Merge pull request #4 from rotemreiss/bugfix/fetch-limit

Bugfix/fetch limit

Author: rotemreiss

cli.py

@@ -1247,7 +1247,10 @@ async def registry_unblock(
             return False
 
     async def fetch_feed_packages(
-        self, ecosystem: Optional[str] = None, limit: int = 100, hours: int = 48
+        self,
+        ecosystem: Optional[str] = None,
+        limit: Optional[int] = None,
+        hours: int = 48,
     ) -> bool:
         """Fetch fresh malicious packages from the packages feed."""
         try:
@@ -1965,7 +1968,11 @@ async def main():
         "--ecosystem", "-e", type=str, help="Filter by ecosystem (npm, pypi, etc.)"
     )
     fetch_parser.add_argument(
-        "--limit", "-l", type=int, default=100, help="Number of packages to show"
+        "--limit",
+        "-l",
+        type=int,
+        default=None,
+        help="Maximum number of packages to fetch (default: no limit)",
     )
     fetch_parser.add_argument(
         "--hours",

examples/README.md

@@ -0,0 +1,24 @@
+# Malifiscan Examples
+
+This directory provides advanced usage examples and configurations for Malifiscan, demonstrating different deployment scenarios and use cases beyond the basic setup.
+
+## Available Examples
+
+### config.shai-hulud-2.0.yaml
+
+An example configuration that uses a hard-coded list of malicious packages instead of the default OSV feed. This demonstrates how to use the memory feed provider with a specific set of packages.
+
+**Use Case**: Testing against a known set of malicious packages from security research.
+
+**Package List Source**: This example includes packages identified in the [Shai-Hulud 2.0 supply chain attack research by Wiz](https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack).
+
+**Features**:
+- Memory-based feed provider with pre-defined package list
+- JFrog registry integration enabled
+- Minimal logging (ERROR level only)
+- Storage service disabled for lightweight operation
+
+**Usage**:
+```bash
+uv run python cli.py scan --config examples/config.shai-hulud-2.0.yaml
+```