milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Listen to blocks with reason new_package

Browse source
This commit is contained in:
Sander Declerck 2026-05-05 13:10:42 +02:00
parent 6442c4cf53
commit f2479ad866
No known key found for this signature in database
2 changed files with 17 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

24
packages/safe-chain/src/registryProxy/ramaProxy/createRamaProxy.js
View file

@ -48,18 +48,26 @@ export function createRamaProxy(ramaPath) {
return Object.assign(emitter, {
startServer: async () => {
await reportingServer.start();
reportingServer.addListener("blockReceived", (ev) =>
emitter.emit("malwareBlocked", {
packageName: ev.artifact.identifier,
packageVersion: ev.artifact.version,
}),
);
reportingServer.addListener("blockReceived", (ev) => {
if (ev.block_reason === "new_package") {
emitter.emit("minimumAgeRequestBlocked", {
packageName: ev.artifact.identifier,
packageVersion: ev.artifact.version,
});
}
else {
emitter.emit("malwareBlocked", {
packageName: ev.artifact.identifier,
packageVersion: ev.artifact.version,
});
}
});
reportingServer.addListener("minPackageAgeSuppressionReceived", (ev) =>
emitter.emit("minPackageAgeVersionsSuppressed", {
packageName: ev.artifact.identifier,
packageVersions: ev.suppressed_versions,
})
)
}),
);
ui.writeVerbose(
`Started reporting server at ${reportingServer.getAddress()}`,
);

1
packages/safe-chain/src/registryProxy/ramaProxy/reportingServer.js
View file

@ -7,6 +7,7 @@ const SERVER_STOP_TIMEOUT_MS = 1000;
* @typedef {Object} BlockEvent
* @property {number} ts_ms
* @property {{ product: string, identifier: string, version: string }} artifact
* @property {string} block_reason
*/
/**