registry / @aseity/lyra / 0.13.1

@aseity/lyra@0.13.1

⚠ Under review

Lyra agent library

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 15 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 1.69 MB of source, external domains: 192.168.8.88, ai-chat.hep.com.cn, api-docs.deepseek.com, api.anthropic.com, api.deepseek.com, api.minimaxi.com, api.moonshot.cn, api.openai.com, dashscope.aliyuncs.com, developers.openai.com, json-schema.org, open.bigmodel.cn, openrouter.ai, platform.claude.com, storage.googleapis.com

Source & flagged code

7 flagged

dist/index.jsView file

1695`)} L1696: `}function dy(t,e=!1){return t.length<=Nc&&!e?t:t.length<=Nc?t+n_:t.slice(0,Nc)+n_}function kt(t,e){if(typeof t!="function")throw new p(`DeepSeek Harness filesystem sandbox session... L1697:

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1695

1860${r}${o} L1861: `}function Jz(t){let e=/^\uFEFF?---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/.exec(t);if(!e)return{};let n=Lz(e[1]);if(n.errors.length)throw new te("Invalid skill frontmatter YAML.");let ... L1862: `).replace(/\r/gu,` ... L1866: `),numLines:l.length,...u!==void 0?{appliedLimit:u}:{},...(t.offset??0)>0?{appliedOffset:t.offset}:{}}}if(o==="count"){let{items:a,appliedLimit:u}=Oy(e,t.headLimit,t.offset),l=a.ma... L1867: `),numMatches:c,...u!==void 0?{appliedLimit:u}:{},...(t.offset??0)>0?{appliedOffset:t.offset}:{}}}let{items:r,appliedLimit:i}=Oy(e,t.headLimit,t.offset),s=r.map(n);return{mode:o,nu... L1868: import pty

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1860

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1860

29package = @aseity/lyra; repositoryIdentity = max; dependency = @modelcontextprotocol/client L29: npm install @modelcontextprotocol/client L30: `.trim()),t}function cm(t){return t.content=im(t.content,{_meta:t._meta,structuredContent:t.structuredContent,isError:t.isError}),t}function Ie(t,e){let o={...(t===void 0?void 0:{t... L31: `);return`Tool input validation failed${n}:

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L29

1/*! Author: Ty <ty29022@gmail.com> */ L2: var Av=Object.defineProperty;var h=(t,e)=>()=>(t&&(e=t(t=0)),e);var _v=(t,e)=>{for(var n in e)Av(t,n,{get:e[n],enumerable:!0})};var Pe,p,ao,ji,Bi,uo,Cn,Zt,Qt,or,rr,ir,Gi,L,za,zi,E=... L3: `)),n.length>0?n.join(` ... L14: `)}}function go(t,e,n){if(n.length===0)return;let o=t[t.length-1];if(o?.role===e){o.content.push(...n);return}t.push({role:e,content:[...n]})}function sP(t,e,n){return typeof t=="s... L15: `):t.type==="text"?t.text:JSON.stringify(t)}function _P(t){return typeof t=="string"?t:Array.isArray(t)?t.map(e=>e.type==="input_text"?{type:"text",text:e.text}:e.type==="input_ima... L16: ... L143: </example> L144: `});import{createHash as ZF}from"crypto";function $t(t){return t.map((e,n)=>({id:QF(e,n),index:n,item:e}))}function QF(t,e){if(

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L1

dist/index.cjsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.cjs: `):t.type==="text"?t.text:JSON.stringify(t)}function kP(t){return typeof t=="string"?t:Array.isArray(t)?t.map(e=>e.type==="input_text"?{type:"text",text:e.text}:e.type==="input_ima... `):t.type==="text"?t.text:JSON.stringify(t)}function rE(t){return typeof t=="string"?t:Array.isArray(t)?t.map(e=>e.type==="input_text"?{type:"text",text:e.text}:e.type==="input_ima... `),imageContent:o}}if(t.type==="text")return{toolContent:t.text,imageContent:[]};if(t.type==="image"){let n=JE(t),o=Ix(n,e);return{toolContent:o.summary,imageContent:o.content}}thr... `,"utf8")}catch{}}async function*CO(t,e,n){let o=0;try{for await(let r of t

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.cjsView on unpkg

1860Trigger-reachable command-output exfiltration chain: manifest.main -> dist/index.cjs L1860: ${r}${o} L1861: `}function Cz(t){let e=/^\uFEFF?---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/.exec(t);if(!e)return{};let n=(0,EM.parseDocument)(e[1]);if(n.errors.length)throw new ae("Invalid skill frontm... L1862: `).replace(/\r/gu,` ... L1866: `),numLines:l.length,...u!==void 0?{appliedLimit:u}:{},...(t.offset??0)>0?{appliedOffset:t.offset}:{}}}if(o==="count"){let{items:a,appliedLimit:u}=fh(e,t.headLimit,t.offset),l=a.ma... L1867: `),numMatches:c,...u!==void 0?{appliedLimit:u}:{},...(t.offset??0)>0?{appliedOffset:t.offset}:{}}}let{items:r,appliedLimit:i}=fh(e,t.headLimit,t.offset),s=r.map(n);return{mode:o,nu... L1868: import pty

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.cjsView on unpkg · L1860

Source & flagged code

7 flagged · loading source

dist/index.jsView file

@aseity/lyra@0.13.1

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code