registry / @co0ontty/wand / 2.3.3

@co0ontty/wand@2.3.3

⚠ Under review

A web terminal for local CLI tools like Claude.

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis flagged 17 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 66 file(s), 2.48 MB of source, external domains: github.com, home.huniu.fun, www.apple.com, www.w3.org

Source & flagged code

8 flagged

dist/config.jsView file

Lines 17-57javascript

17 "defaultMode",

18 "defaultCwd",

19 "defaultModel",

20 "defaultThinkingEffort",

21 "structuredRunner",

22 "language",

23 "cardDefaults",

24 "inheritEnv",

25];

26const PREFERENCE_KEY_SET = new Set(PREFERENCE_KEYS);

27function preferenceStorageKey(key) {

28 return `pref:${key}`;

29}

30export function isPreferenceKey(key) {

31 return PREFERENCE_KEY_SET.has(key);

32}

33export const defaultConfig = () => ({

34 host: "127.0.0.1",

35 port: 8443,

36 https: false,

37 password: "change-me",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/config.jsView on unpkg · L37

38 // 非 root 启动时才有资格用 Claude 的 permission-bypass（root 会被 Claude CLI 拒绝），

39 // 所以这种环境下把默认执行模式抬到「托管」——开箱即得自动确认权限的全自主体验。

40 // root 启动则保守回落到「default」（托管在 root 下也只能降级成 acceptEdits）。

41 // 注意：defaultMode 是偏好字段，只存 SQLite、不写 config.json（见 stripPreferenceFields），

42 // 这里仅作为「用户从未在设置里显式选过模式」时的回落值——显式选择始终优先。

43 defaultMode: isRunningAsRoot() ? "default" : "managed",

44 shell: process.env.SHELL || "/bin/bash",

45 defaultCwd: process.cwd(),

46 startupCommands: [],

47 allowedCommandPrefixes: [],

48 shortcutLogMaxBytes: 10 * 1024 * 1024,

49 language: "",

50 android: defaultAndroidApkConfig(),

51 macos: defaultMacosDmgConfig(),

52 cardDefaults: defaultCardExpandDefaults(),

53 defaultModel: "",

54 defaultThinkingEffort: "off",

55 structuredRunner: "cli",

56 inheritEnv: true,

57 commandPresets: [

dist/git-utils.jsView file

Lines 1-21javascript

1import { execFileSync } from "node:child_process";

2export function runGit(args, cwd, opts = {}) {

High

Child Process

Package source references child process execution.

dist/git-utils.jsView on unpkg · L1

3 return execFileSync("git", args, {

dist/server.jsView file

Lines 1-59javascript

1import crypto from "node:crypto";

2import { compareApkInstallOrder, compareSemver, extractSemver } from "./version-utils.js";

3import compression from "compression";

4import express from "express";

5import { createReadStream, existsSync, readFileSync, writeFileSync } from "node:fs";

dist/password-manager.jsView file

Lines 1-21javascript

1import crypto from "node:crypto";

2export const DEFAULT_BROWSER_EXTENSION_BASE_URL = "https://home.huniu.fun:8183";

3export const DEFAULT_PASSWORD_VAULT_ID = "personal";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/password-manager.jsView on unpkg · L1

dist/tui/commands.jsView file

Lines 1-24javascript

1/**

2 * TUI 运维操作命令集合。

3 *

4 * 所有命令统一返回 CommandResult，UI 层负责把结果渲染到 toast / 弹窗 / 日志。

5 * 命令本身不直接写 stdout / stderr —— TUI 模式下 stderr 已经被 log-bus 劫持。

6 */

7import { spawn, spawnSync } from "node:child_process";

8import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync, unlinkSync } from "node:fs";

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

Source & flagged code

8 flagged · loading source

dist/config.jsView file

37patternName = generic_password severity = medium line = 37 matchedText = password...me",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/config.jsView on unpkg · L37

dist/git-utils.jsView file

1import { execFileSync } from "node:child_process"; L2: export function runGit(args, cwd, opts = {}) {

High

Child Process

Package source references child process execution.

dist/git-utils.jsView on unpkg · L1

dist/server.jsView file

39import { isPathWithinBase, isBlockedFolderPath, normalizeFolderPath } from "./middleware/path-safety.js"; L40: const execAsync = promisify(exec); L41: const SERVER_MODULE_DIR = path.dirname(new URL(import.meta.url).pathname);

High

Shell

Package source references shell execution.

dist/server.jsView on unpkg · L39

6Cross-file remote execution chain: dist/server.js spawns dist/web-ui/content/vendor/qrcode/qrcode.bundle.js; helper contains network access plus dynamic code execution. L6: import { lstat, mkdir, readdir, readFile, rename, stat, unlink, writeFile } from "node:fs/promises"; L7: import { createServer as createHttpServer } from "node:http"; L8: import { createServer as createHttpsServer } from "node:https"; L9: import { exec, spawn } from "node:child_process"; L10: import os from "node:os"; ... L43: // ── Package info ── L44: const PKG_JSON = JSON.parse(readFileSync(path.join(RUNTIME_ROOT_DIR, "package.json"), "utf8")); L45: const PKG_NAME = PKG_JSON.name; ... L109: if (asset) L110: return { tagName: release.tag_name, body: release.body, asset }; L111: } ... L317: try {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/server.jsView on unpkg · L6

6Detached bundled service listener: dist/server.js launches a Node helper and exposes a broad-bound HTTP listener. L6: import { lstat, mkdir, readdir, readFile, rename, stat, unlink, writeFile } from "node:fs/promises"; L7: import { createServer as createHttpServer } from "node:http"; L8: import { createServer as createHttpsServer } from "node:https"; L9: import { exec, spawn } from "node:child_process"; L10: import os from "node:os"; ... L43: // ── Package info ── L44: const PKG_JSON = JSON.parse(readFileSync(path.join(RUNTIME_ROOT_DIR, "package.json"), "utf8")); L45: const PKG_NAME = PKG_JSON.name; ... L109: if (asset) L110: return { tagName: release.tag_name, body: release.body, asset }; L111: } ... L317: try {

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

dist/server.jsView on unpkg · L6

dist/password-manager.jsView file

1import crypto from "node:crypto"; L2: export const DEFAULT_BROWSER_EXTENSION_BASE_URL = "https://home.huniu.fun:8183"; L3: export const DEFAULT_PASSWORD_VAULT_ID = "personal"; ... L277: if (/^[0-9a-f]+$/i.test(cleaned) && cleaned.length % 2 === 0) { L278: return Buffer.from(cleaned, "hex"); L279: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/password-manager.jsView on unpkg · L1

dist/tui/commands.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @co0ontty/wand@2.3.1 matchedIdentity = npm:QGNvMG9udHR5L3dhbmQ:2.3.1 similarity = 0.922 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/tui/commands.jsView on unpkg

4* 所有命令统一返回 CommandResult，UI 层负责把结果渲染到 toast / 弹窗 / 日志。 L5: * 命令本身不直接写 stdout / stderr —— TUI 模式下 stderr 已经被 log-bus 劫持。 L6: */ L7: import { spawn, spawnSync } from "node:child_process"; L8: import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync, unlinkSync } from "node:fs"; ... L38: stdio: "inherit", L39: env: process.env, L40: }); ... L56: const raw = readFileSync(path.resolve(TUI_MODULE_DIR, "..", "build-info.json"), "utf8"); L57: const parsed = JSON.parse(raw); L58: return typeof parsed.channel === "string" ? parsed.channel : null; ... L117: export function openInBrowser(url) {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/tui/commands.jsView on unpkg · L4

Findings

1 Critical4 High5 Medium7 Low

CriticalPrevious Version Dangerous Deltadist/tui/commands.js

HighChild Processdist/git-utils.js

HighShelldist/server.js

HighCross File Remote Execution Contextdist/server.js

HighSpawned Bundled Service Listenerdist/server.js

MediumSecret Patterndist/config.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/tui/commands.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/password-manager.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

8 flagged

dist/config.jsView file

Lines 17-57javascript

17 "defaultMode",

18 "defaultCwd",

19 "defaultModel",

20 "defaultThinkingEffort",

21 "structuredRunner",

22 "language",

23 "cardDefaults",

24 "inheritEnv",

25];

26const PREFERENCE_KEY_SET = new Set(PREFERENCE_KEYS);

27function preferenceStorageKey(key) {

28 return `pref:${key}`;

29}

30export function isPreferenceKey(key) {

31 return PREFERENCE_KEY_SET.has(key);

32}

33export const defaultConfig = () => ({

34 host: "127.0.0.1",

35 port: 8443,

36 https: false,

37 password: "change-me",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/config.jsView on unpkg · L37

38 // 非 root 启动时才有资格用 Claude 的 permission-bypass（root 会被 Claude CLI 拒绝），

39 // 所以这种环境下把默认执行模式抬到「托管」——开箱即得自动确认权限的全自主体验。

40 // root 启动则保守回落到「default」（托管在 root 下也只能降级成 acceptEdits）。

41 // 注意：defaultMode 是偏好字段，只存 SQLite、不写 config.json（见 stripPreferenceFields），

42 // 这里仅作为「用户从未在设置里显式选过模式」时的回落值——显式选择始终优先。

43 defaultMode: isRunningAsRoot() ? "default" : "managed",

44 shell: process.env.SHELL || "/bin/bash",

45 defaultCwd: process.cwd(),

46 startupCommands: [],

47 allowedCommandPrefixes: [],

48 shortcutLogMaxBytes: 10 * 1024 * 1024,

49 language: "",

50 android: defaultAndroidApkConfig(),

51 macos: defaultMacosDmgConfig(),

52 cardDefaults: defaultCardExpandDefaults(),

53 defaultModel: "",

54 defaultThinkingEffort: "off",

55 structuredRunner: "cli",

56 inheritEnv: true,

57 commandPresets: [

dist/git-utils.jsView file

Lines 1-21javascript

1import { execFileSync } from "node:child_process";

2export function runGit(args, cwd, opts = {}) {

High

Child Process

Package source references child process execution.

dist/git-utils.jsView on unpkg · L1

3 return execFileSync("git", args, {

dist/server.jsView file

Lines 1-59javascript

1import crypto from "node:crypto";

2import { compareApkInstallOrder, compareSemver, extractSemver } from "./version-utils.js";

3import compression from "compression";

4import express from "express";

5import { createReadStream, existsSync, readFileSync, writeFileSync } from "node:fs";

dist/password-manager.jsView file

Lines 1-21javascript

1import crypto from "node:crypto";

2export const DEFAULT_BROWSER_EXTENSION_BASE_URL = "https://home.huniu.fun:8183";

3export const DEFAULT_PASSWORD_VAULT_ID = "personal";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/password-manager.jsView on unpkg · L1

dist/tui/commands.jsView file

Lines 1-24javascript

1/**

2 * TUI 运维操作命令集合。

3 *

4 * 所有命令统一返回 CommandResult，UI 层负责把结果渲染到 toast / 弹窗 / 日志。

5 * 命令本身不直接写 stdout / stderr —— TUI 模式下 stderr 已经被 log-bus 劫持。

6 */

7import { spawn, spawnSync } from "node:child_process";

8import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync, unlinkSync } from "node:fs";

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.