registry / @cotal-ai/connector-jcode / 0.141.4
@cotal-ai/connector-jcode@0.141.4
Cotal connector for Jcode: a host-mode mesh peer driven through Jcode's Harness API bridge.
AI Security Review
scanned 13h ago · by lpm-firewall-aiThe manifest identifies this as a Jcode Harness API connector, and the flagged process and credential behavior launches that bridge with optional Jcode credential inheritance. The manifest declares no install lifecycle scripts, and no unrelated credential exfiltration or unauthorized account action was established.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
When the host launches a Jcode instance at runtime.
Impact
The bridge can use the inherited Jcode credentials for the connector's intended Jcode service interactions.
Mechanism
Optionally copies Jcode login files into the instance home, then starts the Jcode api-bridge with that home and a local socket.
AI rationale
The manifest identifies this as a Jcode Harness API connector, and the flagged process and credential behavior launches that bridge with optional Jcode credential inheritance. The manifest declares no install lifecycle scripts, and no unrelated credential exfiltration or unauthorized account action was established.
Evidence
Jcode instance home credential filesJcode runtime socket files
Network endpoints4
broker.cotal.aicotal.aidocs.cotal.aijcode.sh
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a Cotal connector that drives Jcode through its Harness API bridge.
- No install or lifecycle scripts are declared in the manifest.
- At runtime, the host can inherit Jcode credentials into its instance home and launches Jcode's local api-bridge process.
Evidence against
- Credential inheritance and process execution are tied to running the connector's Jcode bridge; no unrelated credential collection or transmission was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
11 flaggeddist/host.jsView file
111L112: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}}}for(const entry of ctx.seen.entries()){const seen=entry[1];if(schema===entry[0]){extractToDef(e...
L113: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
111L112: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}}}for(const entry of ctx.seen.entries()){const seen=entry[1];if(schema===entry[0]){extractToDef(e...
L113: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
L114: ${context}
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/host.jsView on unpkg · L111109L110: `)}}doc.write(`payload.value = newResult;`);doc.write(`return payload;`);const fn=doc.compile();return(payload,ctx)=>fn(shape,payload,ctx)};let fastpass;const isObject2=isObject;co...
L111:
L112: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}}}for(const entry of ctx.seen.entries()){const seen=entry[1];if(schema===entry[0]){extractToDef(e...
L113: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
L114: ${context}
Findings
9 High4 Medium5 Low
HighChild Processdist/host.js
HighSame File Env Network Executiondist/host.js
HighCommand Output Exfiltrationdist/host.js
HighCross File Remote Execution Contextdist/host.js
HighShips High Entropy Blobdist/docs-bundle.bin
HighKnown Malware Source Similaritydist/host.js
HighKnown Malware Source Similaritydist/index.js
HighKnown Malware Source Similaritydist/mcp.js
HighKnown Malware Source Fingerprint Signaturedist/host.js
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobdist/docs-bundle.bin
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @cotal-ai/connector-jcode@0.141.4.
See all versions of @cotal-ai/connector-jcode for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/connector-jcode@0.141.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.