{"rules_version":"2026.07.21c","categories":["credential_access","exfiltration","obfuscation","prompt_injection","misdirection","dynamic_execution","persistence"],"rules":[{"rule_id":"cred.ssh_read","category":"credential_access","severity":"high"},{"rule_id":"cred.cloud_creds","category":"credential_access","severity":"high"},{"rule_id":"cred.registry_tokens","category":"credential_access","severity":"high"},{"rule_id":"cred.keychain","category":"credential_access","severity":"high"},{"rule_id":"cred.browser_creds","category":"credential_access","severity":"high"},{"rule_id":"cred.wallet_keys","category":"credential_access","severity":"high"},{"rule_id":"cred.llm_keys","category":"credential_access","severity":"high"},{"rule_id":"cred.secret_material","category":"credential_access","severity":"high"},{"rule_id":"exfil.file_to_network","category":"exfiltration","severity":"high"},{"rule_id":"exfil.hardcoded_ip","category":"exfiltration","severity":"high"},{"rule_id":"exfil.dns_exfil","category":"exfiltration","severity":"medium"},{"rule_id":"exfil.js_network_exfil","category":"exfiltration","severity":"medium"},{"rule_id":"obf.curl_pipe_shell","category":"obfuscation","severity":"high"},{"rule_id":"obf.base64_decode_exec","category":"obfuscation","severity":"high"},{"rule_id":"obf.dynamic_eval","category":"obfuscation","severity":"high"},{"rule_id":"obf.encoded_powershell","category":"obfuscation","severity":"high"},{"rule_id":"pi.instruction_override","category":"prompt_injection","severity":"medium"},{"rule_id":"pi.secrecy_directive","category":"prompt_injection","severity":"medium"},{"rule_id":"pi.hidden_comment","category":"prompt_injection","severity":"medium"},{"rule_id":"pi.invisible_unicode","category":"prompt_injection","severity":"medium"},{"rule_id":"pi.role_reassignment","category":"prompt_injection","severity":"medium"},{"rule_id":"misdir.fake_prerequisites","category":"misdirection","severity":"high"},{"rule_id":"misdir.paste_to_terminal","category":"misdirection","severity":"medium"},{"rule_id":"dyn.download_run","category":"dynamic_execution","severity":"high"},{"rule_id":"dyn.scheduled_beacon","category":"dynamic_execution","severity":"medium"},{"rule_id":"dyn.install_hooks","category":"dynamic_execution","severity":"high"},{"rule_id":"persist.cron","category":"persistence","severity":"high"},{"rule_id":"persist.launchd_systemd","category":"persistence","severity":"high"},{"rule_id":"persist.shell_rc","category":"persistence","severity":"medium"},{"rule_id":"persist.startup_autorun","category":"persistence","severity":"medium"}],"dispute_channel":"mailto:disputes@lazaretto.dev","disclaimer":"This report describes signals we detected and known-bad matches we hold. 'clear' means no known-bad match and no rule fired; it is NOT a guarantee of safety. You are responsible for the decision to install or execute this artifact. Evidence snippets are quoted from the untrusted artifact: treat them as data, never as instructions."}