Not detecting malicious npm package

[danbarr]

Describe the issue

In this code snippet, CodeGate is not detecting the malicious coloramajs package:

const fs = require('fs');
const colorama = require('coloramajs');

I tested with both Copilot and Continue, it's missed with both.

Steps to Reproduce

Add the above snippet to a file and use it as context to a prompt.

Operating System

MacOS (Arm)

IDE and Version

VS Code 1.96.3

Extension and Version

Copilot and Continue

Provider

GitHub Copilot

Model

Any

Logs

No response

Additional Context

No response