Audit Node Modules With YARA Rules
#Threat Defense#Vulnerability Management
A disclosure of a bug found in Twitter's Vine and the process of procuring the source code.
The Purpose of This Tool for Analyzing Node Modules
The purpose of this tool is to execute a specified set of YARA rules against the provided node_module folder. By using this method, we can create YARA rules that help identify suspicious scripts that may be injected into node packages.
This tool is primarily inspired by the following articles: Malicious packages in npm, Malicious NPM packages target Amazon, Slack with new dependency attacks, and Hunting malicious NPM packages.
Integrating This Package into the CI/CD Pipeline
Software Requirements: Docker, Docker Compose, Makefile
How to Use the Repository
Clone this repository. Then, run the audit operation using the `make` command. The report will be available in `artifacts/output.json`.
