerabilities in dependency inventories (OSV.dev database lookup) | Known-malicious versions via OSV MAL- entries only; no behavior or IOC analysis | Yes (offline mode available) | 11+ ecosystems, 19+ lockfile formats, container images, SBOM input | Yes (Apache-2.0) | No |
 | [Socket](https://socket.dev) | Proactive behavioral analysis of entire registries (SaaS) | Yes: 70+ risk types registry-wide, before advisories exist; engine is closed source and cloud-side | Yes | npm, PyPI, Maven, Go, Cargo, RubyGems, NuGet, more; Actions workflows | CLI only (MIT); detection engine proprietary | Yes (except Firewall Free) |
 | [GuardDog](https://github.com/DataDog/guarddog) | Heuristic 0-10 risk scoring of individual packages (YARA + registry metadata) | Yes: heuristics only, no known-malware or campaign-IOC database; sandboxed scanning | No | npm, PyPI, Go, RubyGems, GitHub Actions, VS Code extensions | Yes (Apache-2.0) | No |
@@ -1001,7 +1001,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: homeofe/supply-chain-guard@v6.4.3
+      - uses: homeofe/supply-chain-guard@v6.5.0
         with:
           fail-on: critical
           comment-on-pr: true
@@ -1089,7 +1089,7 @@ two are never confused. If a deliberately frozen rule set is the intent, exclude
 the rule by name:
 
 ```yaml
-- uses: homeofe/supply-chain-guard@v6.4.3
+- uses: homeofe/supply-chain-guard@v6.5.0
   with:
     exclude-rules: THREAT_FEED_STALE
 ```
@@ -1192,7 +1192,7 @@ preceding `feed refresh` in the workflow does not count. `catalog: required`
 on the Action therefore needs:
 
 ```yaml
-- uses: homeofe/supply-chain-guard@v6.4.3
+- uses: homeofe/supply-chain-guard@v6.5.0
   with:
     refresh-catalog: true
 ```
@@ -1203,7 +1203,7 @@ setting rather than firing on every scan. If scanning against the bundled set
 alone is the intent, exclude the rule by name:
 
 ```yaml
-- uses: homeofe/supply-chain-guard@v6.4.3
+- uses: homeofe/supply-chain-guard@v6.5.0
   with:
     exclude-rules: THREAT_FEED_CATALOG_MISSING
 ```
@@ -1362,8 +1362,8 @@ command exits non-zero, and the previous cache stays in effect.
 ### Where the feed comes from
 
 Curated entries are hand-added from vendor write-ups. Malicious-package entries
-are additionally discovered through two public upstream paths, with no account
-and no API key:
+are additionally discovered through three public upstream sources, with no
+account and no API key:
 
 - **[GitHub Advisory Database](https://github.com/advisories?query=type%3Amalware)** - malware
   advisories (CWE-506), one discovery source. Licensed
@@ -1374,6 +1374,13 @@ and no API key:
   records aggregate origins including ecosystem analysis services and security
   vendors, while retaining the original providers in every imported entry.
   Licensed Apache-2.0.
+- **[DataDog malicious-software-packages-dataset](https://github.com/DataDog/malicious-software-packages-dataset)** -
+  npm and PyPI packages DataDog confirmed as malicious, read in full on every
+  run. Only versions the dataset holds a malware sample for are pinned; a
+  whole-package verdict becomes a name block only when the registry has
+  already removed the package and no other source limits that name to
+  specific versions. Licensed Apache-2.0; every imported entry carries
+  `datadog-malicious-packages` in its `source` field.
 
 OSV querybatch separately corroborates GitHub-discovered packages. It is never
 used to corroborate an OpenSSF-discovered package against the same database.

package/action.yml

@@ -99,7 +99,7 @@ runs:
     - name: Install supply-chain-guard
       shell: bash
       env:
-        SCG_VERSION: "6.4.3"
+        SCG_VERSION: "6.5.0"
         SCG_EXPECTED_REPOSITORY: "homeofe/supply-chain-guard"
         SCG_EXPECTED_REPOSITORY_ID: "1185867580"
         SCG_EXPECTED_WORKFLOW: ".github/workflows/ci.yml"

package/dist/catalog-digest.d.ts

@@ -1,8 +1,8 @@
 export declare const CATALOG_DIGEST: {
-    readonly version: "6.4.3";
-    readonly sha256: "adf29af6e41628a4ff49c37ffa9024510ebf0d6f012143e3047fb19a2d734544";
-    readonly entriesSha256: "e0633c45006564ca06ee62d292c3adc508806f97b48055cc1e00f46e6a34a4e1";
-    readonly entryCount: 92902;
-    readonly shardCount: 2;
+    readonly version: "6.5.0";
+    readonly sha256: "fcb3ab88062edc07fe3f096f735bfe8432e71b79d8f964a53c7447f7dd3f30a1";
+    readonly entriesSha256: "0c2103fb6dee6d717eb008aa0edd54ee4232a1d9e53fbee765e76467709b009f";
+    readonly entryCount: 263681;
+    readonly shardCount: 6;
 };
 //# sourceMappingURL=catalog-digest.d.ts.map

package/dist/catalog-digest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog-digest.d.ts","sourceRoot":"","sources":["../src/catalog-digest.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,cAAc;aACzB,OAAO,EAAE,OAAO;aAChB,MAAM,EAAE,kEAAkE;aAC1E,aAAa,EAAE,kEAAkE;aACjF,UAAU,EAAE,KAAK;aACjB,UAAU,EAAE,CAAC;CACL,CAAC"}
+{"version":3,"file":"catalog-digest.d.ts","sourceRoot":"","sources":["../src/catalog-digest.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,cAAc;aACzB,OAAO,EAAE,OAAO;aAChB,MAAM,EAAE,kEAAkE;aAC1E,aAAa,EAAE,kEAAkE;aACjF,UAAU,EAAE,MAAM;aAClB,UAAU,EAAE,CAAC;CACL,CAAC"}

package/dist/catalog-digest.js

@@ -14,10 +14,10 @@ exports.CATALOG_DIGEST = void 0;
 // read off loadThreatIntel()'s hot path, is typechecked, and supplies the
 // version refreshFeed() needs to build the catalog URL.
 exports.CATALOG_DIGEST = {
-    version: "6.4.3",
-    sha256: "adf29af6e41628a4ff49c37ffa9024510ebf0d6f012143e3047fb19a2d734544",
-    entriesSha256: "e0633c45006564ca06ee62d292c3adc508806f97b48055cc1e00f46e6a34a4e1",
-    entryCount: 92902,
-    shardCount: 2,
+    version: "6.5.0",
+    sha256: "fcb3ab88062edc07fe3f096f735bfe8432e71b79d8f964a53c7447f7dd3f30a1",
+    entriesSha256: "0c2103fb6dee6d717eb008aa0edd54ee4232a1d9e53fbee765e76467709b009f",
+    entryCount: 263681,
+    shardCount: 6,
 };
 //# sourceMappingURL=catalog-digest.js.map

package/dist/catalog-digest.js.map

@@ -1 +1 @@
-{"version":3,"file":"catalog-digest.js","sourceRoot":"","sources":["../src/catalog-digest.ts"],"names":[],"mappings":";;;AAAA,kEAAkE;AAClE,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,0EAA0E;AAC1E,4EAA4E;AAC5E,6EAA6E;AAC7E,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,wDAAwD;AAC3C,QAAA,cAAc,GAAG;IAC5B,OAAO,EAAE,OAAO;IAChB,MAAM,EAAE,kEAAkE;IAC1E,aAAa,EAAE,kEAAkE;IACjF,UAAU,EAAE,KAAK;IACjB,UAAU,EAAE,CAAC;CACL,CAAC"}
+{"version":3,"file":"catalog-digest.js","sourceRoot":"","sources":["../src/catalog-digest.ts"],"names":[],"mappings":";;;AAAA,kEAAkE;AAClE,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,0EAA0E;AAC1E,4EAA4E;AAC5E,6EAA6E;AAC7E,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,wDAAwD;AAC3C,QAAA,cAAc,GAAG;IAC5B,OAAO,EAAE,OAAO;IAChB,MAAM,EAAE,kEAAkE;IAC1E,aAAa,EAAE,kEAAkE;IACjF,UAAU,EAAE,MAAM;IAClB,UAAU,EAAE,CAAC;CACL,CAAC"}

package/dist/cli.js

@@ -198,7 +198,7 @@ function assertDistinctOutputPaths(options) {
 program
     .name("supply-chain-guard")
     .description("Open-source supply-chain security scanner. Detects GlassWorm and similar malware campaigns in npm packages, PyPI packages, code repos, VS Code extensions, and project dependencies.")
-    .version("6.4.3");
+    .version("6.5.0");
 // ── scan command ────────────────────────────────────────────────────
 program
     .command("scan")

package/dist/dependency-confusion.js

@@ -53,7 +53,7 @@ const types_js_1 = require("./types.js");
 const pattern_scanner_js_1 = require("./pattern-scanner.js");
 const json_utils_js_1 = require("./json-utils.js");
 const publishing_anomaly_detector_js_1 = require("./publishing-anomaly-detector.js");
-const TOOL_VERSION = "6.4.3";
+const TOOL_VERSION = "6.5.0";
 const NPM_REGISTRY = "https://registry.npmjs.org";
 const NPM_DOWNLOADS_API = "https://api.npmjs.org/downloads/point/last-week";
 const PYPI_REGISTRY = "https://pypi.org/pypi";

package/dist/npm-scanner.js

@@ -66,7 +66,7 @@ const threat_intel_js_1 = require("./threat-intel.js");
 const install_guard_js_1 = require("./install-guard.js");
 const json_utils_js_1 = require("./json-utils.js");
 const remote_download_js_1 = require("./remote-download.js");
-const TOOL_VERSION = "6.4.3";
+const TOOL_VERSION = "6.5.0";
 const NPM_REGISTRY = "https://registry.npmjs.org";
 const NPM_REGISTRY_HOST = "registry.npmjs.org";
 const RAW_GITHUB_HOST = "raw.githubusercontent.com";

package/dist/pypi-scanner.js

@@ -56,7 +56,7 @@ const patterns_js_1 = require("./patterns.js");
 const pattern_scanner_js_1 = require("./pattern-scanner.js");
 const extracted_file_walker_js_1 = require("./extracted-file-walker.js");
 const remote_download_js_1 = require("./remote-download.js");
-const TOOL_VERSION = "6.4.3";
+const TOOL_VERSION = "6.5.0";
 const PYPI_API = "https://pypi.org/pypi";
 const PYPI_METADATA_HOST = "pypi.org";
 const PYPI_ARTIFACT_HOST = "files.pythonhosted.org";

package/dist/reporter.js

@@ -294,7 +294,7 @@ function formatJson(report) {
 function formatText(report, options = {}) {
     const lines = [];
     // ── layout constants ───────────────────────────────────────────────────────
-    const VERSION = "6.4.3";
+    const VERSION = "6.5.0";
     const W = 76; // visible chars between "│ " and " │" (total line = 80)
     // ── ANSI helpers ───────────────────────────────────────────────────────────
     const stripAnsi = (s) => s.replace(/\x1b\[[0-9;]*m/g, "");
@@ -739,7 +739,7 @@ function formatMarkdown(report) {
     lines.push("");
     lines.push(`| Property | Value |`);
     lines.push(`|----------|-------|`);
-    lines.push(`| Tool | \`${mdCell(report.tool || "supply-chain-guard v6.4.3")}\` |`);
+    lines.push(`| Tool | \`${mdCell(report.tool || "supply-chain-guard v6.5.0")}\` |`);
     lines.push(`| Target | \`${mdCell(report.target)}\` |`);
     lines.push(`| Type | ${mdText(report.scanType)} |`);
     lines.push(`| Time | ${mdText(report.timestamp)} |`);
@@ -993,7 +993,7 @@ function formatSarif(report) {
                 tool: {
                     driver: {
                         name: "supply-chain-guard",
-                        version: "6.4.3",
+                        version: "6.5.0",
                         informationUri: "https://github.com/homeofe/supply-chain-guard",
                         rules,
                     },
@@ -1217,7 +1217,7 @@ function formatSbom(report) {
                     ...(properties.length > 0 ? { properties } : {}),
                 }];
         });
-        const annotations = buildIncidentAnnotations(report.incidents, subjectsByIncident, metadata.timestamp, metadata.tools.components[0]?.version ?? "6.4.3");
+        const annotations = buildIncidentAnnotations(report.incidents, subjectsByIncident, metadata.timestamp, metadata.tools.components[0]?.version ?? "6.5.0");
         const withVulns = {
             ...document,
             metadata: {
@@ -1266,7 +1266,7 @@ function formatSbom(report) {
             ...(properties.length > 0 ? { properties } : {}),
         };
     });
-    const fallbackAnnotations = buildIncidentAnnotations(report.incidents, fallbackSubjectsByIncident, report.timestamp, "6.4.3");
+    const fallbackAnnotations = buildIncidentAnnotations(report.incidents, fallbackSubjectsByIncident, report.timestamp, "6.5.0");
     const sbom = {
         bomFormat: "CycloneDX",
         specVersion: "1.6",
@@ -1276,7 +1276,7 @@ function formatSbom(report) {
             timestamp: report.timestamp,
             tools: {
                 components: [
-                    { type: "application", name: "supply-chain-guard", version: "6.4.3" },
+                    { type: "application", name: "supply-chain-guard", version: "6.5.0" },
                 ],
             },
             component: {
@@ -1352,8 +1352,8 @@ function formatBadge(report) {
         label: "supply-chain-guard",
         message,
         color,
-        tool: report.tool || "supply-chain-guard v6.4.3",
-        version: report.tool ? (report.tool.includes("@") ? report.tool.split("@")[1] : report.tool.replace(/^supply-chain-guard v?/, "")) : "6.4.3",
+        tool: report.tool || "supply-chain-guard v6.5.0",
+        version: report.tool ? (report.tool.includes("@") ? report.tool.split("@")[1] : report.tool.replace(/^supply-chain-guard v?/, "")) : "6.5.0",
         timestamp: report.timestamp,
         commit: report.commit ?? "none",
         detectionSet: report.detectionSet,
@@ -1409,7 +1409,7 @@ function formatGitlab(report) {
         name: "supply-chain-guard",
         url: "https://github.com/homeofe/supply-chain-guard",
         vendor: { name: "supply-chain-guard" },
-        version: "6.4.3",
+        version: "6.5.0",
     };
     const vulnerabilities = report.findings
         .filter((f) => !f.suppressed)
@@ -1534,7 +1534,7 @@ function formatJunit(report) {
     // (unreleased, issue 205): the coverage properties are ALWAYS emitted, so a JUnit
     // artefact states its own denominator instead of only what was found.
     lines.push("  <properties>");
-    lines.push(`    <property name="supply-chain-guard:tool-version" value="${xmlEscape(report.tool || "supply-chain-guard v6.4.3")}"/>`);
+    lines.push(`    <property name="supply-chain-guard:tool-version" value="${xmlEscape(report.tool || "supply-chain-guard v6.5.0")}"/>`);
     lines.push(`    <property name="supply-chain-guard:timestamp" value="${xmlEscape(report.timestamp)}"/>`);
     lines.push(`    <property name="supply-chain-guard:commit" value="${xmlEscape(report.commit ?? "none (not a git repository)")}"/>`);
     if (report.detectionSet) {
@@ -1664,7 +1664,7 @@ footer{text-align:center;padding:24px;color:#94a3b8;font-size:13px}
 <body>
 <div class="container">
   <header>
-    <h1>${escapeHtml(report.tool || "supply-chain-guard v6.4.3")} Scan Report</h1>
+    <h1>${escapeHtml(report.tool || "supply-chain-guard v6.5.0")} Scan Report</h1>
     <div class="meta">
       <span>Target: ${escapeHtml(report.target)}</span>
       <span>Type: ${report.scanType}</span>
@@ -1726,7 +1726,7 @@ footer{text-align:center;padding:24px;color:#94a3b8;font-size:13px}
   ` : ""}
 
   <footer>
-    Generated by <a href="https://github.com/homeofe/supply-chain-guard">${escapeHtml(report.tool || "supply-chain-guard v6.4.3")}</a>
+    Generated by <a href="https://github.com/homeofe/supply-chain-guard">${escapeHtml(report.tool || "supply-chain-guard v6.5.0")}</a>
   </footer>
 </div>
 <script>

package/dist/sbom-generator.js

@@ -87,7 +87,7 @@ const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
 const node_crypto_1 = require("node:crypto");
 const json_utils_js_1 = require("./json-utils.js");
-const TOOL_VERSION = "6.4.3";
+const TOOL_VERSION = "6.5.0";
 /** bom-ref of the component the document is about. */
 const SUBJECT_BOM_REF = "target";
 /** Property namespace, matching the `supply-chain-guard:scan-status` property reporter.ts adds. */

package/dist/scanner.js

@@ -114,7 +114,7 @@ const mcp_scanner_js_1 = require("./mcp-scanner.js");
 const skills_scanner_js_1 = require("./skills-scanner.js");
 const disguised_asset_js_1 = require("./disguised-asset.js");
 const self_scan_trust_js_1 = require("./self-scan-trust.js");
-const TOOL_VERSION = "6.4.3";
+const TOOL_VERSION = "6.5.0";
 /**
  * Pattern literals in this matcher module deliberately spell out signatures
  * that the public scanner detects. Suppress only those exact rule definitions

package/dist/threat-intel.d.ts

@@ -24,7 +24,7 @@ export type FeedIOCInput = Omit<FeedIOC, "confidence"> & {
  * Generation timestamp for the bundled IOC feed (v5.29, issue #208).
  * Pure function of feed updates; preserved across builds.
  */
-export declare const FEED_GENERATED_AT = "2026-10-04T00:00:00.000Z";
+export declare const FEED_GENERATED_AT = "2026-10-05T00:00:00.000Z";
 export declare const CACHE_DIR = ".scg-cache";
 export declare const FEED_CACHE_FILE = "threat-feed.json";
 /** Where the downloaded catalog is cached, beside the feed cache. */
@@ -208,15 +208,16 @@ export declare function updateThreatFeed(feedUrl: string, cacheDir?: string, lim
  * deviation -> file is scanned like everything else.
  */
 export declare function isInertThreatFeedFile(filename: string, content: string): boolean;
-/** Basename of the committed catalog store. */
-export declare const CATALOG_FILE = "threat-catalog.jsonl";
+/** Directory of the committed catalog store (scripts/catalog-store.mjs). */
+export declare const CATALOG_DIR = "data/threat-catalog";
 /**
- * Exact repository-relative path of the catalog store. The exemption is bound
- * to this path, not merely to the basename: a basename match would let ANY
- * scanned repository place a file with this name at any depth and have it
- * skipped, which is an evasion primitive rather than a convenience.
+ * Exact repository-relative shape of one catalog part. The exemption is bound
+ * to this anchored path, not merely to a basename: a basename match would let
+ * ANY scanned repository place a file with this name at any depth and have it
+ * skipped, which is an evasion primitive rather than a convenience. The store
+ * was one file, data/threat-catalog.jsonl, until it grew past 40 MB.
  */
-export declare const CATALOG_RELATIVE_PATH = "data/threat-catalog.jsonl";
+export declare const CATALOG_PART_PATH: RegExp;
 /**
  * Structural check: is this file supply-chain-guard's own catalog store?
  *

package/dist/threat-intel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"threat-intel.d.ts","sourceRoot":"","sources":["../src/threat-intel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,OAAO,KAAK,EAAE,OAAO,EAAqB,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAMrF,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,+EAA+E;AAC/E,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,6BAA6B,CAAC;AAgrJ5D,eAAO,MAAM,SAAS,eAAe,CAAC;AACtC,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAElD,qEAAqE;AACrE,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,MAAM,wBAAwB,GAChC,QAAQ,GACR,YAAY,GACZ,kBAAkB,GAClB,iBAAiB,GACjB,SAAS,CAAC;AAEd,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,oDAAoD;IACpD,SAAS,EAAE,OAAO,CAAC;IACnB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAeD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,kBAAkB;;;;EAI7B,CAAC;AAEH,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,IAAI,OAAO,EAAE,CAE1C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,iBAAiB,IAAI,SAAS,OAAO,EAAE,CAEtD;AAeD,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,oDAAoD;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,KAAK,EAAE,OAAO,CAAC;IACf,0EAA0E;IAC1E,UAAU,EAAE,OAAO,CAAC;IACpB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAmBD;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,CAE/C;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,CAElD;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,CAAC,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,EAAE,CAwKX;AAqDD;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,EACjB,cAAc,GAAE,kBAAuB,GACtC,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAqC3C;AAiCD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CA6BhF;AAED,+CAA+C;AAC/C,eAAO,MAAM,YAAY,yBAAyB,CAAC;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,8BAA8B,CAAC;AAEjE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CA+BnF;AAsID;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAgDpE;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAa7D;AASD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,OAAO,EAAE,GACd,OAAO,EAAE,CAiEX;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,OAAO,EAAE,GACf,OAAO,GAAG,IAAI,CAuBhB;AAuDD;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC,EAAE,WAAW,CAAC,MAAM,CASlE,CAAC;AAEH;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAM/C;AAwDD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,CAAC,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,YAAY,GAC1B,sBAAsB,CAiCxB"}
+{"version":3,"file":"threat-intel.d.ts","sourceRoot":"","sources":["../src/threat-intel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,OAAO,KAAK,EAAE,OAAO,EAAqB,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAMrF,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,+EAA+E;AAC/E,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,6BAA6B,CAAC;AAk3P5D,eAAO,MAAM,SAAS,eAAe,CAAC;AACtC,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAElD,qEAAqE;AACrE,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,MAAM,wBAAwB,GAChC,QAAQ,GACR,YAAY,GACZ,kBAAkB,GAClB,iBAAiB,GACjB,SAAS,CAAC;AAEd,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,oDAAoD;IACpD,SAAS,EAAE,OAAO,CAAC;IACnB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAeD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,kBAAkB;;;;EAI7B,CAAC;AAEH,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,IAAI,OAAO,EAAE,CAE1C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,iBAAiB,IAAI,SAAS,OAAO,EAAE,CAEtD;AAeD,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,oDAAoD;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,KAAK,EAAE,OAAO,CAAC;IACf,0EAA0E;IAC1E,UAAU,EAAE,OAAO,CAAC;IACpB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAmBD;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,CAE/C;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,CAElD;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,CAAC,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,EAAE,CAwKX;AAqDD;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,EACjB,cAAc,GAAE,kBAAuB,GACtC,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAqC3C;AAiCD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CA6BhF;AAED,4EAA4E;AAC5E,eAAO,MAAM,WAAW,wBAAwB,CAAC;AAEjD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,QAA8C,CAAC;AAE7E;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CA+BnF;AA2ID;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAgDpE;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAa7D;AASD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,OAAO,EAAE,GACd,OAAO,EAAE,CAiEX;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,OAAO,EAAE,GACf,OAAO,GAAG,IAAI,CAuBhB;AAuDD;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC,EAAE,WAAW,CAAC,MAAM,CASlE,CAAC;AAEH;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAM/C;AAwDD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,CAAC,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,YAAY,GAC1B,sBAAsB,CAiCxB"}