13${A}
L14: ${E}`)}return A},Z=Xj(B2)});var bu,Fw=$(()=>{Bt();Ft();nt();Ot();bu=class extends we{retrieve(e,r={},n){let{betas:i}=r??{};return this._client.get(Z`/v1/deployment_runs/${e}?beta=t...
L15: `);return e[e.length-1]===""&&e.pop(),e}function G7(t,e){return/^[\x20-\x7E]+$/.test(e)&&!/[\\^#]/.test(e)&&!(t==="unzip"&&e.startsWith("-"))}function O7(t,e,r){let n=Z2(e),i=Z2(r)...
5`);let n;for(;(n=aj.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let A=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),A==='"'&&(s=s.replace(/\\n/g,`
L6: `),s=s.replace(/\\r/g,"\r")),e[i]=s}return e}function Aj(t){t=t||{};let e=s1(t);t.path=e;let r=$r.configDotenv(t);if(!r.parsed){let A=new Error(`MISSING_DATA: Cannot parse ${e} for...
L7: `):[]}};xi=new WeakMap,vi=new WeakMap;Va.NEWLINE_CHARS=new Set([`
...
L13: ${A}
L14: ${E}`)}return A},Z=Xj(B2)});var bu,Fw=$(()=>{Bt();Ft();nt();Ot();bu=class extends we{retrieve(e,r={},n){let{betas:i}=r??{};return this._client.get(Z`/v1/deployment_runs/${e}?beta=t...
L15: `);return e[e.length-1]===""&&e.pop(),e}function G7(t,e){return/^[\x20-\x7E]+$/.test(e)&&!/[\\^#]/.test(e)&&!(t==="unzip"&&e.startsWith("-"))}function O7(t,e,r){let n=Z2(e),i=
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.mjsView on unpkg · L5 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/cli.mjs:
`),s=s.replace(/\\r/g,"\r")),e[i]=s}return e}function Aj(t){t=t||{};let e=s1(t);t.path=e;let r=$r.configDotenv(t);if(!r.parsed){let A=new Error(`MISSING_DATA: Cannot parse ${e} for...
${E}`)}return A},Z=Xj(B2)});var bu,Fw=$(()=>{Bt();Ft();nt();Ot();bu=class extends we{retrieve(e,r={},n){let{betas:i}=r??{};return this._client.get(Z`/v1/deployment_runs/${e}?beta=t...
`);return e[e.length-1]===""&&e.pop(),e}function G7(t,e){return/^[\x20-\x7E]+$/.test(e)&&!/[\\^#]/.test(e)&&!(t==="unzip"&&e.startsWith("-"))}function O7(t,e,r){let n=Z2(e),i=Z2(r)...
`,{flag:"wx",mode:384}),["-xf",e,"-C",r,"-X",i])}async function J7(t,e){let r
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/cli.mjsView on unpkg 3const require = __bcodeCreateRequire(import.meta.url);
L4: var KK=Object.create;var ew=Object.defineProperty;var jK=Object.getOwnPropertyDescriptor;var XK=Object.getOwnPropertyNames;var ZK=Object.getPrototypeOf,$K=Object.prototype.hasOwnPr...
L5: `);let n;for(;(n=aj.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let A=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),A==='"'&&(s=s.replace(/\\n/g,`
L6: `),s=s.replace(/\\r/g,"\r")),e[i]=s}return e}function Aj(t){t=t||{};let e=s1(t);t.path=e;let r=$r.configDotenv(t);if(!r.parsed){let A=new Error(`MISSING_DATA: Cannot parse ${e} for...
L7: `):[]}};xi=new WeakMap,vi=new WeakMap;Va.NEWLINE_CHARS=new Set([`
...
L13: ${A}
L14: ${E}`)}return A},Z=Xj(B2)});var bu,Fw=$(()=>{Bt();Ft();nt();Ot();bu=class extends we{retrieve(e,r={},n){let{betas:i}=
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/cli.mjsView on unpkg · L3 5`);let n;for(;(n=aj.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let A=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),A==='"'&&(s=s.replace(/\\n/g,`
L6: `),s=s.replace(/\\r/g,"\r")),e[i]=s}return e}function Aj(t){t=t||{};let e=s1(t);t.path=e;let r=$r.configDotenv(t);if(!r.parsed){let A=new Error(`MISSING_DATA: Cannot parse ${e} for...
L7: `):[]}};xi=new WeakMap,vi=new WeakMap;Va.NEWLINE_CHARS=new Set([`
...
L13: ${A}
L14: ${E}`)}return A},Z=Xj(B2)});var bu,Fw=$(()=>{Bt();Ft();nt();Ot();bu=class extends we{retrieve(e,r={},n){let{betas:i}=r??{};return this._client.get(Z`/v1/deployment_runs/${e}?beta=t...
L15: `);return e[e.length-1]===""&&e.pop(),e}function G7(t,e){return/^[\x20-\x7E]+$/.test(e)&&!/[\\^#]/.test(e)&&!(t==="unzip"&&e.startsWith("-"))}function O7(t,e,r){let n=Z2(e),i=
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
dist/cli.mjsView on unpkg · L5 3Trigger-reachable command-output exfiltration chain: manifest.main -> dist/cli.mjs
L3: const require = __bcodeCreateRequire(import.meta.url);
L4: var KK=Object.create;var ew=Object.defineProperty;var jK=Object.getOwnPropertyDescriptor;var XK=Object.getOwnPropertyNames;var ZK=Object.getPrototypeOf,$K=Object.prototype.hasOwnPr...
L5: `);let n;for(;(n=aj.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let A=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),A==='"'&&(s=s.replace(/\\n/g,`
L6: `),s=s.replace(/\\r/g,"\r")),e[i]=s}return e}function Aj(t){t=t||{};let e=s1(t);t.path=e;let r=$r.configDotenv(t);if(!r.parsed){let A=new Error(`MISSING_DATA: Cannot parse ${e} for...
L7: `):[]}};xi=new WeakMap,vi=new WeakMap;Va.NEWLINE_CHARS=new Set([`
...
L13: ${A}
L14: ${E}`)}return A},Z=Xj(B2)});var bu
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/cli.mjsView on unpkg · L3 2import { createRequire as __bcodeCreateRequire } from 'node:module';
L3: const require = __bcodeCreateRequire(import.meta.url);
L4: var KK=Object.create;var ew=Object.defineProperty;var jK=Object.getOwnPropertyDescriptor;var XK=Object.getOwnPropertyNames;var ZK=Object.getPrototypeOf,$K=Object.prototype.hasOwnPr...
MediumDynamic Require
Package source references dynamic require/import behavior.
dist/cli.mjsView on unpkg · L2 3const require = __bcodeCreateRequire(import.meta.url);
L4: var KK=Object.create;var ew=Object.defineProperty;var jK=Object.getOwnPropertyDescriptor;var XK=Object.getOwnPropertyNames;var ZK=Object.getPrototypeOf,$K=Object.prototype.hasOwnPr...
L5: `);let n;for(;(n=aj.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let A=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),A==='"'&&(s=s.replace(/\\n/g,`
L6: `),s=s.replace(/\\r/g,"\r")),e[i]=s}return e}function Aj(t){t=t||{};let e=s1(t);t.path=e;let r=$r.configDotenv(t);if(!r.parsed){let A=new Error(`MISSING_DATA: Cannot parse ${e} for...
L7: `):[]}};xi=new WeakMap,vi=new WeakMap;Va.NEWLINE_CHARS=new Set([`
...
L13: ${A}
L14: ${E}`)}return A},Z=Xj(B2)});var bu,Fw=$(()=>{Bt();Ft();nt();Ot();bu=class extends we{retrieve(e,r={},n){let{betas:i}=
LowWeak Crypto
Package source references weak cryptographic algorithms.
dist/cli.mjsView on unpkg · L3