1683`)}
L1684: `}function Xm(e,t=!1){return e.length<=ml&&!t?e:e.length<=ml?e+DI:e.slice(0,ml)+DI}function yt(e,t){if(typeof e!="function")throw new p(`DeepSeek Harness filesystem sandbox session...
L1685:
1848${r}${o}
L1849: `}function TU(e){let t=e.split(/\r?\n/);if(t[0]?.trim()!=="---")return{};let n=t.findIndex((r,i)=>i>0&&r.trim()==="---");if(n===-1)return{};let o={};for(let r of t.slice(1,n)){let ...
L1850: `).replace(/\r/gu,`
...
L1854: `),numLines:u.length,...l!==void 0?{appliedLimit:l}:{},...(e.offset??0)>0?{appliedOffset:e.offset}:{}}}if(o==="count"){let{items:a,appliedLimit:l}=yf(t,e.headLimit,e.offset),u=a.ma...
L1855: `),numMatches:c,...l!==void 0?{appliedLimit:l}:{},...(e.offset??0)>0?{appliedOffset:e.offset}:{}}}let{items:r,appliedLimit:i}=yf(t,e.headLimit,e.offset),s=r.map(n);return{mode:o,nu...
L1856: import pty
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L1848 •Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
dist/index.js:
`):e.type==="text"?e.text:JSON.stringify(e)}function aM(e){return typeof e=="string"?e:Array.isArray(e)?e.map(t=>t.type==="input_text"?{type:"text",text:t.text}:t.type==="input_ima...
`,"utf8")}catch{}}async function*rk(e,t,n){let o=0;try{for await(let r of e)await Gn({type:"stream_chunk",requestId:t,model:n,chunkIndex:o,chunk:r}),o++,yield r;await Gn({type:"str...
`)}function lE(e){let t=Object.keys(e);return t.length===1&&t[0]==="input"}function fp(e,t){return JSON.stringify(e,Vv,t)}var Vv,qv,Yv,Xv,Zv,Rh,Qv,Mh,Fh=y(()=>{"use strict";Kn();Ko...
`)}function $a(e){if(!e?.trim())return!1;try{return AS(e),!0}catch{return!1}}function AS(e){let t
HighEntrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
dist/index.jsView on unpkg 1848${r}${o}
L1849: `}function TU(e){let t=e.split(/\r?\n/);if(t[0]?.trim()!=="---")return{};let n=t.findIndex((r,i)=>i>0&&r.trim()==="---");if(n===-1)return{};let o={};for(let r of t.slice(1,n)){let ...
L1850: `).replace(/\r/gu,`
...
L1854: `),numLines:u.length,...l!==void 0?{appliedLimit:l}:{},...(e.offset??0)>0?{appliedOffset:e.offset}:{}}}if(o==="count"){let{items:a,appliedLimit:l}=yf(t,e.headLimit,e.offset),u=a.ma...
L1855: `),numMatches:c,...l!==void 0?{appliedLimit:l}:{},...(e.offset??0)>0?{appliedOffset:e.offset}:{}}}let{items:r,appliedLimit:i}=yf(t,e.headLimit,e.offset),s=r.map(n);return{mode:o,nu...
L1856: import pty
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L1848 1/*! Author: Ty <ty29022@gmail.com> */
L2: var aR=Object.defineProperty;var y=(e,t)=>()=>(e&&(t=e(e=0)),t);var uR=(e,t)=>{for(var n in t)aR(e,n,{get:t[n],enumerable:!0})};var be,p,Fn,Yr,Xr,Ln,sn,Ft,Lt,bo,Io,Ao,Zr,D,Fs,Qr,E=...
L3: `)),n.length>0?n.join(`
...
L14: `)}}function Bn(e,t,n){if(n.length===0)return;let o=e[e.length-1];if(o?.role===t){o.content.push(...n);return}e.push({role:t,content:[...n]})}function BC(e,t,n){return typeof e=="s...
L15: `):e.type==="text"?e.text:JSON.stringify(e)}function aM(e){return typeof e=="string"?e:Array.isArray(e)?e.map(t=>t.type==="input_text"?{type:"text",text:t.text}:t.type==="input_ima...
L16: `),imageContent:o}}if(cn(e)&&e.type==="text"&&typeof e.text=="string")return{toolContent:e.text,imageContent:[]};if(cn(e)&&e.type==="image"){let n=NM(e),o=
LowWeak Crypto
Package source references weak cryptographic algorithms.
dist/index.jsView on unpkg · L1