registry / @adithyasak/t3 / 0.0.45-adi.1
@adithyasak/t3@0.0.45-adi.1
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe inspected source explains the high-risk scanner matches as ordinary CLI, bundled SDK, runtime feature detection, and syntax-highlighting behavior. No concrete malicious chain or unresolved policy-specific warning was established.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source; source closely matched a different package identity
Trigger
The user launches t3 and selects application or provider setup operations; no npm install lifecycle trigger exists.
Impact
No credential theft, reverse shell, or unconsented agent control mutation was established.
Mechanism
The inspected code uses local subprocess pipes and guarded provider installation. The indicated agent configuration code resolves a directory without writing agent controls.
AI rationale
The inspected source explains the high-risk scanner matches as ordinary CLI, bundled SDK, runtime feature detection, and syntax-highlighting behavior. No concrete malicious chain or unresolved policy-specific warning was established.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the t3 CLI and contains no lifecycle scripts or runtime self-dependency.
- The Claude history worker selects session reading or forking operations; the flagged configuration location only resolves the Claude configuration directory.
- Codex setup follows a user selection of managed mode, which the server also requires before installation.
- blade-OEdTArYC.js exports Blade syntax-highlighting grammar data.
- The flagged Bash implementation uses local process pipes; the inspected code does not establish a reverse shell.
- The dynamic function call creates an empty function to test runtime support, rather than executing a downloaded payload.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
14 flaggeddist/claudeHistoryWorker-DvgvqbrH.mjsView file
3import { createRequire } from "node:module";
L4: import * as sw from "node:child_process";
L5: import { execFile } from "node:child_process";
...
L16: import { EventEmitter, once, setMaxListeners } from "events";
L17: import Wxe from "https";
L18: import Gxe from "http";
...
L459: *
L460: * Each memoized wrapper owns a private `WeakMap` keyed by object identity.
L461: *
...
L568: *
L569: * const data: unknown = "hi"
L570: *
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/claudeHistoryWorker-DvgvqbrH.mjsView on unpkg · L33import { createRequire } from "node:module";
L4: import * as sw from "node:child_process";
L5: import { execFile } from "node:child_process";
...
L16: import { EventEmitter, once, setMaxListeners } from "events";
L17: import Wxe from "https";
L18: import Gxe from "http";
...
L459: *
L460: * Each memoized wrapper owns a private `WeakMap` keyed by object identity.
L461: *
...
L568: *
L569: * const data: unknown = "hi"
L570: *
Critical
Reverse Shell
Source matches reverse-shell style process and socket wiring.
dist/claudeHistoryWorker-DvgvqbrH.mjsView on unpkg · L3Findings
3 Critical8 High6 Medium5 Low
CriticalCredential Exfiltrationdist/claudeHistoryWorker-DvgvqbrH.mjs
CriticalReverse Shelldist/claudeHistoryWorker-DvgvqbrH.mjs
CriticalPrevious Version Dangerous Deltadist/client/assets/CodexSetupSection.logic-Cr6xMPwv.js
HighChild Processdist/claudeHistoryWorker-DvgvqbrH.mjs
HighShell
HighEvaldist/claudeHistoryWorker-DvgvqbrH.mjs
HighCommand Output Exfiltrationdist/claudeHistoryWorker-DvgvqbrH.mjs
HighCloud Metadata Accessdist/claudeHistoryWorker-DvgvqbrH.mjs
HighObfuscated Payload Loaderdist/claudeHistoryWorker-DvgvqbrH.mjs
HighRemote Agent Bridgedist/claudeHistoryWorker-DvgvqbrH.mjs
HighPackage Source Clone Identity Mismatch
Affected versions and remediation
This report applies to @adithyasak/t3@0.0.45-adi.1.
See all versions of @adithyasak/t3 for other recorded verdicts.
- Review the evidence and your use of @adithyasak/t3@0.0.45-adi.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.