feature: Malicious packages scanner [TAROT-3600]#175

Merged

afsmeira merged 31 commits intomasterfrom

kpc-malware-scanner

Nov 28, 2025

Commits on Nov 26, 2025

openssf malicious packages integration

kendrickcurtis
authored and
afsmeira
committed
updated test to match new live CVE

kendrickcurtis
authored and
afsmeira
committed
revised malicious package detection to prebuild an index nightly so as to accelerate scanning.

kendrickcurtis
authored and
afsmeira
committed
fixed build - tool wasn't scanning for package.json -- added test for package-lock.json also

kendrickcurtis
authored and
afsmeira
committed
merged main, added Dockerfile

kendrickcurtis
authored and
afsmeira
committed
resolved codacy warnings

kendrickcurtis
authored and
afsmeira
committed
fixed codacy cyclo issue

kendrickcurtis
authored and
afsmeira
committed
fixed AI nonsense

kendrickcurtis
authored and
afsmeira
committed
fixed CICD -- necessary file wasn't being copied

kendrickcurtis
authored and
afsmeira
committed
fixed another CICD issue

kendrickcurtis
authored and
afsmeira
committed
bugfix in tool.go to live with nil PURLs and fixed absent line number reporting in openssf scanner

kendrickcurtis
authored and
afsmeira
committed
stopped copying unnecessary files

kendrickcurtis
authored and
afsmeira
committed
fixed test data

kendrickcurtis
authored and
afsmeira
committed
test fixes

kendrickcurtis
authored and
afsmeira
committed
ignored codacy config

kendrickcurtis
authored and
afsmeira
committed
review comments tackled

kendrickcurtis
authored and
afsmeira
committed
fixed stupid ai shit - npm ref in gradle file

kendrickcurtis
authored and
afsmeira
committed
fixed missing vuln

kendrickcurtis
authored and
afsmeira
committed
Delete .codacy/cli.sh

kendrickcurtis
authored and
afsmeira
committed
Delete .codacy/codacy.yaml

kendrickcurtis
authored and
afsmeira
committed
clean: Assorted cleanup after rebase
afsmeira
committed
clean: Improve build process for OpenSSF malicious packages index
afsmeira
committed
clean: Simplify and correct malicious packages scanner implementation
afsmeira
committed
clean: Ensure proper dependency injection for testable code
afsmeira
committed
clean: Address codacy comments
afsmeira
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feature: Malicious packages scanner [TAROT-3600]#175

feature: Malicious packages scanner [TAROT-3600]#175
afsmeira merged 31 commits intomasterfrom
kpc-malware-scanner

Commits on Nov 26, 2025

openssf malicious packages integration

updated test to match new live CVE

revised malicious package detection to prebuild an index nightly so as to accelerate scanning.

fixed build - tool wasn't scanning for package.json -- added test for package-lock.json also

merged main, added Dockerfile

resolved codacy warnings

fixed codacy cyclo issue

fixed AI nonsense

fixed CICD -- necessary file wasn't being copied

fixed another CICD issue

bugfix in tool.go to live with nil PURLs and fixed absent line number reporting in openssf scanner

stopped copying unnecessary files

fixed test data

test fixes

ignored codacy config

review comments tackled

fixed stupid ai shit - npm ref in gradle file

fixed missing vuln

Delete .codacy/cli.sh

Delete .codacy/codacy.yaml

clean: Assorted cleanup after rebase

clean: Improve build process for OpenSSF malicious packages index

clean: Simplify and correct malicious packages scanner implementation

clean: Ensure proper dependency injection for testable code

clean: Address codacy comments

Commits on Nov 27, 2025

tests: Add unit tests and fix faulty implementations

ci: Serialize steps to avoid problems when saving to workspace

tests: Fix integration tests

clean: Log when failing to open file when building index

clean: Address AI review comments

feat: Support the `last_affected` field in range events

feature: Malicious packages scanner [TAROT-3600]#175afsmeira merged 31 commits intomastercodacy/codacy-trivy:masterfrom kpc-malware-scannercodacy/codacy-trivy:kpc-malware-scannerCopy head branch name to clipboard

Commits

Commits on Nov 26, 2025

Commits on Nov 27, 2025

feature: Malicious packages scanner [TAROT-3600]#175
afsmeira merged 31 commits intomasterfrom
kpc-malware-scanner