@cloop/runner
⚠ Under reviewMake your computer and your agents Cloop machines: device login, the machine daemon, the Cloop MCP server, and Claude Code hooks.
This report shows the evidence for @cloop/runner@0.3.46. 0 of 34 known versions are blocked or flagged. See all versions.
Static Scan Results
scanned 6h ago · by rust-scannerStatic analysis completed at 93.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.
Decision evidence
public snapshotSource & flagged code
4 flaggedPackage source references child process execution.
dist/chunk-SBYSVZ7J.jsView on unpkg · L84This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/chunk-42ABTDLJ.jsView on unpkgFindings
Affected versions and remediation
This report applies to @cloop/runner@0.3.46.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @cloop/runner@0.3.46 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.