mirror of
https://github.com/edxeth/Shai-Hulud-Open-Source
synced 2026-06-14 08:40:01 +00:00
TeamPCP_OSS
efaf360d05
Full release of the multi-provider credential harvester targeting CI/CD environments. Includes eight credential providers (filesystem, shell, GitHub Actions runner, AWS SSM, AWS Secrets Manager, AWS STS, Kubernetes, HashiCorp Vault) with regex-based pattern matching across 20+ credential types. Data is encrypted with AES-256-GCM + RSA-OAEP and exfiltrated via a priority-ordered sender chain (HTTPS C2 domain fallbacking to public GitHub repository commits with dead-man-switch persistence). Three supply-chain mutators included: npm OIDC token exchange for OpenSearch-js, npm token-based package backdooring with preinstall hooks, and GitHub branch injection targeting VSCode/Claude startup hooks. Build pipeline with string obfuscation, log stripping, and JavaScript control-flow flattening.
39 lines
958 B
JSON
39 lines
958 B
JSON
{
|
|
"compilerOptions": {
|
|
"strict": true,
|
|
"noUncheckedIndexedAccess": true,
|
|
"exactOptionalPropertyTypes": false,
|
|
|
|
// Environment setup & latest features
|
|
"lib": ["ESNext"],
|
|
"target": "ES2020",
|
|
"module": "ESNext",
|
|
"moduleDetection": "force",
|
|
"jsx": "react-jsx",
|
|
"allowJs": true,
|
|
|
|
// Bun-specific settings
|
|
"moduleResolution": "bundler",
|
|
"allowImportingTsExtensions": true,
|
|
"verbatimModuleSyntax": true,
|
|
"noEmit": true,
|
|
"declaration": true,
|
|
"declarationMap": true,
|
|
"sourceMap": true,
|
|
|
|
// Best practices
|
|
"skipLibCheck": true,
|
|
"noFallthroughCasesInSwitch": true,
|
|
"noImplicitOverride": true,
|
|
"esModuleInterop": true,
|
|
"resolveJsonModule": true,
|
|
|
|
// Some stricter flags (disabled by default)
|
|
"noUnusedLocals": false,
|
|
"noUnusedParameters": false,
|
|
"noPropertyAccessFromIndexSignature": false,
|
|
},
|
|
"include": ["src/**/*"],
|
|
"exclude": ["node_modules"],
|
|
}
|