feat: add multi instance detection

Author: tompsota

example/lib/threat_notifier.dart

@@ -30,6 +30,7 @@ class ThreatNotifier extends AutoDisposeNotifier<ThreatState> {
       onADBEnabled: () => _updateThreat(Threat.adbEnabled),
       onScreenshot: () => _updateThreat(Threat.screenshot),
       onScreenRecording: () => _updateThreat(Threat.screenRecording),
+      onMultiInstance: () => _updateThreat(Threat.multiInstance),
     );
 
     Talsec.instance.attachListener(threatCallback);

lib/src/enums/threat.dart

@@ -66,6 +66,11 @@ enum Threat {
 
   /// Screen recording was started active the application was in the foreground.
   screenRecording,
+
+  /// This method is called when multiple instances of the app are running on the device
+  ///
+  /// Android only
+  multiInstance,
 }
 
 /// An extension on the [Threat] enum to provide additional functionality.
@@ -99,6 +104,7 @@ extension ThreatX on Threat {
   /// * 379769839 - adbEnabled
   /// * 705651459 - screenshot
   /// * 64690214 - screenRecording
+  /// * 859307284 - multiInstance
   static Threat fromInt(int code) {
     switch (code) {
       case 1268968002:
@@ -133,6 +139,8 @@ extension ThreatX on Threat {
         return Threat.screenshot;
       case 64690214:
         return Threat.screenRecording;
+      case 859307284:
+        return Threat.multiInstance;
       default:
         // Unknown data came from native code. This shouldn't normally happen.
         exit(127);

lib/src/talsec.dart

@@ -253,6 +253,8 @@ class Talsec {
           callback.onScreenshot?.call();
         case Threat.screenRecording:
           callback.onScreenRecording?.call();
+        case Threat.multiInstance:
+          callback.onMultiInstance?.call();
       }
     });
   }

lib/src/threat_callback.dart

@@ -38,6 +38,7 @@ class ThreatCallback extends TalsecPigeonApi {
     this.onMalware,
     this.onScreenshot,
     this.onScreenRecording,
+    this.onMultiInstance,
   });
 
   /// This method is called when a threat related dynamic hooking (e.g. Frida)
@@ -95,6 +96,9 @@ class ThreatCallback extends TalsecPigeonApi {
   /// This method is called when screen recording detected
   final VoidCallback? onScreenRecording;
 
+  /// This method is called when screen recording detected
+  final VoidCallback? onMultiInstance;
+
   @override
   void onMalwareDetected(List<SuspiciousAppInfo> packageInfo) {
     onMalware?.call(packageInfo);