registry / @cotal-ai/connector-jcode / 0.132.3
@cotal-ai/connector-jcode@0.132.3
Cotal connector for Jcode: a host-mode mesh peer driven through Jcode's Harness API bridge.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package has no install hook, and the flagged process and credential handling serve its Jcode connector function; the inspected source shows no attack behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
When the connector host starts the Jcode API bridge.
Impact
No unauthorized credential transfer or other malicious impact was identified in the inspected source.
Mechanism
Starts `jcode api-bridge` with a local socket and, by default, makes recognized Jcode and external-agent login files available in its isolated home.
AI rationale
The package has no install hook, and the flagged process and credential handling serve its Jcode connector function; the inspected source shows no attack behavior.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install, preinstall, or postinstall hook; its scripts are for typechecking, tests, and building.
- The host launcher starts a local `jcode api-bridge` process with a local API socket.
- Login inheritance is part of that bridge setup and uses Jcode and external-agent credential files, consistent with making Jcode logins available to the connector.
Evidence against
- The package exposes a JavaScript import entry point and bundles a host launcher, so runtime process execution is expected for its connector function.
- Credential inheritance defaults to enabled, but the inspected flow stages credentials for the local Jcode bridge; no unauthorized credential transfer or attack was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
6 flaggeddist/host.jsView file
50${cb}`:comment}}if(afterDoc){for(let i=0;i<this.errors.length;++i)doc.errors.push(this.errors[i]);for(let i=0;i<this.warnings.length;++i)doc.warnings.push(this.warnings[i])}else{do...
L51: ${end.comment}`:end.comment}this.doc.range[2]=end.offset;break}default:this.errors.push(new errors.YAMLParseError(getErrorPos(token2),"UNEXPECTED_TOKEN",`Unsupported token ${token2...
L52: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
49${cb}`:comment}else{const cb=dc.commentBefore;dc.commentBefore=cb?`${comment}
L50: ${cb}`:comment}}if(afterDoc){for(let i=0;i<this.errors.length;++i)doc.errors.push(this.errors[i]);for(let i=0;i<this.warnings.length;++i)doc.warnings.push(this.warnings[i])}else{do...
L51: ${end.comment}`:end.comment}this.doc.range[2]=end.offset;break}default:this.errors.push(new errors.YAMLParseError(getErrorPos(token2),"UNEXPECTED_TOKEN",`Unsupported token ${token2...
L52: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/host.jsView on unpkg · L49Findings
4 High2 Medium6 Low
HighChild Processdist/host.js
HighSame File Env Network Executiondist/host.js
HighCommand Output Exfiltrationdist/host.js
HighCross File Remote Execution Contextdist/host.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowEvaldist/host.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @cotal-ai/connector-jcode@0.132.3.
See all versions of @cotal-ai/connector-jcode for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/connector-jcode@0.132.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.