@funny-booth/agent-core@0.1.23
古い版です。最新版を使ってください
AIエージェント起動CLI（共有ランチャー + MCPサーバー）
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe unprompted global update creates a conditional code-execution risk, so a warning is warranted. The inspected source does not establish malicious update content or another concrete attack chain.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running a package launcher when its update check reports a newer version.
Impact
A package update may execute new code under the user’s account.
Mechanism
The launcher starts a detached global npm install for this package.
AI rationale
The unprompted global update creates a conditional code-execution risk, so a warning is warranted. The inspected source does not establish malicious update content or another concrete attack chain.
Evidence
package.jsondist/launcher.js
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes dist/launcher.js through its command-line entrypoints.
- Each launcher run checks for an update before normal startup.
- When a newer version is reported, the launcher starts a detached global npm install of the package without asking the user; the installed code can then execute with the user’s privileges.
Evidence against
- The update installation is conditional on the reported version being newer; source inspection did not establish that an update is malicious.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscated
NoLicense
Source & flagged code
7 flagged · loading sourcedist/mcpPackages.jsView file
1'use strict';const _0x2b4ba3=_0x5d44;(function(_0x2cac67,_0x402c18){const _0x586c69=_0x5d44,_0x263e80=_0x2cac67();while(!![]){try{const _0x446eba=parseInt(_0x586c69(0x194))/0x1*(pa...
High
Child Process
Package source references child process execution.
dist/mcpPackages.jsView on unpkg · L1dist/feedback.jsView file
1'use strict';const _0x128711=_0x31d0;(function(_0x354ece,_0x2a9918){const _0x5ea4b9=_0x31d0,_0x25cd3e=_0x354ece();while(!![]){try{const _0x5dd5ff=parseInt(_0x5ea4b9(0x113))/0x1+-pa...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/feedback.jsView on unpkg · L11'use strict';const _0x128711=_0x31d0;(function(_0x354ece,_0x2a9918){const _0x5ea4b9=_0x31d0,_0x25cd3e=_0x354ece();while(!![]){try{const _0x5dd5ff=parseInt(_0x5ea4b9(0x113))/0x1+-pa...
Medium
Findings
1 Critical6 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/mcpPackages.js
HighSame File Env Network Executiondist/index.js#virtual:normalized:round1
HighCommand Output Exfiltrationdist/launcher.js#virtual:normalized:round1
HighObfuscated Payload Loaderdist/feedback.js
HighTrigger Reachable Command Output Exfiltrationdist/launcher.js#virtual:normalized:round1
HighObfuscated
MediumDynamic Requiredist/feedback.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @funny-booth/agent-core@0.1.23.
See all versions of @funny-booth/agent-core for other recorded verdicts.
- Review the evidence and your use of @funny-booth/agent-core@0.1.23 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.