registry  /  @aphanarc_lab/hermes-webui  /  0.1.26

@aphanarc_lab/hermes-webui@0.1.26

Aphanarc Web2 launcher for Hermes WebUI.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 43 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 38 file(s), 3.32 MB of source, external domains: 127.0.0.1, api.openai.com, cdn.jsdelivr.net, github.com, hermes-agent.nousresearch.com, lucide.dev, registry.npmjs.org, seu-endpoint.exemplo, tu-endpoint.example, tuo-endpoint.example, twoj-punkt-koncowy.example, votre-endpoint.example, webui.local, www.apple.com, www.w3.org, your-endpoint.example

Source & flagged code

34 flagged · loading source
vendor/agent-frontend-shell/static/i18n.jsView file
650patternName = generic_password severity = medium line = 650 matchedText = settings...rd',
Medium
Secret Pattern

Package contains a possible secret pattern.

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L650
939patternName = generic_password severity = medium line = 939 matchedText = settings...g.',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L939
1047patternName = generic_password severity = medium line = 1047 matchedText = onboardi...rd',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L1047
2060patternName = generic_password severity = medium line = 2060 matchedText = settings...so',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L2060
2341patternName = generic_password severity = medium line = 2341 matchedText = settings...e.',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L2341
2449patternName = generic_password severity = medium line = 2449 matchedText = onboardi...rd',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L2449
3461patternName = generic_password severity = medium line = 3461 matchedText = settings...ード',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L3461
3747patternName = generic_password severity = medium line = 3747 matchedText = settings...持。',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L3747
4654patternName = generic_password severity = medium line = 4654 matchedText = settings...па',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L4654
4871patternName = generic_password severity = medium line = 4871 matchedText = settings...у.',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L4871
5982patternName = generic_password severity = medium line = 5982 matchedText = settings...so',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L5982
6210patternName = generic_password severity = medium line = 6210 matchedText = settings...l.',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L6210
6318patternName = generic_password severity = medium line = 6318 matchedText = onboardi...ña',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L6318
7304patternName = generic_password severity = medium line = 7304 matchedText = settings...rt',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L7304
7522patternName = generic_password severity = medium line = 7522 matchedText = settings...n.',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L7522
7871patternName = generic_password severity = medium line = 7871 matchedText = onboardi...tz',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L7871
8980patternName = generic_password severity = medium line = 8980 matchedText = settings...置。',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L8980
10504patternName = generic_password severity = medium line = 10504 matchedText = settings...定。',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L10504
11506patternName = generic_password severity = medium line = 11506 matchedText = settings...so',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L11506
11727patternName = generic_password severity = medium line = 11727 matchedText = settings...r.',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L11727
13028patternName = generic_password severity = medium line = 13028 matchedText = settings...요.',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L13028
13136patternName = generic_password severity = medium line = 13136 matchedText = onboardi...rd',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L13136
14127patternName = generic_password severity = medium line = 14127 matchedText = settings...ès',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L14127
14375patternName = generic_password severity = medium line = 14375 matchedText = settings...l.',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L14375
14480patternName = generic_password severity = medium line = 14480 matchedText = onboardi...se',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L14480
15546patternName = generic_password severity = medium line = 15546 matchedText = settings...si',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L15546
15765patternName = generic_password severity = medium line = 15765 matchedText = settings...n.',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L15765
16959patternName = generic_password severity = medium line = 16959 matchedText = settings...pu',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L16959
17240patternName = generic_password severity = medium line = 17240 matchedText = settings...e.',
Medium
Secret Pattern

Hardcoded password in vendor/agent-frontend-shell/static/i18n.js

vendor/agent-frontend-shell/static/i18n.jsView on unpkg · L17240
bin/hermes-webui.mjsView file
15} from 'node:fs/promises' L16: import { spawn, spawnSync } from 'node:child_process' L17: import { delimiter, dirname, join, resolve } from 'node:path' ... L22: const cliPath = fileURLToPath(import.meta.url) L23: const __dirname = dirname(cliPath) L24: const packageRoot = resolve(__dirname, '..') ... L29: const sourceInfoPath = resolve(vendorRoot, '.bitseek-source.json') L30: const packageJson = JSON.parse(readFileSync(resolve(packageRoot, 'package.json'), 'utf8')) L31: ... L96: serviceAction: null, L97: host: process.env.HERMES_WEBUI_HOST || DEFAULT_HOST, L98: port: Number(process.env.HERMES_WEBUI_PORT || DEFAULT_PORT),
Medium
Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/hermes-webui.mjsView on unpkg · L15
templates/windows/hermes-webui-task.ps1View file
•path = templates/windows/hermes-webui-task.ps1 kind = build_helper sizeBytes = 194 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/windows/hermes-webui-task.ps1View on unpkg
vendor/agent-frontend-shell/bitseek_docs/BitSeek_Claw_Operation_Manual_ZH.docxView file
•path = vendor/agent-frontend-shell/bitseek_docs/BitSeek_Claw_Operation_Manual_ZH.docx kind = compressed_blob sizeBytes = 4636828 magicHex = [redacted]
Medium
Ships Compressed Blob

Package ships compressed or archive-like blobs.

vendor/agent-frontend-shell/bitseek_docs/BitSeek_Claw_Operation_Manual_ZH.docxView on unpkg
•path = vendor/agent-frontend-shell/bitseek_docs/BitSeek_Claw_Operation_Manual_ZH.docx kind = nested_archive_needs_inspection sizeBytes = 4636828 magicHex = [redacted]
Low
Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

vendor/agent-frontend-shell/bitseek_docs/BitSeek_Claw_Operation_Manual_ZH.docxView on unpkg
vendor/agent-frontend-shell/extensions/branding/assets/aphanarc-favicon.icoView file
•path = vendor/agent-frontend-[redacted]-favicon.ico kind = high_entropy_blob sizeBytes = 32665 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

vendor/agent-frontend-shell/extensions/branding/assets/aphanarc-favicon.icoView on unpkg

Findings

1 High35 Medium7 Low
HighShips High Entropy Blobvendor/agent-frontend-shell/extensions/branding/assets/aphanarc-favicon.ico
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencebin/hermes-webui.mjs
MediumShips Build Helpertemplates/windows/hermes-webui-task.ps1
MediumShips Compressed Blobvendor/agent-frontend-shell/bitseek_docs/BitSeek_Claw_Operation_Manual_ZH.docx
MediumStructural Risk Force Deep Review
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
MediumSecret Patternvendor/agent-frontend-shell/static/i18n.js
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNested Archive Needs Inspectionvendor/agent-frontend-shell/bitseek_docs/BitSeek_Claw_Operation_Manual_ZH.docx