muaddib-scanner@2.11.168: Clean npm security report (Allow)

Loading npm security reports…

muaddib-scanner@2.11.168: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

17 flagged

src/integrations/canary-tokens.jsView file

Lines 138-178javascript

138 */

139function createCanaryAwsCredentials(tokens) {

140 return [

141 '[default]',

142 `aws_access_key_id = ${tokens.AWS_ACCESS_KEY_ID}`,

143 `aws_secret_access_key = ${tokens.AWS_SECRET_ACCESS_KEY}`,

144 'region = us-east-1',

145 ''

146 ].join('\n');

147}

148

149/**

150 * Generate a fake SSH private key (Ed25519 format).

151 * The key is structurally valid PEM but cryptographically meaningless.

152 * Malware that reads ~/.ssh/id_rsa or id_ed25519 will exfiltrate this.

153 * @returns {string} Fake SSH private key content

154 */

155function createCanarySshKey() {

156 const fakeKeyData = crypto.randomBytes(64).toString('base64');

157 return [

158 '-----BEGIN OPENSSH PRIVATE KEY-----',

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/integrations/canary-tokens.jsView on unpkg · L158

159 fakeKeyData.substring(0, 70),

160 fakeKeyData.substring(0, 70),

161 '-----END OPENSSH PRIVATE KEY-----',

162 ''

163 ].join('\n');

164}

165

166/**

167 * Generate a fake .gitconfig with user identity.

168 * Malware fingerprinting the developer will exfiltrate this.

169 * @returns {string} Fake .gitconfig content

170 */

171function createCanaryGitconfig() {

172 return [

173 '[user]',

174 '\tname = John Developer',

175 '\temail = john.dev@company-internal.example.com',

176 '[credential]',

177 '\thelper = store',

178 ''

158patternName = private_key_openssh severity = critical line = 158 matchedText = '-----BE...--',

Critical

Secret Pattern

OpenSSH private key in src/integrations/canary-tokens.js

src/integrations/canary-tokens.jsView on unpkg · L158

bin/muaddib.jsView file

Lines 5-45javascript

5 *

6 * This program is free software: you can redistribute it and/or modify

7 * it under the terms of the GNU Affero General Public License version 3,

8 * as published

src/response/playbooks.jsView file

Lines 1-34javascript

1/*

2 * MUAD'DIB — Supply-chain threat detection for npm & PyPI

4 *

5 * This program is free software: you can redistribute it and/or modify

6 * it under the terms of the GNU Affero General Public License version 3,

7 * as published by the Free Software Foundation.

8 *

9 * This program is distributed in the hope that it will be useful,

10 * but WITHOUT ANY WARRANTY; without even the implied warranty of

src/scoring.jsView file

Lines 420-460javascript

420 // as part of their core functionality. Lowered from 10→5 for env_access count threshold.

421 // The B5 network_sink_immunity above protects genuine exfiltration scenarios.

422 sensitive_string: { maxCount: 5, to: 'LOW' },

423 // Audit v3 B3: Template engines (htmx, marko) with many staged_payload hits are using

424 // fetch+eval for dynamic content loading, not payload staging. fetch_decrypt_exec (triple

src/rules/index.jsView file

Lines 1-34javascript

1/*

2 * MUAD'DIB — Supply-chain threat detection for npm & PyPI

4 *

5 * This program is free software: you can redistribute it and/or modify

6 * it under the terms of the GNU Affero General Public License version 3,

7 * as published by the Free Software Foundation.

8 *

9 * This program is distributed in the hope that it will be useful,

10 * but WITHOUT ANY WARRANTY; without even the implied warranty of

src/vendor/tree-sitter-python.wasmView file

•path = src/vendor/tree-sitter-python.wasm kind = wasm_module sizeBytes = 459862 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/vendor/tree-sitter-python.wasmView on unpkg

src/sandbox/index.jsView file

207patternName = github_pat severity = critical line = 207 matchedText = GITHUB_T...gK',

Critical

Secret Pattern

GitHub personal access token in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L207

208patternName = npm_token severity = critical line = 208 matchedText = NPM_TOKE...5e',

Critical

Secret Pattern

npm access token in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L208

209patternName = aws_access_key severity = critical line = 209 matchedText = AWS_ACCE...Q3',

Critical

Secret Pattern

AWS access key ID in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L209

src/scanner/ast-detectors/anti-evasion.jsView file

55patternName = aws_access_key severity = critical line = 55 matchedText = // (AKIA...able

Critical

Secret Pattern

AWS access key ID in src/scanner/ast-detectors/anti-evasion.js

src/scanner/ast-detectors/anti-evasion.jsView on unpkg · L55

Source & flagged code

17 flagged · loading source

src/integrations/canary-tokens.jsView file

158patternName = private_key_openssh severity = critical line = 158 matchedText = '-----BE...--',

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/integrations/canary-tokens.jsView on unpkg · L158

158patternName = private_key_openssh severity = critical line = 158 matchedText = '-----BE...--',

Critical

Secret Pattern

OpenSSH private key in src/integrations/canary-tokens.js

src/integrations/canary-tokens.jsView on unpkg · L158

bin/muaddib.jsView file

25if (!hasMaxOld || !hasGC) { L26: const { execFileSync } = require('child_process'); L27: const flags = [];

High

Child Process

Package source references child process execution.

bin/muaddib.jsView on unpkg · L25

15Cross-file remote execution chain: bin/muaddib.js spawns src/rules/index.js; helper contains network access plus dynamic code execution. L15: * You should have received a copy of the GNU Affero General Public License L16: * along with this program. If not, see <https://www.gnu.org/licenses/>. L17: * ... L22: if (process.argv[2] === 'evaluate') { L23: const hasMaxOld = process.execArgv.some(a => a.includes('--max-old-space-size')); L24: const hasGC = process.execArgv.some(a => a === '--expose-gc'); ... L32: stdio: 'inherit', L33: env: process.env L34: }); ... L47: const { loadDotEnv } = require('../src/env-loader.js'); L48: loadDotEnv(require('path').join(__dirname, '..', '.env')); L49: } catch { /* non-fatal: .env is optional */ }

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/muaddib.jsView on unpkg · L15

25if (!hasMaxOld || !hasGC) { L26: const { execFileSync } = require('child_process'); L27: const flags = [];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/muaddib.jsView on unpkg · L25

src/response/playbooks.jsView file

14* You should have received a copy of the GNU Affero General Public License L15: * along with this program. If not, see <https://www.gnu.org/licenses/>. L16: * ... L32: L33: child_process: L34: 'Execution de commandes systeme. Verifier quelles commandes sont lancees.', ... L50: L51: base64_encoding: L52: 'Encodage base64 detecte. Souvent utilise pour obfusquer du code malveillant.', ... L96: env_proxy_intercept: L97: 'CRITIQUE: new Proxy(process.env) intercepte tous les acces aux variables d\'environnement. Technique d\'exfiltration silencieuse. Isoler la machine, regenerer tous les secrets.', L98:

Critical

Npm Publish Worm

Source mutates package metadata and republishes itself to npm.

src/response/playbooks.jsView on unpkg · L14

251sh_c_curl_exec: L252: 'sh -c wrapping autour de curl detecte. Technique d\'evasion pour masquer l\'execution de commandes distantes. Analyser le contenu telecharge.', L253:

High

Shell

Package source references shell execution.

src/response/playbooks.jsView on unpkg · L251

src/scoring.jsView file

440'cross_file_dataflow', // credential read → network exfil across files L441: 'staged_eval_decode', // eval(atob(...)) (explicit payload staging) L442: 'reverse_shell', // net.Socket + connect + pipe (always malicious)

High

Eval

Package source references dynamic code evaluation.

src/scoring.jsView on unpkg · L440

src/rules/index.jsView file

14* You should have received a copy of the GNU Affero General Public License L15: * along with this program. If not, see <https://www.gnu.org/licenses/>. L16: * ... L109: domain: 'vulnerability', L110: description: 'Utilisation de eval() ou new Function() - execution de code dynamique', L111: references: [ ... L161: domain: 'malware', L162: description: 'Script preinstall/postinstall suspect dans package.json', L163: references: [ ... L316: }, L317: import_time_base64_exec: { L318: id: 'MUADDIB-PYSRC-005',

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

src/rules/index.jsView on unpkg · L14

14Trigger-reachable chain: manifest.main -> src/index.js -> src/scoring.js -> src/rules/index.js L14: * You should have received a copy of the GNU Affero General Public License L15: * along with this program. If not, see <https://www.gnu.org/licenses/>. L16: * ... L109: domain: 'vulnerability', L110: description: 'Utilisation de eval() ou new Function() - execution de code dynamique', L111: references: [ ... L161: domain: 'malware', L162: description: 'Script preinstall/postinstall suspect dans package.json', L163: references: [ ... L316: }, L317: import_time_base64_exec: { L318: id: 'MUADDIB-PYSRC-005',

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/rules/index.jsView on unpkg · L14

src/vendor/tree-sitter-python.wasmView file

•path = src/vendor/tree-sitter-python.wasm kind = wasm_module sizeBytes = 459862 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/vendor/tree-sitter-python.wasmView on unpkg

src/sandbox/index.jsView file

207patternName = github_pat severity = critical line = 207 matchedText = GITHUB_T...gK',

Critical

Secret Pattern

GitHub personal access token in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L207

208patternName = npm_token severity = critical line = 208 matchedText = NPM_TOKE...5e',

Critical

Secret Pattern

npm access token in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L208

209patternName = aws_access_key severity = critical line = 209 matchedText = AWS_ACCE...Q3',

Critical

Secret Pattern

AWS access key ID in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L209

src/scanner/ast-detectors/anti-evasion.jsView file

55patternName = aws_access_key severity = critical line = 55 matchedText = // (AKIA...able

Critical

Secret Pattern

AWS access key ID in src/scanner/ast-detectors/anti-evasion.js

src/scanner/ast-detectors/anti-evasion.jsView on unpkg · L55

Source & flagged code

17 flagged

src/integrations/canary-tokens.jsView file

Lines 138-178javascript

138 */

139function createCanaryAwsCredentials(tokens) {

140 return [

141 '[default]',

142 `aws_access_key_id = ${tokens.AWS_ACCESS_KEY_ID}`,

143 `aws_secret_access_key = ${tokens.AWS_SECRET_ACCESS_KEY}`,

144 'region = us-east-1',

145 ''

146 ].join('\n');

147}

148

149/**

150 * Generate a fake SSH private key (Ed25519 format).

151 * The key is structurally valid PEM but cryptographically meaningless.

152 * Malware that reads ~/.ssh/id_rsa or id_ed25519 will exfiltrate this.

153 * @returns {string} Fake SSH private key content

154 */

155function createCanarySshKey() {

156 const fakeKeyData = crypto.randomBytes(64).toString('base64');

157 return [

158 '-----BEGIN OPENSSH PRIVATE KEY-----',

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/integrations/canary-tokens.jsView on unpkg · L158

159 fakeKeyData.substring(0, 70),

160 fakeKeyData.substring(0, 70),

161 '-----END OPENSSH PRIVATE KEY-----',

162 ''

163 ].join('\n');

164}

165

166/**

167 * Generate a fake .gitconfig with user identity.

168 * Malware fingerprinting the developer will exfiltrate this.

169 * @returns {string} Fake .gitconfig content

170 */

171function createCanaryGitconfig() {

172 return [

173 '[user]',

174 '\tname = John Developer',

175 '\temail = john.dev@company-internal.example.com',

176 '[credential]',

177 '\thelper = store',

178 ''

158patternName = private_key_openssh severity = critical line = 158 matchedText = '-----BE...--',

Critical

Secret Pattern

OpenSSH private key in src/integrations/canary-tokens.js

src/integrations/canary-tokens.jsView on unpkg · L158

bin/muaddib.jsView file

Lines 5-45javascript

5 *

6 * This program is free software: you can redistribute it and/or modify

7 * it under the terms of the GNU Affero General Public License version 3,

8 * as published

src/response/playbooks.jsView file

Lines 1-34javascript

1/*

2 * MUAD'DIB — Supply-chain threat detection for npm & PyPI

4 *

5 * This program is free software: you can redistribute it and/or modify

6 * it under the terms of the GNU Affero General Public License version 3,

7 * as published by the Free Software Foundation.

8 *

9 * This program is distributed in the hope that it will be useful,

10 * but WITHOUT ANY WARRANTY; without even the implied warranty of

src/scoring.jsView file

Lines 420-460javascript

420 // as part of their core functionality. Lowered from 10→5 for env_access count threshold.

421 // The B5 network_sink_immunity above protects genuine exfiltration scenarios.

422 sensitive_string: { maxCount: 5, to: 'LOW' },

423 // Audit v3 B3: Template engines (htmx, marko) with many staged_payload hits are using

424 // fetch+eval for dynamic content loading, not payload staging. fetch_decrypt_exec (triple

src/rules/index.jsView file

Lines 1-34javascript

1/*

2 * MUAD'DIB — Supply-chain threat detection for npm & PyPI

4 *

5 * This program is free software: you can redistribute it and/or modify

6 * it under the terms of the GNU Affero General Public License version 3,

7 * as published by the Free Software Foundation.

8 *

9 * This program is distributed in the hope that it will be useful,

10 * but WITHOUT ANY WARRANTY; without even the implied warranty of

src/vendor/tree-sitter-python.wasmView file

•path = src/vendor/tree-sitter-python.wasm kind = wasm_module sizeBytes = 459862 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/vendor/tree-sitter-python.wasmView on unpkg

src/sandbox/index.jsView file

207patternName = github_pat severity = critical line = 207 matchedText = GITHUB_T...gK',

Critical

Secret Pattern

GitHub personal access token in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L207

208patternName = npm_token severity = critical line = 208 matchedText = NPM_TOKE...5e',

Critical

Secret Pattern

npm access token in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L208

209patternName = aws_access_key severity = critical line = 209 matchedText = AWS_ACCE...Q3',

Critical

Secret Pattern

AWS access key ID in src/sandbox/index.js

src/sandbox/index.jsView on unpkg · L209

src/scanner/ast-detectors/anti-evasion.jsView file

55patternName = aws_access_key severity = critical line = 55 matchedText = // (AKIA...able

Critical

Secret Pattern

AWS access key ID in src/scanner/ast-detectors/anti-evasion.js

src/scanner/ast-detectors/anti-evasion.jsView on unpkg · L55

Lines 231-271javascript

231 perl_reverse_shell:

232 'CRITIQUE: Reverse shell Perl detecte. Machine potentiellement compromise. Isoler immediatement.',

233 fifo_reverse_shell:

234 'CRITIQUE: Reverse shell FIFO/named pipe detecte. Machine potentiellement compromise. Isoler immediatement.',

235

236 fifo_nc_reverse_shell:

237 'CRITIQUE: Reverse shell via mkfifo + netcat detecte. Machine potentiellement compromise. Isoler immediatement. Verifier les connexions sortantes actives.',

238

239 base64_decode_exec:

240 'CRITIQUE: Payload encode en base64 pipe vers un shell. Decoder le payload pour analyse: echo "<payload>" | base64 -d. Isoler la machine si deja execute.',

241

242 wget_base64_decode:

243 'Telechargement + decodage base64 detecte. Verifier l\'URL de telechargement et decoder le contenu. Pattern de staging malveillant en deux etapes.',

244

245 curl_ifs_evasion:

246 'CRITIQUE: Evasion IFS detectee — curl$IFS ou curl${IFS} pipe vers shell. Technique d\'evasion pour contourner la detection de "curl|sh". Ne pas installer.',

247

248 eval_curl_subshell:

249 'CRITIQUE: eval $(curl ...) detecte. Telecharge et execute du code distant via command substitution. Ne pas installer.',

250

251 sh_c_curl_exec:

252 'sh -c wrapping autour de curl detecte. Technique d\'evasion pour masquer l\'execution de commandes distantes. Analyser le contenu telecharge.',

253

High

Shell

Package source references shell execution.

src/response/playbooks.jsView on unpkg · L251

254 python_time_delay_exec:

255 'ELEVE: Execution Python avec delai time.sleep() important detectee. ' +

256 'Technique d\'evasion sandbox (T1497.003) : le malware attend l\'expiration du timeout sandbox avant d\'executer le payload. ' +

257 'Verifier le code Python execute et les connexions reseau post-delai.',

258

259 shai_hulud_backdoor:

260 'CRITIQUE: Backdoor Shai-Hulud dans GitHub Actions. Supprimer le workflow et auditer les runs precedents.',

261

262 workflow_injection:

263 'Injection potentielle dans GitHub Actions via input non sanitise sur self-hosted runner. Supprimer ou corriger le workflow.',

264

265 workflow_pwn_request:

266 'CRITIQUE: Pwn request detecte — pull_request_target avec checkout du head de la PR permet l\'execution de code arbitraire. Remplacer par pull_request ou utiliser une strategie de checkout securisee (base ref uniquement).',

267

268 workflow_secrets_dump:

269 'CRITIQUE: Workflow GitHub Actions utilise toJSON(secrets) pour dumper tous les secrets du repository. ' +

270 'Technique Shai-Hulud (TeamPCP). Supprimer le workflow immediatement. ' +

271 'Si le workflow a ete execute, considerer tous les secrets du repository compromis et les regenerer.',

muaddib-scanner@2.11.168

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code