🥮 mooncakes.io
    Sign in

    mooncake-audit

    Static supply-chain security detector for mooncakes.io packages: typo-squatting, hooks, network/process/fs abuse and obfuscation

    security
    supply-chain
    audit
    mooncakes
    Download zip
    Author
    Version
    0.3.0
    License
    Apache-2.0
    Repository
    Last updated
    1 hour ago
    Downloads
    6

    #mooncake-audit

    CI

    Static supply-chain security detector for mooncakes.io packages, written in MoonBit.

    It statically analyzes an extracted package directory — manifests, pre-build hooks, source files, and bundled artifacts — for the behaviors that distinguish malicious packages from merely messy ones: typo-squatting of popular names, official-namespace impersonation, install-time command chains, network exfiltration to hardcoded endpoints, credential access, obfuscated payloads, and dropped binaries. Every scan yields a risk score and a verdict: Malicious / Suspicious / Clean.

    #What it detects

    FamilyRulesHighlights
    SourceS01–S08raw-IP/hardcoded exfil endpoints, credential paths, shell execution, base64 payload decoding with content inspection (urls / shells / downloaders → Critical), env sniffing, persistence writes
    HooksS06pre-build command-chain classification: pipe-to-shell, command substitution, base64-decode-exec, reverse-shell indicators
    ArtifactsS10binary magic detection (ELF/PE/Mach-O), disguised executables (benign extension + binary magic), embedded downloader/reverse-shell strings inside binaries, nested archives, shebang scripts
    ComboS99network + credential/obfuscation in the same file escalates to Critical

    Detection is purely behavioral: metadata identity rules (name/author/repo heuristics) were removed after real-world tuning showed they produced every false positive while contributing no unique malicious signal — see the canaries for what the behavioral engine catches on its own.

    Run mooncake-audit rules for the full catalog with triggers, examples, and mitigations. Test and demo fixtures are downweighted automatically, and known data-table shapes (tokenizer vocabularies) are guarded against false positives — the engine was tuned against a full crawl of the mooncakes.io registry.

    #Build

    Requires the MoonBit toolchain (moon) ≥ 0.10.14.

    moon check
moon test
moon build --target native --release

    The binary lands at _build/native/release/build/cmd/main/main.exe.

    #Usage

    ENGINE=$(find _build/native/release -type f -executable | head -1)

# scan an extracted package directory
"$ENGINE" scan /tmp/pkg --module owner/name --version 0.1.0

# outputs: human (default) | json | sarif | md
"$ENGINE" scan /tmp/pkg --json
"$ENGINE" scan /tmp/pkg --format sarif > report.sarif
"$ENGINE" scan /tmp/pkg --format md >> "$GITHUB_STEP_SUMMARY"

# explain the score, rule by rule
"$ENGINE" scan /tmp/pkg --explain

# CI gate: non-zero exit when the verdict reaches the threshold
"$ENGINE" scan /tmp/pkg --fail-on malicious

# rule catalog
"$ENGINE" rules

    Options:

    FlagMeaning
    --module mregistry module name (enables authoritative-name checks)
    --version vpackage version recorded in the report
    --hotlist filepopular-module list (default: builtin top-100 snapshot)
    --min-severity slow\|medium\|high\|critical filter
    --format shuman\|json\|sarif\|md
    --explainprint the score breakdown
    --fail-on ssuspicious\|malicious CI exit gate

    #Try it now

    ./examples/scan_canaries.sh

    Scans the bundled canaries offline: typo_malicious → Malicious, benign_http → Clean. See examples/README.md.

    #CI

    .github/workflows/ci.yml runs check → test → wasm build → native build → a self-scan dogfood step on every push/PR. To gate your own package CI:

    - run: |
    git clone --depth 1 https://github.com/<you>/mooncake-audit /tmp/auditor
    cd /tmp/auditor && moon build --target native --release
    ENGINE=$(find _build/native/release -type f -executable | head -1)
    "$ENGINE" scan "$PKG_DIR" --module "$PKG_NAME" --fail-on suspicious

    #Reproducing the registry audit

    The canary fixtures (canaries/) pin the scoring model end-to-end: moon test asserts each canary's verdict. The false-positive hardening (same-author exemption, data-table guards, test/demo downweighting) is regression-tested against patterns distilled from a full mooncakes.io crawl.

    #Development

    moon test          # 111 tests: unit + canary e2e
moon fmt           # format
moon info          # refresh pkg.generated.mbti (public API surface)

    Layout: engine/ (finding model, matchers, rule catalog) · metadata/ (manifest parsing, M-rules) · source/ (S-rules) · engine/scan/ (orchestrator) · score/ · report/ (json/human/sarif/markdown) · cmd/main/ (CLI).

    #Publish to mooncakes.io

    1. Set name in moon.mod to youraccount/mooncake-audit (keep the version bump).
    2. moon login with your mooncakes.io account.
    3. moon publish — the registry runs moon check/moon test on its side; CI here mirrors that gate.

    #License

    Apache-2.0. The scan engine is original work; canary fixtures are hand-written samples.

    Powered by MoonBit

    Site sourceReport issuePackagesBuild queueSkillsStatistics

    © 2026 mooncakes.io