registry / @duckmind/dm-darwin-arm64 / 0.42.5

@duckmind/dm-darwin-arm64@0.42.5

DuckMind (dm) binary payload for darwin arm64

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

WildcardDependency

scanned 168 file(s), 2.64 MB of source, external domains: api.github.com, api.openai.com, chatgpt.com, clerk.consensus.app, consensus.app, copilot.microsoft.com, doi.org, example.com, gemini.google.com, github.com, logically.app, openrouter.ai, raw.githubusercontent.com, shittycodingagent.ai, www.google.com, www.perplexity.ai, www.semanticscholar.org

Source & flagged code

8 flagged

extensions/dm-subagents/install.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import{execSync as z}from"node:child_process";import*as j from"node:fs";import*as q from"node:path";import*as B from"node:os";var b=q.join

Source & flagged code

8 flagged · loading source

extensions/dm-subagents/install.mjsView file

1#!/usr/bin/env node L2: import{execSync as z}from"node:child_process";import*as j from"node:fs";import*as q from"node:path";import*as B from"node:os";var b=q.join(B.homedir(),".dm","agent","extensions","s... L3: dm-subagents - DM extension for delegating tasks to subagents

High

Child Process

Package source references child process execution.

extensions/dm-subagents/install.mjsView on unpkg · L1

extensions/dm-subagents/src/runs/shared/acceptance.tsView file

724env: { ...process.env, ...(command.env ?? {}) }, L725: shell: true, L726: stdio: ["ignore", "pipe", "pipe"],

High

Shell

Package source references shell execution.

extensions/dm-subagents/src/runs/shared/acceptance.tsView on unpkg · L724

extensions/dm-subagents/src/runs/background/subagent-runner.tsView file

159structuredOutputSchemaPath?: string; L160: acceptance?: import("../../shared/types.ts").AcceptanceLedger; L161: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

extensions/dm-subagents/src/runs/background/subagent-runner.tsView on unpkg · L159

extensions/dm-image2/index.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

extensions/dm-image2/index.jsView on unpkg · L1

1import{existsSync as X$}from"node:fs";import{join as f$}from"node:path";import{Type as D}from"@sinclair/typebox";import{getAgentDir as H1}from"@duckmind/dm-coding-agent";import{ran... L2: `)}function x$($,j){let Y=F[j]??F[P];return[$,`Output in exactly ${Y.width}px x ${Y.height}px (${j}).`,"Prefer production-ready composition, grounded local detail when relevant, an... L3: `)}function j$($,j){let Y=F[j]??F[P];return[$,`Target aspect ratio: ${j}.`,`Compose for roughly ${Y.width}x${Y.height} output.`,"Generate the final answer by calling the image_gene... L4: `)}function A$($){let j=String($??"").trim();if(!j)throw Error("Codex returned an empty image response.");let Y=j.match(/!\[[^\]]*]$(data:image\/svg\+xml[^)]+)$/i);if(Y?.[1]){let... L5: `));if(f==="response.output_text.delta"&&typeof K.delta==="string")V+=K.delta;if(f==="response.output_item.done"&&K.item&&typeof K.item==="object")B.push(K.item);if(f==="response.c... L6: `);if(_===-1)break;let J=X.slice(0,_);if(X=X.slice(_+1),J.endsWith("\r"))J=J.slice(0,-1);if(!J){if(U())return{assistantText:V.trim(),outputItems:B,responseId:z};continue}if(J.start... L7: `),j}function Z$(){let $=[],j=new Set;for(let[Y,Z]of[["env:auth_file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

extensions/dm-image2/index.jsView on unpkg · L1

dmView file

•path = dm kind = native_binary sizeBytes = 73684384 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dmView on unpkg

photon_rs_bg.wasmView file

•path = photon_rs_bg.wasm kind = wasm_module sizeBytes = 1881634 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

photon_rs_bg.wasmView on unpkg

extensions/dm-image2/vendor/imagen/context_init.pyView file

•path = extensions/dm-image2/vendor/imagen/context_init.py kind = build_helper sizeBytes = 21621 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

extensions/dm-image2/vendor/imagen/context_init.pyView on unpkg

Findings

4 High8 Medium3 Low

HighChild Processextensions/dm-subagents/install.mjs

HighShellextensions/dm-subagents/src/runs/shared/acceptance.ts

HighSame File Env Network Executionextensions/dm-image2/index.js

HighCommand Output Exfiltrationextensions/dm-image2/index.js

MediumDynamic Requireextensions/dm-subagents/src/runs/background/subagent-runner.ts

MediumNetwork

MediumEnvironment Vars

MediumShips Native Binarydm

MediumShips Wasm Modulephoton_rs_bg.wasm

MediumShips Build Helperextensions/dm-image2/vendor/imagen/context_init.py

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

extensions/dm-subagents/src/runs/shared/acceptance.tsView file

Lines 704-744typescript

704 ...blockers.map((result) => `${result.agent}: ${result.error ?? "child or acceptance gate failed"}`),

705 ]),

706 noStagedFiles: childReports.length > 0 && childReports.every((report) => report.noStagedFiles === true),

707 reviewFindings: uniqueStrings(childReports.flatMap((report) => report.reviewFindings ?? [])),

708 manualNotes: input.notes ?? `Aggregated acceptance evidence from ${input.results.length} dynamic fanout child run(s).`,

709 notes: input.notes,

710 };

711}

712

713function runVerifyCommand(command: AcceptanceVerifyCommand, defaultCwd: string, options: { signal?: AbortSignal; abortMessage?: string } = {}): Promise<AcceptanceVerifyResult> {

714 return new Promise((resolve) => {

715 const startedAt = Date.now();

716 const cwd = command.cwd ? path.resolve(defaultCwd, command.cwd) : defaultCwd;

717 let stdout = "";

718 let stderr = "";

719 let timedOut = false;

720 let settled = false;

721 let hardKill: NodeJS.Timeout | undefined;

722 const child = spawn(command.command, {

723 cwd,

724 env: { ...process.env, ...(command.env ?? {}) },

725 shell: true,

726 stdio: ["ignore", "pipe", "pipe"],

High

Shell

Package source references shell execution.

extensions/dm-subagents/src/runs/shared/acceptance.tsView on unpkg · L724

727 windowsHide: true,

728 });

729 const finish = (result: Omit<AcceptanceVerifyResult, "id" | "command" | "cwd" | "durationMs">) => {

730 if (settled) return;

731 settled = true;

732 clearTimeout(timeout);

733 if (hardKill) clearTimeout(hardKill);

734 options.signal?.removeEventListener("abort", abortVerification);

735 resolve({

736 id: command.id,

737 command: command.command,

738 cwd,

739 durationMs: Date.now() - startedAt,

740 ...result,

741 });

742 };

743 const abortVerification = () => {

744 if (settled || timedOut) return;

extensions/dm-subagents/src/runs/background/subagent-runner.tsView file

Lines 139-179typescript

139 skipped?: boolean;

140 interrupted?: boolean;

141 timedOut?: boolean;

142 turnBudget?: TurnBudgetState;

143 turnBudgetExceeded?: boolean;

144 wrapUpRequested?: boolean;

145 toolBudget?: ToolBudgetState;

146 toolBudgetBlocked?: boolean;

147 sessionFile?: string;

148 intercomTarget?: string;

149 model?: string;

150 attemptedModels?: string[];

151 modelAttempts?: ModelAttempt[];

152 totalCost?: CostSummary;

153 artifactPaths?: ArtifactPaths;

154 truncated?: boolean;

155 transcriptPath?: string;

156 transcriptError?: string;

157 structuredOutput?: unknown;

158 structuredOutputPath?: string;

159 structuredOutputSchemaPath?: string;

160 acceptance?: import("../../shared/types.ts").AcceptanceLedger;

161}

Medium

Dynamic Require

Package source references dynamic require/import behavior.

extensions/dm-subagents/src/runs/background/subagent-runner.tsView on unpkg · L159

162

163const ASYNC_INTERRUPT_SIGNAL: NodeJS.Signals = process.platform === "win32" ? "SIGBREAK" : "SIGUSR2";

164const DEFAULT_MAX_ASYNC_EVENTS_BYTES = 50 * 1024 * 1024;

165const ASYNC_EVENTS_MAX_BYTES_ENV = "DM_SUBAGENT_ASYNC_EVENTS_MAX_BYTES";

166const TRUNCATED_EVENT_TYPE = "subagent.events.truncated";

167const TRUNCATION_MARKER_RESERVE_BYTES = 512;

168

169interface AsyncEventLogState {

170 bytes: number;

171 diagnosticsTruncated: boolean;

172}

173

174const asyncEventLogStates = new Map<string, AsyncEventLogState>();

175

176function maxAsyncEventsBytes(): number {

177 const raw = process.env[ASYNC_EVENTS_MAX_BYTES_ENV];

178 if (!raw) return DEFAULT_MAX_ASYNC_EVENTS_BYTES;

179 const parsed = Number(raw);

extensions/dm-image2/index.jsView file

Lines 1-10javascript

1import{existsSync as X$}from"node:fs";import{join as f$}from"node:path";import{Type as D}from"@sinclair/typebox";import{getAgentDir as H1}from"@duckmind/dm-coding-agent";import{randomUUID as i}from"node:crypto";import{existsSync as w,mkdirSync as x,readFileSync as k,unlinkSync as J$,writeFileSync as o}from"node:fs";import{dirname as A,join as N,resolve as S}from"node:path";import{spawn as Q$,spawnSync as z$}from"node:child_process";import{homedir as u}from"node:os";import{getAgentDir as r}from"@duckmind/dm-coding-agent";var O$="https://chatgpt.com/backend-api/codex/responses",V$="https://openr ...

2`)}function x$($,j){let Y=F[j]??F[P];return[$,`Output in exactly ${Y.width}px x ${Y.height}px (${j}).`,"Prefer production-ready composition, grounded local detail when relevant, and the strongest final image_generation call."].join(`

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

extensions/dm-image2/index.jsView on unpkg · L1

3`)}function j$($,j){let Y=F[j]??F[P];return[$,`Target aspect ratio: ${j}.`,`Compose for roughly ${Y.width}x${Y.height} output.`,"Generate the final answer by calling the image_generation tool.","If the prompt is a portrait or public person, keep it respectful and presentation-ready."].join(`

4`)}function A$($){let j=String($??"").trim();if(!j)throw Error("Codex returned an empty image response.");let Y=j.match(/!\[[^\]]*]$(data:image\/svg\+xml[^)]+)$/i);if(Y?.[1]){let X=Y[1],f=X.indexOf(",");if(f!==-1)return decodeURIComponent(X.slice(f+1)).trim()}let Z=j.match(/data:image\/svg\+xml[^,]*,(.+)$/is);if(Z?.[1])return decodeURIComponent(Z[1]).trim();let H=j.match(/```(?:svg)?\s*([\s\S]*?)```/i)?.[1]?.trim();if(H?.startsWith("<svg"))return H;let W=j.match(/<svg[\s\S]*<\/svg>/i);if(W?.[0])return W[0].trim();throw Error(`Expected SVG markup from Codex, received: ${j.slice(0,240)}`)}asyn ...

5`));if(f==="response.output_text.delta"&&typeof K.delta==="string")V+=K.delta;if(f==="response.output_item.done"&&K.item&&typeof K.item==="object")B.push(K.item);if(f==="response.completed"||f==="response.done")return z=K.response?.id??z,f

6`);if(_===-1)break;let J=X.slice(0,_);if(X=X.slice(_+1),J.endsWith("\r"))J=J.slice(0,-1);if(!J

7`),j}function Z$(){let $=[],j=new Set;for(let[Y,Z]of[["env:auth_file",process.env.auth_file],["env:M_AUTH_FILE",process.env.M_AUTH_FILE]]){if(typeof Z!=="string"||!Z.trim())continue;let G=S(Z);if(!w(G)||j.has(G))continue;j.add(G),$.push({kind:"file",authSource:Y,authFile:G})}return $}function G$(){let $=p(e("auth.json"));if(!$||typeof $!=="object")return[];return Object.keys($).filter((j)=>j==="openai-codex"||/^openai-codex-account-\d+$/.test(j)).sort((j,Y)=>{if(j==="openai-codex")return-1;if(Y==="openai-codex")return 1;return j.localeCompare(Y,void 0,{numeric:!0})}).map((j)=>{let Y=$[j],Z=typ ...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

extensions/dm-image2/index.jsView on unpkg · L1

8`);let z={...process.env,PYTHONPATH:a+(process.env.PYTHONPATH?`:${process.env.PYTHONPATH}`:""),auth_file:V,model:Y,quiet:"1",no_session_lock:"1",session:`new:${O}`},B=v;return await new Promise((U,K)=>{let Q=!1,_="",J="",q=Q$("python3",[y,x$($,j)],{cwd:G,env:z,stdio:["ignore","pipe","pipe"]}),T=setTimeout(()=>{q.kill("SIGTERM")},B),M=()=>{q.kill("SIGTERM")};H?.addEventListener("abort",M,{once:!0}),q.stdout.on("data",(L)=>{_+=L.toString("utf-8")}),q.stderr.on("data",(L)=>{J+=L.toString("utf-8")}),q.on("error",(L)=>{if(Q)return;Q=!0,clearTimeout(T),H?.removeEventListener("abort",M),K(L)}),q.on(" ...

9`)}function K1($){$.on("session_start",async(j,Y)=>{let Z=H1(),G=typeof Y.modelRegistry?.getProviderAuthStatus==="function"?Y.modelRegistry.getProviderAuthStatus("openrouter"):void 0;if(!(process.env.OPENROUTER_API_KEY||process.env.

Long lines were clipped for display.