From 64ed526e31b856bb587404d73b502de2ed8e9f6e Mon Sep 17 00:00:00 2001
From: "Andoni A." <14891798+andoniaf@users.noreply.github.com>
Date: Fri, 9 Jan 2026 15:05:12 +0100
Subject: [PATCH] refactor(attack-paths): rename virtual nodes from Malicious
 to New

The virtual nodes represent potential resources that could be created
for privilege escalation, not actual malicious resources. Renamed for
clarity:
- Malicious Task Definition -> New Task Definition
- Malicious Dev Endpoint -> New Dev Endpoint
- Malicious Code Interpreter -> New Code Interpreter
- Malicious Stack -> New Stack
---
 api/src/backend/api/attack_paths/query_definitions.py | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/api/src/backend/api/attack_paths/query_definitions.py b/api/src/backend/api/attack_paths/query_definitions.py
index a2f7a5c200..17a89b892f 100644
--- a/api/src/backend/api/attack_paths/query_definitions.py
+++ b/api/src/backend/api/attack_paths/query_definitions.py
@@ -773,7 +773,7 @@ _QUERY_DEFINITIONS: dict[str, list[AttackPathsQueryDefinition]] = {
 
                 // Create virtual ECS task node (one per unique principal->target pair)
                 CALL apoc.create.vNode(['ECSTask'], {
-                    name: 'Malicious Task Definition',
+                    name: 'New Task Definition',
                     description: 'Task with target role attached',
                     id: effective_principal.arn + '->' + target_role.arn
                 })
@@ -915,7 +915,7 @@ _QUERY_DEFINITIONS: dict[str, list[AttackPathsQueryDefinition]] = {
 
                 // Create virtual Glue endpoint node (one per unique principal->target pair)
                 CALL apoc.create.vNode(['GlueDevEndpoint'], {
-                    name: 'Malicious Dev Endpoint',
+                    name: 'New Dev Endpoint',
                     description: 'Glue endpoint with target role attached',
                     id: effective_principal.arn + '->' + target_role.arn
                 })
@@ -1000,7 +1000,7 @@ _QUERY_DEFINITIONS: dict[str, list[AttackPathsQueryDefinition]] = {
 
                 // Create virtual Bedrock code interpreter node (one per unique principal->target pair)
                 CALL apoc.create.vNode(['BedrockCodeInterpreter'], {
-                    name: 'Malicious Code Interpreter',
+                    name: 'New Code Interpreter',
                     description: 'Bedrock agent with target role attached',
                     id: effective_principal.arn + '->' + target_role.arn
                 })
@@ -1077,7 +1077,7 @@ _QUERY_DEFINITIONS: dict[str, list[AttackPathsQueryDefinition]] = {
 
                 // Create virtual CloudFormation stack node (one per unique principal->target pair)
                 CALL apoc.create.vNode(['CloudFormationStack'], {
-                    name: 'Malicious Stack',
+                    name: 'New Stack',
                     description: 'CloudFormation stack with target role attached',
                     id: effective_principal.arn + '->' + target_role.arn
                 })