@nodesecure/[email protected]

Major Changes

• #383 09c3575 Thanks @clemgbld! - feat(tracer): support tracking function return values

Minor Changes

• #385 91031f8 Thanks @clemgbld! - feat(tracer): add follow consecutive assignment of return values

• #390 7927535 Thanks @fraxken! - Refactor global id prefix removal by implementing a new generic Util function

• #391 facb858 Thanks @fraxken! - Enhance docs, types and syntax

Patch Changes

• Updated dependencies [53b25a4]:
  • @nodesecure/[email protected]

@nodesecure/[email protected]

Major Changes

• #383 09c3575 Thanks @clemgbld! - feat(tracer): support tracking function return values

Minor Changes

• #399 857308c Thanks @clemgbld! - feat(probes) add minimal implementation of data-exfiltration

• #392 02a2d05 Thanks @fraxken! - Simplify tracing validation & add new spread test for the probe

• #398 b6d2474 Thanks @fraxken! - Implement new pipeline mechanism with a built-in deobfuscate

• #382 bc62d3e Thanks @clemgbld! - feat(probes): add finalize callback

• #397 283d5b6 Thanks @fraxken! - Integrate estree-walker natively using meriyah ESTree types

• #387 4d097cc Thanks @fraxken! - Move trojan-source detection from SourceFile to AstAnalyser

• #396 f66af80 Thanks @fraxken! - Move Signals into probe.main context

• #380 99fd4fe Thanks @clemgbld! - refactor(probes): isFetch detect fetch re-assigment

• #395 fad019f Thanks @fraxken! - Implement context for Probe and ProbeRunner

• #389 f037105 Thanks @clemgbld! - feat(probes): isLiteral detect api.ipify.org with shady link

• #384 728d744 Thanks @fraxken! - move ProbeRunner from SourceFile to AstAnalyser class

Patch Changes

• #376 d5b98de Thanks @tony-go! - Handle uname as unsafe-command

• #400 14cb982 Thanks @fraxken! - Properly deep clone and reset probe context

• #381 ca954d8 Thanks @tony-go! - Handle curl and ping for unsafe-command probe

• Updated dependencies [91031f8, 7927535, 09c3575, facb858, 53b25a4]:

  • @nodesecure/[email protected]
  • @nodesecure/[email protected]

@nodesecure/[email protected]

Minor Changes

• #377 53b25a4 Thanks @fraxken! - Implement a new joinArrayExpression utility

@nodesecure/[email protected]

Major Changes

• #366 cf2b5eb Thanks @fraxken! - Refactor relation and dependency to Tracer for estree-ast-utils workspace

Patch Changes

• #356 c3016e0 Thanks @fraxken! - Trace Node.js core imports that use /promises

  Here is an example:

  import { readFile } from "fs/promises";
  
  const foobar = readFile;
  await foobar("test.txt");

• Updated dependencies [cf2b5eb, 8b72326]:

  • @nodesecure/[email protected]

@nodesecure/[email protected]

Minor Changes

• #369 644232a Thanks @clemgbld! - refactor(probe/isSerializeEnv): trace re-assignment of JSON.stringy & process.env

Patch Changes

• #375 20181e7 Thanks @PierreDemailly! - Update files to includes /dist folder

• Updated dependencies [19f9822]:

  • @nodesecure/[email protected]

@nodesecure/[email protected]

Minor Changes

• #363 e37384c Thanks @intincrab! - feat(probes): add serialize-environment warning detection

  Add new probe to detect potential environment variable exfiltration through JSON.stringify(process.env).

• #362 5f78d4a Thanks @clemgbld! - feat(probes): add initialize

• #366 cf2b5eb Thanks @fraxken! - Refactor relation and dependency to Tracer for estree-ast-utils workspace

Patch Changes

• Updated dependencies [cf2b5eb, 8b72326, c3016e0]:
  • @nodesecure/[email protected]
  • @nodesecure/[email protected]

@nodesecure/[email protected]

Minor Changes

• #374 19f9822 Thanks @fraxken! - Add missing utilities UT

@nodesecure/[email protected]

Major Changes

• #366 cf2b5eb Thanks @fraxken! - Refactor relation and dependency to Tracer for estree-ast-utils workspace

Minor Changes

• #365 8b72326 Thanks @fraxken! - Enhance input and output types using Meriyah ESTree defs

@nodesecure/[email protected]

Patch Changes

• Updated dependencies [d38f809]:
  • @nodesecure/[email protected]

@nodesecure/[email protected]

Major Changes

• #346 d38f809 Thanks @fraxken! - Remove VariableTracer