registry / @cotal-ai/connector-jcode / 0.132.4
@cotal-ai/connector-jcode@0.132.4
Cotal connector for Jcode: a host-mode mesh peer driven through Jcode's Harness API bridge.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe automatic credential handoff is relevant to a Jcode connector, but it gives Jcode access to other AI providers’ logins by default without clear disclosure or an opt-in. The source does not establish that those credentials are sent to an unrelated host, so this merits a warning rather than a malicious verdict.
Static reason
One or more suspicious static signals were detected.
Trigger
Starting the Jcode host.
Impact
Jcode can access those other providers’ logins and potentially act as the user; the package does not disclose this handoff in its manifest.
Mechanism
The host copies credential files from the user’s home into a private Jcode home, then launches Jcode’s API bridge with that home configured.
AI rationale
The automatic credential handoff is relevant to a Jcode connector, but it gives Jcode access to other AI providers’ logins by default without clear disclosure or an opt-in. The source does not establish that those credentials are sent to an unrelated host, so this merits a warning rather than a malicious verdict.
Evidence
dist/host.js~/.claude/.credentials.json~/.codex/auth.json
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The host’s credential inventory includes external AI tool logins such as Claude and Codex.
- Host startup mirrors credentials from the user’s home into the connector’s private Jcode home.
- The connector launches Jcode’s API bridge with that private home as JCODE_HOME.
Evidence against
- The package describes itself as a Jcode connector, so providing Jcode with model credentials is relevant to its purpose.
- The manifest declares no install lifecycle hooks.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
6 flaggeddist/host.jsView file
50${cb}`:comment}}if(afterDoc){for(let i=0;i<this.errors.length;++i)doc.errors.push(this.errors[i]);for(let i=0;i<this.warnings.length;++i)doc.warnings.push(this.warnings[i])}else{do...
L51: ${end.comment}`:end.comment}this.doc.range[2]=end.offset;break}default:this.errors.push(new errors.YAMLParseError(getErrorPos(token2),"UNEXPECTED_TOKEN",`Unsupported token ${token2...
L52: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
49${cb}`:comment}else{const cb=dc.commentBefore;dc.commentBefore=cb?`${comment}
L50: ${cb}`:comment}}if(afterDoc){for(let i=0;i<this.errors.length;++i)doc.errors.push(this.errors[i]);for(let i=0;i<this.warnings.length;++i)doc.warnings.push(this.warnings[i])}else{do...
L51: ${end.comment}`:end.comment}this.doc.range[2]=end.offset;break}default:this.errors.push(new errors.YAMLParseError(getErrorPos(token2),"UNEXPECTED_TOKEN",`Unsupported token ${token2...
L52: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/host.jsView on unpkg · L49Findings
4 High3 Medium5 Low
HighChild Processdist/host.js
HighSame File Env Network Executiondist/host.js
HighCommand Output Exfiltrationdist/host.js
HighCross File Remote Execution Contextdist/host.js
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencedist/host.js
LowScripts Present
LowEvaldist/host.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @cotal-ai/connector-jcode@0.132.4.
See all versions of @cotal-ai/connector-jcode for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/connector-jcode@0.132.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.