registry / @12errh/antigravity-proxy / 1.0.7

@12errh/antigravity-proxy@1.0.7

LLM proxy for Antigravity — translate Google Gemini API calls to any provider

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 123 file(s), 747 KB of source, external domains: api.anthropic.com, api.groq.com, api.openai.com, generativelanguage.googleapis.com, integrate.api.nvidia.com, opencode.ai, openrouter.ai

Source & flagged code

4 flagged

dist/cli/utils/port.jsView file

Lines 1-21javascript

1import { execSync } from 'child_process';

2import { platform } from 'os';

High

Child Process

Package source references child process execution.

dist/cli/utils/port.jsView on unpkg · L1

3export function findProcessesOnPort(port) {

4 const pids = [];

5 try {

6 if (platform() === 'win32') {

7 const out = execSync(`netstat -ano`, { encoding: 'utf-8', timeout: 5000 });

8 for (const line of out.split('\n')) {

9 if (line.includes(`:${port}`) && line.includes('LISTENING')) {

10 const parts = line.trim().split(/\s+/);

11 const pid = parseInt(parts[parts.length - 1], 10);

12 if (!isNaN(pid) && pid > 0)

13 pids.push(pid);

14 }

15 }

16 }

17 else {

18 let out;

19 try {

20 out = execSync(`lsof -ti tcp:${port}`, { encoding: 'utf-8', timeout: 5000 });

21 }

dist/cli/utils/cert.jsView file

Lines 1-60javascript

1import fs from 'fs';

2import path from 'path';

3import { execSync } from 'child_process';

4import { platform } from 'os';

5import { PROXY_DIR } from './paths.js';

dist/cli/commands/start.jsView file

Lines 115-155javascript

115 const pkgPath = path.join(PROXY_DIR, 'package.json');

116 const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));

117 checkAndPromptUpdate(pkg.version);

118 }

Source & flagged code

4 flagged · loading source

dist/cli/utils/port.jsView file

1import { execSync } from 'child_process'; L2: import { platform } from 'os';

High

Child Process

Package source references child process execution.

dist/cli/utils/port.jsView on unpkg · L1

dist/cli/utils/cert.jsView file

40const sha1 = crypto.createHash('sha1').update(derBytes).digest('hex').toUpperCase(); L41: const out = execSync(`powershell -NoProfile -Command "Get-ChildItem Cert:\\LocalMachine\\Root | Where-Object { $_.Thumbprint -eq '${sha1}' } | Measure-Object | Select-Object -Expan... L42: return out.trim() !== '0';

High

Shell

Package source references shell execution.

dist/cli/utils/cert.jsView on unpkg · L40

2import path from 'path'; L3: import { execSync } from 'child_process'; L4: import { platform } from 'os'; ... L37: const b64 = lines.join(''); L38: const derBytes = Buffer.from(b64, 'base64'); L39: const crypto = require('crypto');

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli/utils/cert.jsView on unpkg · L2

dist/cli/commands/start.jsView file

135console.log(' Installing dependencies...'); L136: execSync('npm install --production', { cwd: PROXY_DIR, stdio: 'inherit', timeout: 120000 }); L137: }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/commands/start.jsView on unpkg · L135

Findings

3 High3 Medium7 Low

HighChild Processdist/cli/utils/port.js

HighShelldist/cli/utils/cert.js

HighRuntime Package Installdist/cli/commands/start.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/cli/utils/cert.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

4 flagged

dist/cli/utils/port.jsView file

Lines 1-21javascript

1import { execSync } from 'child_process';

2import { platform } from 'os';

High

Child Process

Package source references child process execution.

dist/cli/utils/port.jsView on unpkg · L1

3export function findProcessesOnPort(port) {

4 const pids = [];

5 try {

6 if (platform() === 'win32') {

7 const out = execSync(`netstat -ano`, { encoding: 'utf-8', timeout: 5000 });

8 for (const line of out.split('\n')) {

9 if (line.includes(`:${port}`) && line.includes('LISTENING')) {

10 const parts = line.trim().split(/\s+/);

11 const pid = parseInt(parts[parts.length - 1], 10);

12 if (!isNaN(pid) && pid > 0)

13 pids.push(pid);

14 }

15 }

16 }

17 else {

18 let out;

19 try {

20 out = execSync(`lsof -ti tcp:${port}`, { encoding: 'utf-8', timeout: 5000 });

21 }

dist/cli/utils/cert.jsView file

Lines 1-60javascript

1import fs from 'fs';

2import path from 'path';

3import { execSync } from 'child_process';

4import { platform } from 'os';

5import { PROXY_DIR } from './paths.js';

dist/cli/commands/start.jsView file

Lines 115-155javascript

115 const pkgPath = path.join(PROXY_DIR, 'package.json');

116 const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));

117 checkAndPromptUpdate(pkg.version);

118 }