CVE-2026-34841 Bruno供应链攻击植入RAT漏洞

#!/usr/bin/env python3 """ PoC for detecting the malicious axios package in CVE-2026-34841. This script verifies the integrity of the installed axios package against known malicious hashes. Note: This is a detection PoC, not an exploit. """ import hashlib import os import sys import json # Hypothetical malicious hash for the compromised axios version MALICIOUS_HASHES = [ "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" ] def check_package_integrity(package_path): """Recursively calculate hash of package files to detect tampering.""" sha256 = hashlib.sha256() if not os.path.exists(package_path): print(f"[-] Path not found: {package_path}") return False for root, dirs, files in os.walk(package_path): for file in files: file_path = os.path.join(root, file) with open(file_path, 'rb') as f: sha256.update(f.read()) current_hash = sha256.hexdigest() print(f"[*] Calculated hash for {package_path}: {current_hash}") if current_hash in MALICIOUS_HASHES: print("[!] ALERT: Malicious package detected matching CVE-2026-34841!") return True else: print("[+] Package hash does not match known malicious signatures.") return False if __name__ == "__main__": # Check node_modules for axios target_path = "node_modules/axios" if len(sys.argv) > 1: target_path = sys.argv[1] print(f"[*] Scanning {target_path}...") is_compromised = check_package_integrity(target_path) if is_compromised: sys.exit(1) else: sys.exit(0)