zsp/everything-claude-code
1
0
Fork 0
mirror of https://github.com/affaan-m/everything-claude-code.git synced 2026-05-16 05:43:05 +08:00
Code Issues Packages Projects Releases Wiki Activity

security: add node-ipc IOC coverage (#1924)

Browse Source
This commit is contained in:
Affaan Mustafa
2026-05-15 06:56:57 -04:00
committed by GitHub
parent 5b9acd1d92
commit ee85e1482e
4 changed files with 149 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
tests/ci/scan-supply-chain-iocs.test.js
View File

@@ -104,6 +104,41 @@ function run() {
});
})) passed++; else failed++;
if (test('rejects node-ipc campaign package versions and CJS indicators', () => {
withFixture({
'package-lock.json': JSON.stringify({
packages: {
'node_modules/node-ipc': {
version: '12.0.1',
},
},
}, null, 2),
'node_modules/node-ipc/package.json': JSON.stringify({
name: 'node-ipc',
version: '9.2.3',
}, null, 2),
'node_modules/node-ipc/node-ipc.cjs': [
'const host = "sh.azurestaticprovider.net";',
'const zone = "bt.node.js";',
'process.env.__ntw = "1";',
'module.exports.__ntRun = true;',
'const archive = "/nt-/sample.tar.gz";',
'const entries = ["uname.txt", "envs.txt", "fixtures/_paths.txt"];',
].join('\n'),
}, rootDir => {
const result = scanSupplyChainIocs({ rootDir });
const indicators = result.findings.map(finding => finding.indicator);
assert.ok(indicators.includes('node-ipc@12.0.1'));
assert.ok(indicators.includes('node-ipc@9.2.3'));
assert.ok(indicators.includes('sh.azurestaticprovider.net'));
assert.ok(indicators.includes('bt.node.js'));
assert.ok(indicators.includes('__ntw'));
assert.ok(indicators.includes('__ntRun'));
assert.ok(indicators.includes('/nt-'));
assert.ok(indicators.includes('fixtures/_paths.txt'));
});
})) passed++; else failed++;
if (test('passes clean versions of watched packages', () => {
withFixture({
'package-lock.json': JSON.stringify({