feat(malware): WASM-based YARA signature engine#102

Merged

dbfx merged 35 commits intomainfrom

feat/yara-wasm-signatures

Mar 29, 2026

Commits on Mar 28, 2026

feat(malware): add WASM-based YARA signature engine

dbfx
and
claude
committed
fix(malware): address codex review — filename checks, compile validation, stale cache

dbfx
and
claude
committed
feat(build): fetch and bundle YARA rules at build time for offline installs

dbfx
and
claude
committed

Commits on Mar 29, 2026

fix(malware): address second codex review — init race, severity validation, stale bundled rules

dbfx
and
claude
committed
fix(malware): address third codex review — fetch timeout, SSRF redirects, scan-safe reset

dbfx
and
claude
committed
fix(malware): clear stale rules on failed fetch, run periodic checks for all users

dbfx
and
claude
committed
fix(malware): remove redundant post-read size check in fetchAndCacheRules

dbfx
and
claude
committed
fix(build): run fetch-yara-rules before all package scripts

dbfx
and
claude
committed
feat(ui): add Database tab to malware scanner page

dbfx
and
claude
committed
chore: auto-update translations
github-actions[bot]
committed
fix(malware): pass raw bytes to YARA via Uint8Array, fix serverUrl reference

dbfx
and
claude
committed
fix(ui): initialize YARA engine when database tab loads

dbfx
and
claude
committed
fix(security): require HTTPS for YARA rule updates, atomic cache writes

dbfx
and
claude
committed
fix(malware): add debug logging for SHA-256 mismatch diagnosis

dbfx
and
claude
committed
fix(malware): use deterministic sort for bundle hash computation

dbfx
and
claude
committed
fix(malware): check for rule updates before scan, update progress every batch

dbfx
and
claude
committed
perf(malware): only YARA-scan executable/script file types

dbfx
and
claude
committed
perf(malware): batch YARA scanning — 80x faster via single run() per chunk

dbfx
and
claude
committed
fix(malware): revert batch scanning, fix sendProgress TDZ, fix fetch timeout

dbfx
and
claude
committed
feat(malware): expand scan coverage — more paths, extensions, depth

dbfx
and
claude
committed
perf(malware): switch from libyara-wasm to @litko/yara-x (39,000x faster)

dbfx
and
claude
committed
fix(malware): self-review — severity validation, atomic staging, consistent URLs

dbfx
and
claude
committed
fix(ui): non-blocking YARA compilation with live progress

dbfx
and
claude
committed
chore: auto-update translations
github-actions[bot]
committed
fix(ui): rename engine label to "Kudu Cloud Signatures"

dbfx
and
claude
committed
perf(startup): defer YARA compilation to first scan, reduce chunk size

dbfx
and
claude
committed
fix(ui): show Kudu Cloud Signatures when rules are cached but not yet compiled

dbfx
and
claude
committed
chore: auto-update translations
github-actions[bot]
committed
fix(ui): use engine field instead of available for Database tab label

dbfx
and
claude
committed
feat(ui): add Scan button to malware scanner empty state

dbfx
and
claude
committed
fix(malware): remove pre-scan fetch, show compilation progress during init

dbfx
and
claude
committed
perf(malware): single-call rule compilation — 8 minutes down to 2 seconds

dbfx
and
claude
committed
feat(malware): per-path scan limits — more files, smarter coverage

dbfx
and
claude
committed
perf(malware): skip rules for other platforms before compilation

dbfx
and
claude
committed
fix(malware): codex review — path validators, filenameOnly, sort, IPv6 SSRF

dbfx
and
claude
committed