Repository navigation

feature: Malicious packages scanner [TAROT-3600] - #175

Merged

afsmeira merged 31 commits into

masterfrom

kpc-malware-scanner

Nov 28, 2025

Merged

feature: Malicious packages scanner [TAROT-3600]#175
afsmeira merged 31 commits into
masterfrom
kpc-malware-scanner

Commits on Nov 26, 2025
- openssf malicious packages integration
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  8ce1953
- updated test to match new live CVE
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  74218c6
- revised malicious package detection to prebuild an index nightly so as to accelerate scanning.
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  d314bc6
- fixed build - tool wasn't scanning for package.json -- added test for package-lock.json also
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  b01f785
- merged main, added Dockerfile
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  ba074fc
- resolved codacy warnings
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  c7e814b
- fixed codacy cyclo issue
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  4ee5970
- fixed AI nonsense
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  f84915d
- fixed CICD -- necessary file wasn't being copied
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  e11d8a7
- fixed another CICD issue
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  f41a50a
- bugfix in tool.go to live with nil PURLs and fixed absent line number reporting in openssf scanner
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  dfe1f8f
- stopped copying unnecessary files
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  45da0ab
- fixed test data
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  d2d5356
- test fixes
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  a4efa1c
- ignored codacy config
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  83b035a
- review comments tackled
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  4082165
- fixed stupid ai shit - npm ref in gradle file
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  649f440
- fixed missing vuln
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  76cf210
- Delete .codacy/cli.sh
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  1385e2b
- Delete .codacy/codacy.yaml
  
  kendrickcurtis
  authored and
  afsmeira
  committed
  1234196
- clean: Assorted cleanup after rebase
  afsmeira
  committed
  438d8ef
- clean: Improve build process for OpenSSF malicious packages index
  afsmeira
  committed
  0401b2a
- clean: Simplify and correct malicious packages scanner implementation
  afsmeira
  committed
  ef99b5d
- clean: Ensure proper dependency injection for testable code
  afsmeira
  committed
  76f19a4
- clean: Address codacy comments
  afsmeira
  committed
  d6f2a33
Commits on Nov 27, 2025
- tests: Add unit tests and fix faulty implementations
  afsmeira
  committed
  d6fb292
- ci: Serialize steps to avoid problems when saving to workspace
  afsmeira
  committed
  df03b28
- tests: Fix integration tests
  afsmeira
  committed
  b96b28d
- clean: Log when failing to open file when building index
  afsmeira
  committed
  dd6bd7c
- clean: Address AI review comments
  afsmeira
  committed
  852dd65
- feat: Support the `last_affected` field in range events
  afsmeira
  committed
  194cdf1

Commits

Commits on Nov 26, 2025

Commits on Nov 27, 2025