registry / @adithyasak/t3 / 0.0.40-adi.1
@adithyasak/t3@0.0.40-adi.1
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install hooks, and the flagged process execution is used to run caller-supplied terminal commands or the package’s own server. The editor match is a zero-width layout character rather than a bidi control, and the credential host pointers did not establish an unexpected credential flow.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source closely matched a different package identity
Trigger
User-invoked CLI or application features.
Impact
No malicious data collection, credential forwarding, or unrelated persistence was identified in the reviewed paths.
Mechanism
PTY adapters run caller-supplied shell commands; the service launcher starts the package’s own local server.
AI rationale
The manifest has no install hooks, and the flagged process execution is used to run caller-supplied terminal commands or the package’s own server. The editor match is a zero-width layout character rather than a bidi control, and the credential host pointers did not establish an unexpected credential flow.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines a `t3` CLI and runtime dependencies, including the Claude Agent SDK, with no lifecycle scripts.
- The Node PTY adapter launches the shell and arguments supplied by its caller, using the supplied working directory and environment.
- The service launcher starts the package’s own local `serve` entry point.
- The editor’s flagged invisible character appears in text-layout code alongside nonbreaking-space handling; no bidi override control was found there.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationProtestwareUrlStrings
NoLicense
Source & flagged code
10 flaggeddist/service-launcher.mjsView file
2L3: import * as NodeChildProcess from "node:child_process";
L4: import * as NodeCrypto from "node:crypto";
High
Child Process
Package source references child process execution.
dist/service-launcher.mjsView on unpkg · L2dist/client/assets/typescript-S0auFSj_.jsView file
1import{a as e}from"./Icon-Bs5kt4yk.js";var t=e({default:()=>n}),n=[Object.freeze(JSON.parse('{"displayName":"TypeScript","name":"typescript","patterns":[{"include":"#directives"},{...
L2: //# sourceMappingURL=typescript-S0auFSj_.js.map
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/client/assets/typescript-S0auFSj_.jsView on unpkg · L1dist/client/assets/ComposerPromptEditor-CSuxqiQM.jsView file
Findings
1 Critical6 High8 Medium4 Low
CriticalTrojan Source Unicodedist/client/assets/ComposerPromptEditor-CSuxqiQM.js
HighChild Processdist/service-launcher.mjs
HighShell
HighCross File Remote Execution Contextdist/NodeServices-C2qGgLRw.mjs
HighKnown Malware Source Similaritydist/NodePtyAdapter-DIz0KE9m.mjs
HighKnown Malware Source Similaritydist/BunPtyAdapter-BK-hDQyj.mjs
HighPackage Source Clone Identity Mismatchdist/NodePtyAdapter-DIz0KE9m.mjs
MediumDynamic Requiredist/client/assets/typescript-S0auFSj_.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Wasm Moduledist/client/assets/ghostty-vt-DdA0Zryv.wasm
Affected versions and remediation
This report applies to @adithyasak/t3@0.0.40-adi.1.
See all versions of @adithyasak/t3 for other recorded verdicts.
- Review the evidence and your use of @adithyasak/t3@0.0.40-adi.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.