{
  "candidate_rules": [
    "LF-DEP-NPM-INSTALL-HOOK",
    "LF-JS-SEMANTIC-PROCESS"
  ],
  "challenge": {
    "attack_surface": [
      "script-supply-chain"
    ],
    "control_type": "positive",
    "difficulty": "hard",
    "expected_decision": "BLOCK",
    "oracle_ids": [
      "LF-ORACLE-SCRX-0008"
    ],
    "related_cases": [],
    "severity": "medium",
    "techniques": [
      "js",
      "install",
      "hook",
      "chain"
    ],
    "transformations": []
  },
  "corpus_id": "LF-CH-SCRX-0008",
  "description": "Script js install hook chain.",
  "expected_rules": [],
  "generator": "challenges.generate_challenge",
  "ground_truth": "synthetic-generated",
  "must_not_rules": [],
  "repo_name": "script-js-install-hook-chain",
  "repo_type": "model",
  "safe_fixture": true,
  "safety": "inert/canary-only",
  "schema": 1,
  "validation": {
    "kind": "verify-package",
    "target": "."
  }
}