Merge pull request #144 from AikidoSec/only-write-stdout-when-safe-chain-audited

Add interceptors for MITM

packages/safe-chain/src/scanning/audit/index.js

@@ -41,6 +41,22 @@ export function getAuditStats() {
   return auditStats;
 }
 
+/**
+ *
+ * @param {string | undefined} name
+ * @param {string | undefined} version
+ * @returns {Promise<boolean>}
+ */
+export async function isMalwarePackage(name, version) {
+  if (!name || !version) {
+    return false;
+  }
+
+  const auditResult = await auditChanges([{ name, version, type: "add" }]);
+
+  return !auditResult.isAllowed;
+}
+
 /**
  * @param {PackageChange[]} changes
  *