Loading npm security reports…

@funny-booth/agent-core@0.1.14: Malicious npm security report | LPM Firewall

registry / @funny-booth/agent-core / 0.1.14

@funny-booth/agent-core@0.1.14

AIエージェント起動CLI（共有ランチャー + MCPサーバー）

AI Security Review

scanned 25d ago · by lpm-firewall-ai

Running a salesbot command contacts the configured portal, obtains MCP package data, and launches portal-selected packages through npx. It injects the portal token and local secret vault values into those packages; a portal response can also supply a command for execution.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

The user runs any salesbot bin command or starts the MCP server and invokes its remote-backed tool.

Impact

A portal-controlled package or command can execute locally with supplied credentials and access the user's environment.

Mechanism

Obfuscated remote package loading, token and secret forwarding, and portal-directed command execution.

Attack narrative

A user launches a salesbot binary, which calls the obfuscated launcher. The launcher authenticates to the configured portal, fetches MCP definitions, and writes a Claude MCP configuration that runs each returned package through npx. It provides those packages the portal token and values from the local secret vault. Separately, the MCP server fetches a portal-provided command and executes it. These remote-controlled execution paths are concealed by obfuscation and are not limited to a fixed, reviewed dependency set.

AI rationale

The package creates concrete remote code execution and credential exposure paths when its user-facing commands run. Obfuscation and silent global self-updating further remove meaningful user control.

Evidence

dist/bin/salesbot7.jsdist/launcher.jsdist/index.jslauncher.config.json~/.<toolName>/secrets.enc~/.<toolName>/vault.key

Source & flagged code

6 flagged · loading source

dist/bin/salesbot7.jsView file

2// AUTO-GENERATED by scripts/generate-bins.mjs — do not edit L3: require("../launcher.js").runLauncher(7).catch((e) => { L4: process.stderr.write(String((e && e.stack) || e) + "\n");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bin/salesbot7.jsView on unpkg · L2

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @funny-booth/agent-core@0.1.15 matchedIdentity = npm:QGZ1bm55LWJvb3RoL2FnZW50LWNvcmU:0.1.15 similarity = 0.867 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

1#!/usr/bin/env node L2: 'use strict';const _0x3b9409=_0xf209;(function(_0x72ae8f,_0x3227a3){const _0x1f4085=_0xf209,_0x6cb850=_0x72ae8f();while(!![]){try{const _0x103c24=-parseInt(_0x1f4085(0x93))/0x1*(pa...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

1#!/usr/bin/env node L2: 'use strict';const _0x3b9409=_0xf209;(function(_0x72ae8f,_0x3227a3){const _0x1f4085=_0xf209,_0x6cb850=_0x72ae8f();while(!![]){try{const _0x103c24=-parseInt(_0x1f4085(0x93))/0x1*(pa...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L1

dist/launcher.js#virtual:normalized:round1View file

1"use strict";const _0xb460f4=_0x6132;(function(_0x54ccd8,_0x1767ff){const _0x2bbeee=_0x6132,_0x16bb68=_0x54ccd8();while(!![]){try{const _0x1dad36=parseInt(_0x2bbeee(0x157))/0x1*(-p...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/launcher.js#virtual:normalized:round1View on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/bin/salesbot1.js -> dist/launcher.js L1: "use strict";const _0xb460f4=_0x6132;(function(_0x54ccd8,_0x1767ff){const _0x2bbeee=_0x6132,_0x16bb68=_0x54ccd8();while(!![]){try{const _0x1dad36=parseInt(_0x2bbeee(0x157))/0x1*(-p...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/launcher.js#virtual:normalized:round1View on unpkg · L1