milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 20:20:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge branch 'main' into package-min-age

Browse source
This commit is contained in:
Sander Declerck 2025-11-12 14:42:19 +01:00
commit 3b905d490b
No known key found for this signature in database
33 changed files with 407 additions and 970 deletions
Download patch file Download diff file Expand all files Collapse all files

22
packages/safe-chain/src/registryProxy/interceptors/npm/npmInterceptor.js
View file

@ -1,9 +1,7 @@
import chalk from "chalk";
import { getMinimumPackageAgeHours } from "../../../config/settings.js";
import { isMalwarePackage } from "../../../scanning/audit/index.js";
import { createInterceptorBuilder } from "../interceptorBuilder.js";
import { interceptRequests } from "../interceptorBuilder.js";
import { ui } from "../../../environment/userInteraction.js";
import { writeFileSync } from "node:fs";
const knownJsRegistries = ["registry.npmjs.org", "registry.yarnpkg.com"];
@ -23,22 +21,20 @@ export function npmInterceptorForUrl(url) {
/**
* @param {string} registry
* @returns {import("../interceptorBuilder.js").Interceptor | undefined}
* @returns {import("../interceptorBuilder.js").Interceptor}
*/
function buildNpmInterceptor(registry) {
const builder = createInterceptorBuilder();
builder.onRequest(async (req) => {
return interceptRequests(async (reqContext) => {
const { packageName, version } = parseNpmPackageUrl(
req.targetUrl,
reqContext.targetUrl,
registry
);
if (await isMalwarePackage(packageName, version)) {
req.blockMalware(packageName, version, req.targetUrl);
reqContext.blockMalware(packageName, version);
}
if (isPackageInfoUrl(req.targetUrl)) {
req.modifyRequestHeaders((headers) => {
if (isPackageInfoUrl(reqContext.targetUrl)) {
reqContext.modifyRequestHeaders((headers) => {
if (
headers["accept"]?.includes("application/vnd.npm.install-v1+json")
) {
@ -49,13 +45,11 @@ function buildNpmInterceptor(registry) {
}
});
req.modifyResponse((res) => {
reqContext.modifyResponse((res) => {
res.modifyBody(modifyNpmInfoRequestBody);
});
}
});
return builder.build();
}
/**