registry / @cnrai/pave / 0.11.51

@cnrai/pave@0.11.51

PAVE - Personal AI Virtual Environment. AI agent framework for the terminal.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsMinifiedTrivial

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 472 KB of source

Oversized source lightweight scan

pave.js45.6 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsDynamicRequireHighEntropyStringsMinified

Source & flagged code

4 flagged

sandbox/permission.jsView file

Lines 1-1javascript

1const a0p=a0d;(function(stringArrayFunction,comparisonValue){const l=a0d,a=stringArrayFunction();while(!![]){try{const expression=-parseInt(l(0x121))/0x1+-parseInt(l(0x23e))/0x2+parseInt(l(0x19f))/0x3*(-parseInt(l(0x105))/0x4)+-parseInt(l(0x210))/0x5*(-parseInt(l(0x18d))/0x6)+-parseInt(l(0x1c5))/0x7+parseInt(l(0x211))/0x8+-parseInt(l(0xfd))/0x9*(-parseInt(l(0x1a7))/0xa);if(expression===comparisonValue)break;else a['push'](a['shift']());}catch(b){a['push'](a['shift']());}}}(a0c,0xdfa2f));const a0b=(function(){let a=!![];return function(context,b){const c=a?function(){const m=a0d;if(b){const d=b ...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

sandbox/permission.jsView on unpkg · L1

Medium

Dynamic Require

Package source references dynamic require/import behavior.

sandbox/permission.jsView on unpkg · L1

Long lines were clipped for display.

pave.jsView file

•path = pave.js kind = oversized_source_file sizeBytes = 47823630 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

pave.jsView on unpkg

•path = pave.js kind = oversized_cli_entrypoint sizeBytes = 47823630 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

pave.jsView on unpkg

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code