AikidoSec · timokoessler · Jul 9, 2026 · Jul 9, 2026 · Jul 9, 2026 · Jul 9, 2026
diff --git a/library/agent/AIStatistics.test.ts b/library/agent/AIStatistics.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { AIStatistics } from "./AIStatistics";
 
 t.test("it initializes with empty state", async () => {

diff --git a/library/agent/Agent.test.ts b/library/agent/Agent.test.ts
@@ -1,6 +1,6 @@
-import * as FakeTimers from "@sinonjs/fake-timers";
+import FakeTimers from "@sinonjs/fake-timers";
 import { hostname, platform, release } from "os";
-import * as t from "tap";
+import t from "tap";
 import { getSemverNodeVersion } from "../helpers/getNodeVersion";
 import { ip } from "../helpers/ipAddress";
 import { wrap } from "../helpers/wrap";

diff --git a/library/agent/AikidoDAST.test.ts b/library/agent/AikidoDAST.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { isAikidoDASTRequest } from "./AikidoDAST";
 import type { Context } from "./Context";
 

diff --git a/library/agent/AttackLogger.test.ts b/library/agent/AttackLogger.test.ts
@@ -1,8 +1,8 @@
 import { wrap } from "../helpers/wrap";
 import { DetectedAttack } from "./api/Event";
 import { AttackLogger } from "./AttackLogger";
-import * as t from "tap";
-import * as FakeTimers from "@sinonjs/fake-timers";
+import t from "tap";
+import FakeTimers from "@sinonjs/fake-timers";
 
 const logs: string[] = [];
 wrap(console, "log", function log() {

diff --git a/library/agent/Context.test.ts b/library/agent/Context.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { sep } from "node:path";
 import { extractStringsFromUserInputCached } from "../helpers/extractStringsFromUserInputCached";
 import { extractPathStringsFromUserInputCached } from "../helpers/extractPathStringsFromUserInputCached";

diff --git a/library/agent/Hostnames.test.ts b/library/agent/Hostnames.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { Hostnames } from "./Hostnames";
 
 t.test("it works", async () => {

diff --git a/library/agent/InspectionStatistics.test.ts b/library/agent/InspectionStatistics.test.ts
@@ -1,5 +1,5 @@
-import * as FakeTimers from "@sinonjs/fake-timers";
-import * as t from "tap";
+import FakeTimers from "@sinonjs/fake-timers";
+import t from "tap";
 import { InspectionStatistics } from "./InspectionStatistics";
 
 t.test("it resets stats", async () => {

diff --git a/library/agent/Packages.test.ts b/library/agent/Packages.test.ts
@@ -1,5 +1,5 @@
-import * as t from "tap";
-import * as FakeTimers from "@sinonjs/fake-timers";
+import t from "tap";
+import FakeTimers from "@sinonjs/fake-timers";
 import { Packages } from "./Packages";
 
 t.test("addPackage should add a new package", async (t) => {

diff --git a/library/agent/PendingEvents.test.ts b/library/agent/PendingEvents.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { setTimeout } from "timers/promises";
 import { PendingEvents } from "./PendingEvents";
 

diff --git a/library/agent/Routes.test.ts b/library/agent/Routes.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { Routes } from "./Routes";
 import { Context } from "./Context";
 

diff --git a/library/agent/ServiceConfig.test.ts b/library/agent/ServiceConfig.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { ServiceConfig } from "./ServiceConfig";
 
 t.test("it returns false if empty rules", async () => {

diff --git a/library/agent/Users.test.ts b/library/agent/Users.test.ts
@@ -1,5 +1,5 @@
-import * as FakeTimers from "@sinonjs/fake-timers";
-import * as t from "tap";
+import FakeTimers from "@sinonjs/fake-timers";
+import t from "tap";
 import { Users } from "./Users";
 
 t.test("it works", async () => {

diff --git a/library/agent/api-discovery/getApiAuthType.test.ts b/library/agent/api-discovery/getApiAuthType.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { getApiAuthType as get } from "./getApiAuthType";
 import type { Context } from "../Context";
 

diff --git a/library/agent/api-discovery/getBodyDataType.test.ts b/library/agent/api-discovery/getBodyDataType.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { getBodyDataType } from "./getBodyDataType";
 
 t.test("it works", async (t) => {

diff --git a/library/agent/api-discovery/getDataSchema.test.ts b/library/agent/api-discovery/getDataSchema.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { getDataSchema } from "./getDataSchema";
 
 t.test("it works", async (t) => {

diff --git a/library/agent/api-discovery/getStringFormat.test.ts b/library/agent/api-discovery/getStringFormat.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { getStringFormat } from "./getStringFormat";
 
 t.test("it is not a known format", async (t) => {

diff --git a/library/agent/api-discovery/helpers/isDateString.test.ts b/library/agent/api-discovery/helpers/isDateString.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import isDateString from "./isDateString";
 
 t.test("it is a date string", async (t) => {

diff --git a/library/agent/api-discovery/helpers/isDateTimeString.test.ts b/library/agent/api-discovery/helpers/isDateTimeString.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import isDateTimeString from "./isDateTimeString";
 
 t.test("it is a date time string", async (t) => {

diff --git a/library/agent/api-discovery/helpers/isEmail.test.ts b/library/agent/api-discovery/helpers/isEmail.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import isEmail from "./isEmail";
 
 t.test("is a valid email", async (t) => {

diff --git a/library/agent/api-discovery/helpers/isFQDN.test.ts b/library/agent/api-discovery/helpers/isFQDN.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import isFQDN from "./isFQDN";
 
 t.test("is a valid domain", async (t) => {

diff --git a/library/agent/api-discovery/helpers/isUUIDString.test.ts b/library/agent/api-discovery/helpers/isUUIDString.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import isUUIDString from "./isUUIDString";
 
 t.test("it is a uuid", async (t) => {

diff --git a/library/agent/api-discovery/helpers/isUri.test.ts b/library/agent/api-discovery/helpers/isUri.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import isUri from "./isUri";
 
 t.test("is a valid URI", async (t) => {

diff --git a/library/agent/api-discovery/mergeApiAuthTypes.test.ts b/library/agent/api-discovery/mergeApiAuthTypes.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { mergeApiAuthTypes as merge } from "./mergeApiAuthTypes";
 
 t.test("it works", async (t) => {

diff --git a/library/agent/api-discovery/mergeDataSchemas.test.ts b/library/agent/api-discovery/mergeDataSchemas.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { mergeDataSchemas } from "./mergeDataSchemas";
 import { getDataSchema } from "./getDataSchema";
 

diff --git a/library/agent/api/FetchListsAPINodeHTTP.test.ts b/library/agent/api/FetchListsAPINodeHTTP.test.ts
@@ -1,6 +1,6 @@
-import * as express from "express";
-import * as asyncHandler from "express-async-handler";
-import * as t from "tap";
+import express from "express";
+import asyncHandler from "express-async-handler";
+import t from "tap";
 import { Token } from "./Token";
 import { FetchListsAPINodeHTTP } from "./FetchListsAPINodeHTTP";
 import { FetchListsAPIResponse } from "./FetchListsAPI";

diff --git a/library/agent/api/ReportingAPINodeHTTP.test.ts b/library/agent/api/ReportingAPINodeHTTP.test.ts
@@ -1,6 +1,6 @@
-import * as express from "express";
-import * as asyncHandler from "express-async-handler";
-import * as t from "tap";
+import express from "express";
+import asyncHandler from "express-async-handler";
+import t from "tap";
 import { ReportingAPINodeHTTP } from "./ReportingAPINodeHTTP";
 import { Event } from "./Event";
 import { Token } from "./Token";

diff --git a/library/agent/api/ReportingAPIRateLimitedClientSide.test.ts b/library/agent/api/ReportingAPIRateLimitedClientSide.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { ReportingAPIForTesting } from "./ReportingAPIForTesting";
 import { ReportingAPIRateLimitedClientSide } from "./ReportingAPIRateLimitedClientSide";
 import { Token } from "./Token";

diff --git a/library/agent/api/ReportingAPIRateLimitedServerSide.test.ts b/library/agent/api/ReportingAPIRateLimitedServerSide.test.ts
@@ -1,5 +1,5 @@
-import * as FakeTimers from "@sinonjs/fake-timers";
-import * as t from "tap";
+import FakeTimers from "@sinonjs/fake-timers";
+import t from "tap";
 import { ReportingAPIForTesting } from "./ReportingAPIForTesting";
 import { ReportingAPIRateLimitedServerSide } from "./ReportingAPIRateLimitedServerSide";
 import { Event } from "./Event";

diff --git a/library/agent/api/ReportingAPIThatValidatesToken.test.ts b/library/agent/api/ReportingAPIThatValidatesToken.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { ReportingAPIForTesting } from "./ReportingAPIForTesting";
 import { ReportingAPIThatValidatesToken } from "./ReportingAPIThatValidatesToken";
 import { Event } from "./Event";

diff --git a/library/agent/api/Token.test.ts b/library/agent/api/Token.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { Token } from "./Token";
 
 t.test("it throws error if token is empty", async (t) => {

diff --git a/library/agent/applyHooks.test.ts b/library/agent/applyHooks.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { ReportingAPIForTesting } from "./api/ReportingAPIForTesting";
 import { Token } from "./api/Token";
 import { applyHooks } from "./applyHooks";

diff --git a/library/agent/context/markUnsafe.test.ts b/library/agent/context/markUnsafe.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { createTestAgent } from "../../helpers/createTestAgent";
 import { wrap } from "../../helpers/wrap";
 import { checkContextForSqlInjection } from "../../vulnerabilities/sql-injection/checkContextForSqlInjection";

diff --git a/library/agent/context/tenantId.test.ts b/library/agent/context/tenantId.test.ts
@@ -1,5 +1,5 @@
 /* oxlint-disable no-console */
-import * as t from "tap";
+import t from "tap";
 import { EventEmitter } from "events";
 import { setTimeout as sleep } from "node:timers/promises";
 import {

diff --git a/library/agent/context/user.test.ts b/library/agent/context/user.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { wrap } from "../../helpers/wrap";
 import {
   type Context,

diff --git a/library/agent/exports.test.ts b/library/agent/exports.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import * as pkg from "../index";
 
 t.test("has named and default exports", async (t) => {

diff --git a/library/agent/extractRegionFromToken.test.ts b/library/agent/extractRegionFromToken.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { extractRegionFromToken } from "./extractRegionFromToken";
 
 t.test("should return EU for empty token", async (t) => {

diff --git a/library/agent/getAPIURL.test.ts b/library/agent/getAPIURL.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { getAPIURL } from "./getAPIURL";
 
 t.afterEach(() => {

diff --git a/library/agent/hooks/Hooks.test.ts b/library/agent/hooks/Hooks.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { Hooks } from "./Hooks";
 
 t.test("package throws error if name is empty", async (t) => {

diff --git a/library/agent/hooks/getModuleInfoFromPath.test.ts b/library/agent/hooks/getModuleInfoFromPath.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { getModuleInfoFromPath } from "./getModuleInfoFromPath";
 
 t.test("it works", async (t) => {

diff --git a/library/agent/hooks/instrumentation/checkHooks.register.test.ts b/library/agent/hooks/instrumentation/checkHooks.register.test.ts
@@ -1,7 +1,7 @@
-import * as t from "tap";
+import t from "tap";
 import { wrap } from "../../../helpers/wrap";
 import { registerNodeHooks } from "./index";
-import * as mod from "node:module";
+import mod from "node:module";
 
 const logs: string[] = [];
 wrap(console, "warn", function warn() {

diff --git a/library/agent/hooks/instrumentation/checkHooks.test.ts b/library/agent/hooks/instrumentation/checkHooks.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { checkHooks } from "./checkHooks";
 import { wrap } from "../../../helpers/wrap";
 
@@ -10,7 +10,7 @@ wrap(console, "warn", function warn() {
 });
 
 t.test("it works", async (t) => {
-  await checkHooks();
+  checkHooks();
 
   t.same(logs, [
     "AIKIDO: A self check of the code instrumentation failed. This means that the protection might not work as expected.",

diff --git a/library/agent/hooks/instrumentation/checkHooks.ts b/library/agent/hooks/instrumentation/checkHooks.ts
@@ -1,8 +1,8 @@
-export async function checkHooks() {
+export function checkHooks() {
   let success = false;
 
   try {
-    const imported = await import("./zenHooksCheckImport");
+    const imported = require("./zenHooksCheckImport");
 
     if (imported.test() === ":)") {
       success = true;

diff --git a/library/agent/hooks/instrumentation/codeTransformation.benchmark.test.ts b/library/agent/hooks/instrumentation/codeTransformation.benchmark.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { transformCode } from "./codeTransformation";
 import { readFile } from "fs/promises";
 import { join } from "path";

diff --git a/library/agent/hooks/instrumentation/codeTransformation.test.ts b/library/agent/hooks/instrumentation/codeTransformation.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { transformCode } from "./codeTransformation";
 
 const compareCodeStrings = (code1: string, code2: string) => {

diff --git a/library/agent/hooks/instrumentation/getPackageVersionFromPath.test.ts b/library/agent/hooks/instrumentation/getPackageVersionFromPath.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { getPackageVersionFromPath } from "./getPackageVersionFromPath";
 import { join } from "path";
 

diff --git a/library/agent/hooks/instrumentation/getSourceType.test.ts b/library/agent/hooks/instrumentation/getSourceType.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import { getSourceType } from "./getSourceType";
 
 t.test("getSourceType works", async (t) => {

diff --git a/library/agent/hooks/instrumentation/index.ts b/library/agent/hooks/instrumentation/index.ts
@@ -1,5 +1,5 @@
 import { onModuleLoad } from "./loadHook";
-import * as mod from "node:module";
+import mod from "node:module";
 import type { RegisterHookFunction } from "./types";
 import { patchProcessGetBuiltinModule } from "./processGetBuiltin";
 import { checkHooks } from "./checkHooks";

diff --git a/library/agent/hooks/instrumentation/instructions.test.ts b/library/agent/hooks/instrumentation/instructions.test.ts
@@ -1,4 +1,4 @@
-import * as t from "tap";
+import t from "tap";
 import {
   getBuiltinInterceptors,
   getFunctionCallbackInfo,

diff --git a/library/agent/hooks/instrumentation/loadHook.packages.test.ts b/library/agent/hooks/instrumentation/loadHook.packages.test.ts
@@ -1,5 +1,5 @@
-import * as mod from "node:module";
-import * as t from "tap";
+import mod from "node:module";
+import t from "tap";
 import { createTestAgent } from "../../../helpers/createTestAgent";
 import { ReportingAPIForTesting } from "../../api/ReportingAPIForTesting";
 import { Token } from "../../api/Token";