13${A}
L14: ${m}`)}return A},X=Jj(d2)});var wu,_w=$(()=>{Bt();Ft();nt();Ot();wu=class extends Qe{retrieve(e,r={},n){let{betas:i}=r??{};return this._client.get(X`/v1/deployment_runs/${e}?beta=t...
L15: `);return e[e.length-1]===""&&e.pop(),e}function v7(t,e){return/^[\x20-\x7E]+$/.test(e)&&!/[\\^#]/.test(e)&&!(t==="unzip"&&e.startsWith("-"))}function F7(t,e,r){let n=V2(e),i=V2(r)...
5`);let n;for(;(n=ZK.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let A=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),A==='"'&&(s=s.replace(/\\n/g,`
L6: `),s=s.replace(/\\r/g,"\r")),e[i]=s}return e}function ej(t){t=t||{};let e=e1(t);t.path=e;let r=Zr.configDotenv(t);if(!r.parsed){let A=new Error(`MISSING_DATA: Cannot parse ${e} for...
L7: `):[]}};xi=new WeakMap,vi=new WeakMap;qa.NEWLINE_CHARS=new Set([`
...
L13: ${A}
L14: ${m}`)}return A},X=Jj(d2)});var wu,_w=$(()=>{Bt();Ft();nt();Ot();wu=class extends Qe{retrieve(e,r={},n){let{betas:i}=r??{};return this._client.get(X`/v1/deployment_runs/${e}?beta=t...
L15: `);return e[e.length-1]===""&&e.pop(),e}function v7(t,e){return/^[\x20-\x7E]+$/.test(e)&&!/[\\^#]/.test(e)&&!(t==="unzip"&&e.startsWith("-"))}function F7(t,e,r){let n=V2(e),i=
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.mjsView on unpkg · L5 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/cli.mjs:
`),s=s.replace(/\\r/g,"\r")),e[i]=s}return e}function ej(t){t=t||{};let e=e1(t);t.path=e;let r=Zr.configDotenv(t);if(!r.parsed){let A=new Error(`MISSING_DATA: Cannot parse ${e} for...
${m}`)}return A},X=Jj(d2)});var wu,_w=$(()=>{Bt();Ft();nt();Ot();wu=class extends Qe{retrieve(e,r={},n){let{betas:i}=r??{};return this._client.get(X`/v1/deployment_runs/${e}?beta=t...
`);return e[e.length-1]===""&&e.pop(),e}function v7(t,e){return/^[\x20-\x7E]+$/.test(e)&&!/[\\^#]/.test(e)&&!(t==="unzip"&&e.startsWith("-"))}function F7(t,e,r){let n=V2(e),i=V2(r)...
`,{flag:"wx",mode:384}),["-xf",e,"-C",r,"-X",i])}async function M7(t,e){let r
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/cli.mjsView on unpkg •Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
dist/cli.mjs:
`),s=s.replace(/\\r/g,"\r")),e[i]=s}return e}function ej(t){t=t||{};let e=e1(t);t.path=e;let r=Zr.configDotenv(t);if(!r.parsed){let A=new Error(`MISSING_DATA: Cannot parse ${e} for...
`,"\r"]);qa.NEWLINE_REGEXP=/\r\n|[\n\r]/g});async function*n2(t,e){if(!t.body)throw e.abort(),typeof globalThis.navigator<"u"&&globalThis.navigator.product==="ReactNative"?new ne("...
${m}`)}return A},X=Jj(d2)});var wu,_w=$(()=>{Bt();Ft();nt();Ot();wu=class extends Qe{retrieve(e,r={},n){let{betas:i}=r??{};return this._client.get(X`/v1/deployment_runs/${e}?beta=t...
`);return e[e.length-1]===""&&e.pop(),e}function v7(t,e){return/^[\x20-\x7E]+$/.test(e)&&!/[\\^#]/
HighEntrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
dist/cli.mjsView on unpkg 3const require = __bcodeCreateRequire(import.meta.url);
L4: var HK=Object.create;var j0=Object.defineProperty;var zK=Object.getOwnPropertyDescriptor;var JK=Object.getOwnPropertyNames;var YK=Object.getPrototypeOf,qK=Object.prototype.hasOwnPr...
L5: `);let n;for(;(n=ZK.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let A=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),A==='"'&&(s=s.replace(/\\n/g,`
L6: `),s=s.replace(/\\r/g,"\r")),e[i]=s}return e}function ej(t){t=t||{};let e=e1(t);t.path=e;let r=Zr.configDotenv(t);if(!r.parsed){let A=new Error(`MISSING_DATA: Cannot parse ${e} for...
L7: `):[]}};xi=new WeakMap,vi=new WeakMap;qa.NEWLINE_CHARS=new Set([`
...
L13: ${A}
L14: ${m}`)}return A},X=Jj(d2)});var wu,_w=$(()=>{Bt();Ft();nt();Ot();wu=class extends Qe{retrieve(e,r={},n){let{betas:i}=
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/cli.mjsView on unpkg · L3 5`);let n;for(;(n=ZK.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let A=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),A==='"'&&(s=s.replace(/\\n/g,`
L6: `),s=s.replace(/\\r/g,"\r")),e[i]=s}return e}function ej(t){t=t||{};let e=e1(t);t.path=e;let r=Zr.configDotenv(t);if(!r.parsed){let A=new Error(`MISSING_DATA: Cannot parse ${e} for...
L7: `):[]}};xi=new WeakMap,vi=new WeakMap;qa.NEWLINE_CHARS=new Set([`
...
L13: ${A}
L14: ${m}`)}return A},X=Jj(d2)});var wu,_w=$(()=>{Bt();Ft();nt();Ot();wu=class extends Qe{retrieve(e,r={},n){let{betas:i}=r??{};return this._client.get(X`/v1/deployment_runs/${e}?beta=t...
L15: `);return e[e.length-1]===""&&e.pop(),e}function v7(t,e){return/^[\x20-\x7E]+$/.test(e)&&!/[\\^#]/.test(e)&&!(t==="unzip"&&e.startsWith("-"))}function F7(t,e,r){let n=V2(e),i=
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
dist/cli.mjsView on unpkg · L5 3Trigger-reachable command-output exfiltration chain: manifest.main -> dist/cli.mjs
L3: const require = __bcodeCreateRequire(import.meta.url);
L4: var HK=Object.create;var j0=Object.defineProperty;var zK=Object.getOwnPropertyDescriptor;var JK=Object.getOwnPropertyNames;var YK=Object.getPrototypeOf,qK=Object.prototype.hasOwnPr...
L5: `);let n;for(;(n=ZK.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let A=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),A==='"'&&(s=s.replace(/\\n/g,`
L6: `),s=s.replace(/\\r/g,"\r")),e[i]=s}return e}function ej(t){t=t||{};let e=e1(t);t.path=e;let r=Zr.configDotenv(t);if(!r.parsed){let A=new Error(`MISSING_DATA: Cannot parse ${e} for...
L7: `):[]}};xi=new WeakMap,vi=new WeakMap;qa.NEWLINE_CHARS=new Set([`
...
L13: ${A}
L14: ${m}`)}return A},X=Jj(d2)});var wu
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/cli.mjsView on unpkg · L3 2import { createRequire as __bcodeCreateRequire } from 'node:module';
L3: const require = __bcodeCreateRequire(import.meta.url);
L4: var HK=Object.create;var j0=Object.defineProperty;var zK=Object.getOwnPropertyDescriptor;var JK=Object.getOwnPropertyNames;var YK=Object.getPrototypeOf,qK=Object.prototype.hasOwnPr...
MediumDynamic Require
Package source references dynamic require/import behavior.
dist/cli.mjsView on unpkg · L2 3const require = __bcodeCreateRequire(import.meta.url);
L4: var HK=Object.create;var j0=Object.defineProperty;var zK=Object.getOwnPropertyDescriptor;var JK=Object.getOwnPropertyNames;var YK=Object.getPrototypeOf,qK=Object.prototype.hasOwnPr...
L5: `);let n;for(;(n=ZK.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let A=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),A==='"'&&(s=s.replace(/\\n/g,`
L6: `),s=s.replace(/\\r/g,"\r")),e[i]=s}return e}function ej(t){t=t||{};let e=e1(t);t.path=e;let r=Zr.configDotenv(t);if(!r.parsed){let A=new Error(`MISSING_DATA: Cannot parse ${e} for...
L7: `):[]}};xi=new WeakMap,vi=new WeakMap;qa.NEWLINE_CHARS=new Set([`
...
L13: ${A}
L14: ${m}`)}return A},X=Jj(d2)});var wu,_w=$(()=>{Bt();Ft();nt();Ot();wu=class extends Qe{retrieve(e,r={},n){let{betas:i}=
LowWeak Crypto
Package source references weak cryptographic algorithms.
dist/cli.mjsView on unpkg · L3