registry / @akashpandey/agent-relay / 1.5.1

@akashpandey/agent-relay@1.5.1

⚠ Under review

Pass the baton between Claude Code, Codex, Antigravity, and OpenCode with a single Unix command.

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 22 file(s), 329 KB of source, external domains: 127.0.0.1

Source & flagged code

5 flagged

dashboard/server.jsView file

Lines 1-23javascript

1import http from 'node:http';

2import fs from 'node:fs';

3import path from 'node:path';

4import { exec } from 'node:child_process';

5import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dashboard/server.jsView on unpkg · L3

6import { parseLogFilename, isProcessRunning, parseLogMetadata, parseLogProgress } from './parser.js';

7import { buildRunCommands } from './commands.js';

8import {

9 getDatabase,

10 getStatsFromDb,

11 getFilteredRuns,

12 getAnalyticsFromDb,

13 getWorkspacesFromDb,

14 getRun,

15 getRunSyncState,

16 markRunLogMissing,

17 updateRunProgress,

18 upsertRun,

19 registerRunComplete

20} from './db.js';

22const __filename = fileURLToPath(import.meta.url);

23const __dirname = path.dirname(__filename);

scripts/agent-cli.mjsView file

Lines 513-553javascript

513 }

514 }

515 runScript('agent-wait', [target]);

516}

517

518function resolveRunTarget(target = '--last') {

519

scripts/finalize-run.shView file

•path = scripts/finalize-run.sh kind = build_helper sizeBytes = 753 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/finalize-run.shView on unpkg

agentView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

agentView on unpkg

scripts/relay-handoff.mjsView file

•matchType = normalized_sha256 matchedPackage = @akashpandey/agent-relay@1.0.2 matchedPath = scripts/relay-handoff.mjs matchedIdentity = npm:[redacted]:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/relay-handoff.mjsView on unpkg

Source & flagged code

5 flagged · loading source

dashboard/server.jsView file

3import path from 'node:path'; L4: import { exec } from 'node:child_process'; L5: import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dashboard/server.jsView on unpkg · L3

scripts/agent-cli.mjsView file

533} L534: const baseUrl = (process.env.DASHBOARD_URL || 'http://localhost:4242').replace(/\/+$/, ''); L535: const url = `${baseUrl}/#run=${encodeURIComponent(run.filename)}`; ... L537: if (browser) { L538: const child = spawnSync('xdg-open', [url], { stdio: 'ignore' }); L539: if (child.status !== 0) console.error('subagent: xdg-open failed');

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/agent-cli.mjsView on unpkg · L533

scripts/finalize-run.shView file

Findings

5 High4 Medium4 Low

HighChild Processdashboard/server.js

HighShell

HighSame File Env Network Executionscripts/agent-cli.mjs

HighSemantic Analysis Limitedagent

HighKnown Malware Source Similarityscripts/relay-handoff.mjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/finalize-run.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @akashpandey/agent-relay@1.5.1.

See all versions of @akashpandey/agent-relay for other recorded verdicts.

Review the evidence and your use of @akashpandey/agent-relay@1.5.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-21 09:00:49.661Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.