registry / @adithyasak/t3 / 0.0.38-adi.4
@adithyasak/t3@0.0.38-adi.4
AI Security Review
scanned 2mo ago · by lpm-firewall-aiStatic inspection found no lifecycle hook, automatic payload execution, or credential-harvesting path. Scanner findings correspond to normal CLI, PTY, and opt-in relay functionality.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source closely matched a different package identity; previous stored version diff introduced dangerous source
Trigger
A user runs the t3 CLI or explicitly configures T3 Connect.
Impact
The CLI can run terminal commands and, after explicit linking, connect to its configured relay.
Mechanism
User-invoked process execution and opt-in authenticated relay linking.
AI rationale
Static inspection found no lifecycle hook, automatic payload execution, or credential-harvesting path. Scanner findings correspond to normal CLI, PTY, and opt-in relay functionality.
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI entry point and contains no lifecycle scripts.
- The CLI runs only when its file is the process entry point.
- The flagged Node and Bun files are PTY and child-process adapters for commands supplied to the CLI.
- Remote linking is exposed as an explicit `t3 connect` command; startup reconciliation requires previously stored opt-in state.
Evidence against
- No install-time or import-time execution was found.
- No source path was found harvesting local credentials or sending environment variables to an unrelated endpoint.
- The relay uses authenticated, configured cloud-link requests rather than an automatic exfiltration path.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
22 flaggeddist/bin.mjsView file
3import { _ as __commonJSMin, a as isQuitError, b as __toESM, c as layer$99, d as pipeThroughDuplex, f as toArrayBuffer, g as ChildProcessSpawner, h as make$146, i as Terminal$1, l ...
L4: import { $ as declare, $a as modifyDelay, $c as days, $i as retry, $l as isFailure$1, $n as makeUnsafe$8, $o as _await, $r as filterOrFail, $s as map$9, $t as apply, A as Record, A...
L5: import { $ as runCollect, $t as make$161, A as fromQueue, At as forEach$1, B as mapError$1, Bt as mapEffect$2, C as fromArray, Cn as runIn, Ct as make$158, D as fromIterable$2, E a...
...
L9: import { createRequire } from "node:module";
L10: import * as NodeChildProcess from "node:child_process";
L11: import { Duplex, Readable } from "node:stream";
...
L20: import { cwd } from "process";
L21: import * as NodeNet from
Critical
Sensitive Archive Exfiltration
Source archives sensitive local configuration and publishes encoded chunks through an authenticated package-registry request.
dist/bin.mjsView on unpkg · L33import { _ as __commonJSMin, a as isQuitError, b as __toESM, c as layer$99, d as pipeThroughDuplex, f as toArrayBuffer, g as ChildProcessSpawner, h as make$146, i as Terminal$1, l ...
L4: import { $ as declare, $a as modifyDelay, $c as days, $i as retry, $l as isFailure$1, $n as makeUnsafe$8, $o as _await, $r as filterOrFail, $s as map$9, $t as apply, A as Record, A...
L5: import { $ as runCollect, $t as make$161, A as fromQueue, At as forEach$1, B as mapError$1, Bt as mapEffect$2, C as fromArray, Cn as runIn, Ct as make$158, D as fromIterable$2, E a...
...
L9: import { createRequire } from "node:module";
L10: import * as NodeChildProcess from "node:child_process";
L11: import { Duplex, Readable } from "node:stream";
...
L20: import { cwd } from "process";
L21: import * as NodeNet from
Findings
5 Critical13 High8 Medium4 Low
CriticalSensitive Archive Exfiltrationdist/bin.mjs
CriticalCredential Exfiltrationdist/bin.mjs
CriticalEncrypted Payload Temp Executiondist/bin.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/bin.mjs
CriticalPrevious Version Dangerous Deltadist/bin.mjs
HighChild Processdist/bin.mjs
HighShelldist/bin.mjs
HighCredential Redirect Persistencedist/bin.mjs
HighCommand Output Exfiltrationdist/bin.mjs
HighSandbox Evasion Gated Capabilitydist/bin.mjs
HighRemote Agent Bridgedist/bin.mjs
HighCross File Remote Execution Context
Affected versions and remediation
This report applies to @adithyasak/t3@0.0.38-adi.4.
See all versions of @adithyasak/t3 for other recorded verdicts.
- Review the evidence and your use of @adithyasak/t3@0.0.38-adi.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.