alma/NeahStable
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2 Commits 1 Branch 0 Tags 147 MiB
TypeScript 98.4%
Shell 0.8%
CSS 0.4%
JavaScript 0.4%
ecf92f7762
Go to file
alma ecf92f7762 SECURITY: Remove backdoor from next.config.mjs 
- Removed malicious userConfig loader that dynamically imported external config
- Removed mergeConfig function that allowed configuration hijacking
- Added .gitignore rules to block v0-user-next.config files

SECURITY INCIDENT:
- Backdoor discovered allowing remote code execution via /adfa route
- Attacker installed cryptocurrency miner on production VM
- Root-level system compromise with 9+ months of access
- Full incident details in SECURITY_INCIDENT_REPORT.md

All malware removed from VM. All credentials being rotated.

Date: January 10, 2026
2026-01-10 10:51:15 +01:00
app Initial commit 2026-01-09 21:06:52 +01:00
components Initial commit 2026-01-09 21:06:52 +01:00
electron Initial commit 2026-01-09 21:06:52 +01:00
hooks Initial commit 2026-01-09 21:06:52 +01:00
lib Initial commit 2026-01-09 21:06:52 +01:00
prisma Initial commit 2026-01-09 21:06:52 +01:00
public Initial commit 2026-01-09 21:06:52 +01:00
redis Initial commit 2026-01-09 21:06:52 +01:00
scripts Initial commit 2026-01-09 21:06:52 +01:00
styles Initial commit 2026-01-09 21:06:52 +01:00
types Initial commit 2026-01-09 21:06:52 +01:00
.DS_Store Initial commit 2026-01-09 21:06:52 +01:00
.gitignore SECURITY: Remove backdoor from next.config.mjs 2026-01-10 10:51:15 +01:00
AUDIT_API_N8N_CONNECTION.md Initial commit 2026-01-09 21:06:52 +01:00
base.json Initial commit 2026-01-09 21:06:52 +01:00
caprover-nginx-template-fixed.conf Initial commit 2026-01-09 21:06:52 +01:00
components.json Initial commit 2026-01-09 21:06:52 +01:00
CRITICAL_ISSUE_ANALYSIS.md Initial commit 2026-01-09 21:06:52 +01:00
db_query.sql Initial commit 2026-01-09 21:06:52 +01:00
docker-compose.yml Initial commit 2026-01-09 21:06:52 +01:00
Dockerfile Initial commit 2026-01-09 21:06:52 +01:00
global.d.ts Initial commit 2026-01-09 21:06:52 +01:00
index.js Initial commit 2026-01-09 21:06:52 +01:00
keycloak-user-creation-workflow.json Initial commit 2026-01-09 21:06:52 +01:00
LOG_ANALYSIS_SUMMARY.md Initial commit 2026-01-09 21:06:52 +01:00
logo.png Initial commit 2026-01-09 21:06:52 +01:00
MISSION_CREATION_CALLBACK_MISSING.md Initial commit 2026-01-09 21:06:52 +01:00
MISSION_CREATION_FLOW_EXPLANATION.md Initial commit 2026-01-09 21:06:52 +01:00
MISSION_DELETION_FLOW_ANALYSIS.md Initial commit 2026-01-09 21:06:52 +01:00
MISSION_DELETION_FLOW_COMPLETE_ANALYSIS.md Initial commit 2026-01-09 21:06:52 +01:00
MISSION_DELETION_N8N_IDS_ISSUE_ANALYSIS.md Initial commit 2026-01-09 21:06:52 +01:00
N8N_API_KEY_MISMATCH_FIX.md Initial commit 2026-01-09 21:06:52 +01:00
N8N_API_KEY_MISSING_FIX.md Initial commit 2026-01-09 21:06:52 +01:00
N8N_API_KEY_SOLUTION.md Initial commit 2026-01-09 21:06:52 +01:00
N8N_CONFIGURATION_FIX.md Initial commit 2026-01-09 21:06:52 +01:00
N8N_SAVE_MISSION_API_FIX.md Initial commit 2026-01-09 21:06:52 +01:00
N8N_WRONG_URL_FIX.md Initial commit 2026-01-09 21:06:52 +01:00
NeahMissionGeneratePlan.json Initial commit 2026-01-09 21:06:52 +01:00
next-env.d.ts Initial commit 2026-01-09 21:06:52 +01:00
next.config.js Initial commit 2026-01-09 21:06:52 +01:00
next.config.mjs SECURITY: Remove backdoor from next.config.mjs 2026-01-10 10:51:15 +01:00
nginx-config-fix.conf Initial commit 2026-01-09 21:06:52 +01:00
package-lock.json Initial commit 2026-01-09 21:06:52 +01:00
package.json Initial commit 2026-01-09 21:06:52 +01:00
postcss.config.mjs Initial commit 2026-01-09 21:06:52 +01:00
PROJECT_DEEP_ANALYSIS.md Initial commit 2026-01-09 21:06:52 +01:00
SECURITY_INCIDENT_REPORT.md SECURITY: Remove backdoor from next.config.mjs 2026-01-10 10:51:15 +01:00
tailwind.config.ts Initial commit 2026-01-09 21:06:52 +01:00
test-upload.js Initial commit 2026-01-09 21:06:52 +01:00
tsconfig.json Initial commit 2026-01-09 21:06:52 +01:00
tsconfig.tsbuildinfo Initial commit 2026-01-09 21:06:52 +01:00
Untitled Initial commit 2026-01-09 21:06:52 +01:00
update-imports.js Initial commit 2026-01-09 21:06:52 +01:00
update-imports.sh Initial commit 2026-01-09 21:06:52 +01:00
VERIFY_INTEGRATION_IDS_SAVED.md Initial commit 2026-01-09 21:06:52 +01:00
yarn.lock Initial commit 2026-01-09 21:06:52 +01:00