@dev-anywhere/proxy@0.4.84

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

User runs dev-anywhere init/serve or starts a proxied claude/codex session.

Remote client connected to the same relay can view and drive proxied sessions by design; no evidence of hidden exfiltration or attacker-controlled endpoint.

user-configured WebSocket relay controlling local AI CLI sessions

The dangerous primitives are aligned with the package description and activated by explicit runtime use, while install-time behavior is limited to chmod for node-pty. I found no hardcoded exfiltration endpoint, credential harvesting beyond user-configured relay tokens/provider env, persistence outside app state, destructive action, or AI-agent control-surface mutation at lifecycle time.