Examples:
- https://github.com/juancarlospaco/nim_packages_security_audit/blob/master/z/zip.log
- https://github.com/juancarlospaco/nim_packages_security_audit/blob/master/s/sass.log
- https://github.com/juancarlospaco/nim_packages_security_audit/blob/master/w/webgui.log
More fresh data coming up everyday.
:)
Seems like it's a python script which uses "ptrace" python module to trace different syscalls when installing packages, and it tracks how the package creates/removes directories, changes permissions, deletes and renames stuff https://github.com/juancarlospaco/nim_packages_security_audit/blob/master/z/zip.log
Seems okay but I don't feel like it's that useful, a malicious actor can always check if it's being run under some tool like this
malicious actor can always check if it's being run under some tool like this
Yes, or simply leave a vulnerability around that can be later exploited.
Help Wanted
If you develop some kind of library that does Plotting, Charts, Visualizations, etc on Nim, would be nice to have some cool visualizations with the dataset of those audit logs!.
Theres lots of data now... :)