registry / @adithyasak/t3 / 0.1.4-adi.1
@adithyasak/t3@0.1.4-adi.1
Node.js WebSocket server for the T3 Code app.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged worker is part of a user-invoked CLI and handles explicit Claude session-history operations. The reported dynamic execution and external request resolve to an empty-function runtime check and a bounded connectivity probe; no malicious attack chain was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The package’s executable runs when a user invokes the `t3` CLI; history operations require an explicit method and session ID.
Impact
No malicious credential transfer, reverse shell, or concealed remote code execution was identified.
Mechanism
The worker retrieves or forks Claude session history. The flagged dynamic-function occurrence is an empty runtime capability check, and the external request is a connectivity probe.
AI rationale
The flagged worker is part of a user-invoked CLI and handles explicit Claude session-history operations. The reported dynamic execution and external request resolve to an empty-function runtime check and a bounded connectivity probe; no malicious attack chain was found.
Network endpoints1
1.1.1.1
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a `t3` command, whose entry point dispatches explicit CLI commands.
- The history worker requires a session ID and handles only session message retrieval or session forking; unknown operations throw an error.
- The flagged `new Function` call creates an empty function inside a runtime support check; it does not execute remotely supplied code.
- The request to 1.1.1.1 is an HTTP HEAD connectivity probe with a one-second timeout and returns only a success boolean.
Evidence against
- The CLI and its Claude agent SDK use child processes, credentials, network access, and local session data as part of coding-agent and session-history functions.
- The explicit connectivity probe contacts 1.1.1.1 when its internet-access check runs.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Source & flagged code
15 flaggeddist/claudeHistoryWorker-D95roNnb.mjsView file
10import { randomUUID } from "node:crypto";
L11: import * as sw from "node:child_process";
L12: import { execFile } from "node:child_process";
...
L20: import Pxe, { promisify as promisify$1 } from "util";
L21: import Gxe from "http";
L22: import Wxe from "https";
...
L186: function U(e, t, n, r, o) {
L187: if (r === "m") throw TypeError("Private method is not writable");
L188: if (r === "a" && !o) throw TypeError("Private accessor was defined without a setter");
...
L322: try {
L323: return JSON.parse(e);
L324: } catch (t) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/claudeHistoryWorker-D95roNnb.mjsView on unpkg · L1010import { randomUUID } from "node:crypto";
L11: import * as sw from "node:child_process";
L12: import { execFile } from "node:child_process";
...
L20: import Pxe, { promisify as promisify$1 } from "util";
L21: import Gxe from "http";
L22: import Wxe from "https";
...
L186: function U(e, t, n, r, o) {
L187: if (r === "m") throw TypeError("Private method is not writable");
L188: if (r === "a" && !o) throw TypeError("Private accessor was defined without a setter");
...
L322: try {
L323: return JSON.parse(e);
L324: } catch (t) {
Critical
Reverse Shell
Source matches reverse-shell style process and socket wiring.
dist/claudeHistoryWorker-D95roNnb.mjsView on unpkg · L10Findings
3 Critical8 High7 Medium5 Low
CriticalCredential Exfiltrationdist/claudeHistoryWorker-D95roNnb.mjs
CriticalReverse Shelldist/claudeHistoryWorker-D95roNnb.mjs
CriticalRemote Response Code Executiondist/claudeHistoryWorker-D95roNnb.mjs
HighChild Processdist/claudeHistoryWorker-D95roNnb.mjs
HighShell
HighEvaldist/claudeHistoryWorker-D95roNnb.mjs
HighCommand Output Exfiltrationdist/claudeHistoryWorker-D95roNnb.mjs
HighCloud Metadata Accessdist/claudeHistoryWorker-D95roNnb.mjs
HighObfuscated Payload Loaderdist/claudeHistoryWorker-D95roNnb.mjs
HighRemote Agent Bridgedist/claudeHistoryWorker-D95roNnb.mjs
HighShips High Entropy Blobdist/client/assets/FoxitSerifItalic-CQs5lx9Y.pfb
Affected versions and remediation
This report applies to @adithyasak/t3@0.1.4-adi.1.
See all versions of @adithyasak/t3 for other recorded verdicts.
- Review the evidence and your use of @adithyasak/t3@0.1.4-adi.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.