Loading npm security reports…
0xray@4.1.0: Agent extension lifecycle risk – npm package flagged | LPM Firewall
Flagged as agent extension risk
Allowed by default with warning: install-time first-party agent extension setup was detected.
0xray@4.1.0 Three-subsystem autonomous engine. The suit powers the agent you already run: memory, judgement, payments, and the wake.
scanned 8d ago · by lpm-firewall-ai Source inspection found a first-party Cursor hook installation capability activated by an explicit CLI command, so a warning is appropriate. The npm lifecycle hook only links the vendored module and prints the manual setup command; the inspected sources do not establish an unconsented install-time attack.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
A user runs `npx 0xray wear` in a Git work tree.
Impact
Cursor may run the installed package hooks for configured events after setup. No credential transfer or covert install-time agent configuration change was established.
Mechanism
The command calls the package’s Cursor hook installer, which merges its hook entries into the project’s `.cursor/hooks.json` and saves a snapshot.
AI rationale
Source inspection found a first-party Cursor hook installation capability activated by an explicit CLI command, so a warning is appropriate. The npm lifecycle hook only links the vendored module and prints the manual setup command; the inspected sources do not establish an unconsented install-time attack.
Evidence
dist/cli/index.js scripts/node/wear-cursor-hooks.cjs scripts/node/install-bridges.cjs .cursor/hooks.json
public snapshot AI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
The explicit `wear` command installs package-owned Cursor hooks in a project’s `.cursor/hooks.json`, making this a guarded agent extension capability. The inspected integration targets show project setup behavior such as MCP configuration edits, managed agent-file handling, ignore entries, project analysis, and skill-format detection; they do not establish covert behavior. The npm postinstall links the vendored Repertoire module and prints a command for manual setup; it does not invoke the bridge installer. Evidence against
Cursor hook installation requires the user to run the `wear` command in a Git work tree; the installer merges the hook configuration and saves a snapshot. The inspected postinstall path does not install agent bridges or modify the consumer’s agent configuration. Behavioral surface
Source ChildProcess Crypto DynamicRequire EnvironmentVars Filesystem Network Shell WebSocket
25 flagged · loading source • scripts.postinstall = node scripts/node/postinstall.cjs
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg • scripts.postinstall = node scripts/node/postinstall.cjs
Medium Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.json View on unpkg 6 */
L7: import { exec } from "child_process";
L8: import { promises as fs } from "fs";
High Child Process
Package source references child process execution.
dist/security/security-scanner.js View on unpkg · L6
2 Critical 20 High 6 Medium 5 Low
Critical Ai Agent Control Hijack scripts/node/postinstall.cjs
Critical Trigger Reachable Excluded Directory Payload dist/cli/index.js
High Install Time Lifecycle Scripts package.json
High Child Process dist/security/security-scanner.js
High Shell dist/security/security-scanner.js
High External Ai Agent Control Surface Mutation dist/scripts/pre-command.mjs
High Trigger Reachable External Ai Agent Control Surface Mutation scripts/foundry/mint-suit.cjs
High Runtime Package Install dist/integrations/hermes-agent/bridge.mjs
High Payload In Excluded Dir .opencode/init.sh
High Semantic Analysis Limited dist/core/framework-logger.js
Affected versions and remediation This report applies to 0xray@4.1.0 .
See all versions of 0xray for other recorded verdicts.
Review the evidence and your use of 0xray@4.1.0 before allowing it. Restrict the permissions described in this report. Choose an independently verified alternative or release. This report does not establish that other versions are safe. Evidence last updated: 2026-10-15 15:37:14.880Z (UTC) .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced .
84% Suspicious
AI assessment confidence
Package metadata npm Maintainers htafolla
Version 4.1.0
Latest on npm 4.1.3
Published Oct 15, 2026
License MIT
Dependencies 6
Integrity verified
Package size 1.77 MB
Files 1,398
Keywords ai opencode hermes openclaw grok mcp agent orchestration
Supply chain
HighEntropyStrings UrlStrings
Manifest No manifest risk signals triggered.
scanned 599 file(s), 5.73 MB of source, external domains: 0xray.ai, 127.0.0.1, api.example.com, api.github.com, auth.x.ai, codeload.github.com, example.com, github.com, img.shields.io, mcp-production-80e2.up.railway.app, opencode.ai, registry.npmjs.org, schema.getpostman.com, schema.org, www.google.com, www.sitemaps.org, www.typescriptlang.org, your-governance-endpoint.com
11 import { promptSecurityValidator, } from "./prompt-security-validator.js";
L12: const execAsync = promisify(exec);
L13: export class SecurityScanner {
High Shell
Package source references shell execution.
dist/security/security-scanner.js View on unpkg · L11 172 try {
L173: orchestratorModule = await import("../core/orchestrator");
L174: }
Medium Dynamic Require
Package source references dynamic require/import behavior.
dist/core/boot-orchestrator.js View on unpkg · L172 31 function renderManagedAgents(packageRoot, targetDir) {
L32: let content = fs.readFileSync(path.join(packageRoot, "AGENTS-consumer.md"), "utf8");
L33: const consumer = readPackageIdentity(path.join(targetDir, "package.json"));
...
L60: }
L61: fs.writeFileSync(filePath, body);
L62: return true;
...
L65: function deployManagedAgents(packageRoot, targetDir, log) {
L66: const agentsConsumer = path.join(packageRoot, "AGENTS-consumer.md");
L67: const agentsDest = path.join(targetDir, "AGENTS.md");
L68: if (!fs.existsSync(agentsConsumer)) return;
...
L76: if (!parts || outsideRegionEdited(parts)) {
L77: const side = path.join(targetDir, "AGENTS.md.0xray-new");
Critical Ai Agent Control Hijack
Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/node/postinstall.cjs View on unpkg · L31 • Runtime or CLI code links a write operation to an explicit external AI-agent control path:
#!/usr/bin/env node
import { existssync, mkdirsync, writefilesync, readfilesync } from "fs";
High External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/scripts/pre-command.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = 0xray@4.0.7
matchedPath = dist/scripts/pre-command.mjs
matchedIdentity = npm:MHhyYXk:4.0.7
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/scripts/pre-command.mjs View on unpkg • Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
rn millplantprotocol.foundryplantdir(millpackageroot);
}
function emptyplantfiles() {
return { skills: [], agents: [] };
}
function catalogplant(kind, millpackageroot) {
if (!kind || kind === "mill") {
const spec = factory_plant_catalog.mill;
return spec ? { skills: [...spec.skills], agents: [...spec.agents] } : emptyplantfiles();
}
const parsed = millplantprotocol.parseplanttoken(kind);
if (!parsed || parsed.builtin) {
const spec = factory_plant_catalog.mill;
return spec ? { skills: [...spec.skills], agents: [...spec.agents] } : emptyplantfiles();
}
const pkgroot = millplantprotocol.resolvepackageroot(parsed.packagename, {
targetdir: millpack
High Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
scripts/foundry/mint-suit.cjs View on unpkg dist/integrations/hermes-agent/bridge.mjs View file 954 const { execSync } = await import("child_process");
L955: const output = execSync(`npx 0xray skill:install "${source}"`, { cwd: projectRoot, timeout: 120000 }).toString();
L956: return { status: "ok", output: output.trim() };
High Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/integrations/hermes-agent/bridge.mjs View on unpkg · L954 dist/integrations/cursor/hooks/pre-compact.sh View file • path = [redacted]-compact.sh
kind = build_helper
sizeBytes = 130
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
dist/integrations/cursor/hooks/pre-compact.sh View on unpkg • path = .opencode/init.sh
kind = payload_in_excluded_dir
sizeBytes = 8140
magicHex = [redacted]
High Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
.opencode/init.sh View on unpkg • path = dist/cli/index.js
kind = trigger_reachable_excluded_payload
sizeBytes = 47183
triggerReachableSource = dist/cli/index.js
excludedPayload = .opencode/init.sh
Critical Trigger Reachable Excluded Directory Payload
A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.
dist/cli/index.js View on unpkg • stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 19
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/core/framework-logger.js View on unpkg • matchType = normalized_sha256
matchedPackage = 0xray@4.0.28
matchedPath = dist/cli/commands/mcp-install.js
matchedIdentity = npm:MHhyYXk:4.0.28
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/cli/commands/mcp-install.js View on unpkg • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/cli/commands/sk[redacted]
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/cli/commands/skill-install.js View on unpkg dist/integrations/hooks/pipeline-hook-runtime.mjs View file • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = [redacted]-hook-runtime.mjs
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/integrations/hooks/pipeline-hook-runtime.mjs View on unpkg dist/execution/opencode-cli-invoker.js View file • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/execution/opencode-cli-invoker.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/execution/opencode-cli-invoker.js View on unpkg dist/integrations/plugins/plugin-integration.js View file • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = [redacted]-integration.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/integrations/plugins/plugin-integration.js View on unpkg dist/mcps/boot-orchestrator.server.js View file • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/mcps/boot-orchestrator.server.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/mcps/boot-orchestrator.server.js View on unpkg • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/mcps/security-scan.server.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/mcps/security-scan.server.js View on unpkg • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/mcps/auto-format.server.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/mcps/auto-format.server.js View on unpkg dist/mcps/connection/process-spawner.js View file • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/mcps/connection/process-spawner.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/mcps/connection/process-spawner.js View on unpkg dist/mcps/knowledge-skills/performance-optimization.server.js View file • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/mcps/knowledge-skills/performance-optimization.server.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/mcps/knowledge-skills/performance-optimization.server.js View on unpkg • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/scripts/integration.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/scripts/integration.js View on unpkg High
Known Malware Source Similarity
dist/cli/commands/mcp-install.js
High Known Malware Source Similarity dist/cli/commands/skill-install.js
High Known Malware Source Similarity dist/integrations/hooks/pipeline-hook-runtime.mjs
High Known Malware Source Similarity dist/execution/opencode-cli-invoker.js
High Known Malware Source Similarity dist/integrations/plugins/plugin-integration.js
High Known Malware Source Similarity dist/mcps/boot-orchestrator.server.js
High Known Malware Source Similarity dist/mcps/security-scan.server.js
High Known Malware Source Similarity dist/scripts/pre-command.mjs
High Known Malware Source Similarity dist/mcps/auto-format.server.js
High Known Malware Source Similarity dist/mcps/connection/process-spawner.js
High Known Malware Source Similarity dist/mcps/knowledge-skills/performance-optimization.server.js
High Known Malware Source Similarity dist/scripts/integration.js
Medium Ambiguous Install Lifecycle Script package.json
Medium Dynamic Require dist/core/boot-orchestrator.js
Medium Ships Build Helper dist/integrations/cursor/hooks/pre-compact.sh
Medium Structural Risk Force Deep Review
Low Non Install Lifecycle Scripts
Runtime surface package.json Entrypoints main → ./dist/index.js types → ./dist/index.d.ts exports map bin → 0xray, 0xray-integration
Runtime No engine / OS / CPU constraints
Artifact 7.80 MB · 1,398 files 2 signature(s)
Install lifecycle postinstall prepublishOnly
Behavioral surface ChildProcess Crypto DynamicRequire EnvironmentVars Filesystem Network Shell WebSocket HighEntropyStrings UrlStrings Manifest: clean
25 flagged • scripts.postinstall = node scripts/node/postinstall.cjs
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg • scripts.postinstall = node scripts/node/postinstall.cjs
Medium Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.json View on unpkg 6 */
L7: import { exec } from "child_process";
L8: import { promises as fs } from "fs";
High Child Process
Package source references child process execution.
dist/security/security-scanner.js View on unpkg · L6 11 import { promptSecurityValidator, } from "./prompt-security-validator.js";
L12: const execAsync = promisify(exec);
L13: export class SecurityScanner {
High Shell
Package source references shell execution.
dist/security/security-scanner.js View on unpkg · L11 172 try {
L173: orchestratorModule = await import("../core/orchestrator");
L174: }
Medium Dynamic Require
Package source references dynamic require/import behavior.
dist/core/boot-orchestrator.js View on unpkg · L172 31 function renderManagedAgents(packageRoot, targetDir) {
L32: let content = fs.readFileSync(path.join(packageRoot, "AGENTS-consumer.md"), "utf8");
L33: const consumer = readPackageIdentity(path.join(targetDir, "package.json"));
...
L60: }
L61: fs.writeFileSync(filePath, body);
L62: return true;
...
L65: function deployManagedAgents(packageRoot, targetDir, log) {
L66: const agentsConsumer = path.join(packageRoot, "AGENTS-consumer.md");
L67: const agentsDest = path.join(targetDir, "AGENTS.md");
L68: if (!fs.existsSync(agentsConsumer)) return;
...
L76: if (!parts || outsideRegionEdited(parts)) {
L77: const side = path.join(targetDir, "AGENTS.md.0xray-new");
Critical Ai Agent Control Hijack
Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/node/postinstall.cjs View on unpkg · L31 • Runtime or CLI code links a write operation to an explicit external AI-agent control path:
#!/usr/bin/env node
import { existssync, mkdirsync, writefilesync, readfilesync } from "fs";
High External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/scripts/pre-command.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = 0xray@4.0.7
matchedPath = dist/scripts/pre-command.mjs
matchedIdentity = npm:MHhyYXk:4.0.7
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/scripts/pre-command.mjs View on unpkg • Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
rn millplantprotocol.foundryplantdir(millpackageroot);
}
function emptyplantfiles() {
return { skills: [], agents: [] };
}
function catalogplant(kind, millpackageroot) {
if (!kind || kind === "mill") {
const spec = factory_plant_catalog.mill;
return spec ? { skills: [...spec.skills], agents: [...spec.agents] } : emptyplantfiles();
}
const parsed = millplantprotocol.parseplanttoken(kind);
if (!parsed || parsed.builtin) {
const spec = factory_plant_catalog.mill;
return spec ? { skills: [...spec.skills], agents: [...spec.agents] } : emptyplantfiles();
}
const pkgroot = millplantprotocol.resolvepackageroot(parsed.packagename, {
targetdir: millpack
High Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
scripts/foundry/mint-suit.cjs View on unpkg dist/integrations/hermes-agent/bridge.mjs View file 954 const { execSync } = await import("child_process");
L955: const output = execSync(`npx 0xray skill:install "${source}"`, { cwd: projectRoot, timeout: 120000 }).toString();
L956: return { status: "ok", output: output.trim() };
High Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/integrations/hermes-agent/bridge.mjs View on unpkg · L954 dist/integrations/cursor/hooks/pre-compact.sh View file • path = [redacted]-compact.sh
kind = build_helper
sizeBytes = 130
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
dist/integrations/cursor/hooks/pre-compact.sh View on unpkg • path = .opencode/init.sh
kind = payload_in_excluded_dir
sizeBytes = 8140
magicHex = [redacted]
High Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
.opencode/init.sh View on unpkg • path = dist/cli/index.js
kind = trigger_reachable_excluded_payload
sizeBytes = 47183
triggerReachableSource = dist/cli/index.js
excludedPayload = .opencode/init.sh
Critical Trigger Reachable Excluded Directory Payload
A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.
dist/cli/index.js View on unpkg • stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 19
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/core/framework-logger.js View on unpkg • matchType = normalized_sha256
matchedPackage = 0xray@4.0.28
matchedPath = dist/cli/commands/mcp-install.js
matchedIdentity = npm:MHhyYXk:4.0.28
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/cli/commands/mcp-install.js View on unpkg • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/cli/commands/sk[redacted]
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/cli/commands/skill-install.js View on unpkg dist/integrations/hooks/pipeline-hook-runtime.mjs View file • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = [redacted]-hook-runtime.mjs
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/integrations/hooks/pipeline-hook-runtime.mjs View on unpkg dist/execution/opencode-cli-invoker.js View file • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/execution/opencode-cli-invoker.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/execution/opencode-cli-invoker.js View on unpkg dist/integrations/plugins/plugin-integration.js View file • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = [redacted]-integration.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/integrations/plugins/plugin-integration.js View on unpkg dist/mcps/boot-orchestrator.server.js View file • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/mcps/boot-orchestrator.server.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/mcps/boot-orchestrator.server.js View on unpkg • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/mcps/security-scan.server.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/mcps/security-scan.server.js View on unpkg • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/mcps/auto-format.server.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/mcps/auto-format.server.js View on unpkg dist/mcps/connection/process-spawner.js View file • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/mcps/connection/process-spawner.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/mcps/connection/process-spawner.js View on unpkg dist/mcps/knowledge-skills/performance-optimization.server.js View file • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/mcps/knowledge-skills/performance-optimization.server.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/mcps/knowledge-skills/performance-optimization.server.js View on unpkg • matchType = normalized_sha256
matchedPackage = 0xray@4.0.21
matchedPath = dist/scripts/integration.js
matchedIdentity = npm:MHhyYXk:4.0.21
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/scripts/integration.js View on unpkg