Skip to content

feat: scan lockfiles for packages reported in shai-hulud-2 - #43

Open
karfau wants to merge 5 commits into
mainfrom
scan-repos
Open

feat: scan lockfiles for packages reported in shai-hulud-2#43
karfau wants to merge 5 commits into
mainfrom
scan-repos

Conversation

@karfau

@karfau karfau commented Nov 27, 2025

Copy link
Copy Markdown
Member

@karfau
karfau requested a review from saurabh2590 November 27, 2025 09:07
The previous regexp was not properly escaping the meta character for word boundaries,
which is why it didn't match anything.
We now assert that it matches what it should match, by testing it against the content of reported.json

store downloaded csv file in .temp folder for easier inspection

also read csv file provided by socket.dev, even though it currently doesn't contain anything additional

https://discord.com/channels/905691206783209574/1433237869509611592/threads/1443542796479889499
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant