@funny-booth/agent-core@0.1.24
古い版です。最新版を使ってください
AIエージェント起動CLI（共有ランチャー + MCPサーバー）
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe launcher automatically installs a newer global package release in the background when launched. This can install and run new package code without approval, but no malicious payload or other concrete attack was established.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Launching a CLI entrypoint when the latest-version check finds a newer release.
Impact
A newer package release can replace or modify the globally installed CLI and run package installation code.
Mechanism
The launcher starts a detached global npm install for the resolved package name without waiting for user approval.
AI rationale
The launcher automatically installs a newer global package release in the background when launched. This can install and run new package code without approval, but no malicious payload or other concrete attack was established.
Evidence
package.jsondist/bin/salesbot1.jsdist/launcher.js
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes CLI entrypoints that invoke the launcher.
- On launcher startup, the code fetches latest-version metadata for its configured or default package and compares it with the current version.
- When a newer version is reported, the launcher starts a detached global npm install without an approval prompt.
Evidence against
- The update path is conditional on a newer version being reported, and the inspected source does not establish a malicious payload.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscated
NoLicense
Source & flagged code
7 flagged · loading sourcedist/mcpPackages.jsView file
1'use strict';const _0x12cd0c=_0x1cb0;(function(_0x4e0810,_0x40b9d2){const _0x4ac4c8=_0x1cb0,_0x3273b3=_0x4e0810();while(!![]){try{const _0x48bae4=-parseInt(_0x4ac4c8(0x1c4))/0x1+-p...
High
Child Process
Package source references child process execution.
dist/mcpPackages.jsView on unpkg · L1dist/feedback.jsView file
1'use strict';const _0x3c3d46=_0x4c7e;function _0x4189(){const _0x41e797=['zgvMAw5LuhjVCgvYDhK','C3rYAw5NAwz5','[redacted]','sM1ytxq','Dw5RBM93BG','ioobJoodNEo...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/feedback.jsView on unpkg · L11'use strict';const _0x3c3d46=_0x4c7e;function _0x4189(){const _0x41e797=['zgvMAw5LuhjVCgvYDhK','C3rYAw5NAwz5','[redacted]','sM1ytxq','Dw5RBM93BG','ioobJoodNEo...
Medium
Dynamic Require
Findings
1 Critical6 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/mcpPackages.js
HighSame File Env Network Executiondist/index.js#virtual:normalized:round1
HighCommand Output Exfiltrationdist/launcher.js#virtual:normalized:round1
HighObfuscated Payload Loaderdist/feedback.js
HighTrigger Reachable Command Output Exfiltrationdist/launcher.js#virtual:normalized:round1
HighObfuscated
MediumDynamic Requiredist/feedback.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @funny-booth/agent-core@0.1.24.
See all versions of @funny-booth/agent-core for other recorded verdicts.
- Review the evidence and your use of @funny-booth/agent-core@0.1.24 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.