| { | |
| "candidate_rules": [ | |
| "LF-DEP-NPM-INSTALL-HOOK", | |
| "LF-JS-SEMANTIC-PROCESS" | |
| ], | |
| "challenge": { | |
| "attack_surface": [ | |
| "script-supply-chain" | |
| ], | |
| "control_type": "positive", | |
| "difficulty": "hard", | |
| "expected_decision": "BLOCK", | |
| "oracle_ids": [ | |
| "LF-ORACLE-SCRX-0008" | |
| ], | |
| "related_cases": [], | |
| "severity": "medium", | |
| "techniques": [ | |
| "js", | |
| "install", | |
| "hook", | |
| "chain" | |
| ], | |
| "transformations": [] | |
| }, | |
| "corpus_id": "LF-CH-SCRX-0008", | |
| "description": "Script js install hook chain.", | |
| "expected_rules": [], | |
| "generator": "challenges.generate_challenge", | |
| "ground_truth": "synthetic-generated", | |
| "must_not_rules": [], | |
| "repo_name": "script-js-install-hook-chain", | |
| "repo_type": "model", | |
| "safe_fixture": true, | |
| "safety": "inert/canary-only", | |
| "schema": 1, | |
| "validation": { | |
| "kind": "verify-package", | |
| "target": "." | |
| } | |
| } | |