registry / @funny-booth/agent-core / 0.1.31
@funny-booth/agent-core@0.1.31
AIエージェント起動CLI（共有ランチャー + MCPサーバー）
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package’s published runtime is deliberately obfuscated, and the visible excerpts do not resolve all network behavior or execution paths. No concrete attack was established, but the remaining uncertainty warrants a warning.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the package CLI or invoking its runtime APIs.
Impact
Potential runtime behavior cannot be fully assessed from the inspected source.
Mechanism
The publish build obfuscates the distributed code; visible launcher code performs portal login and conditional feedback reporting, but the obfuscation prevents resolving all behavior.
AI rationale
The package’s published runtime is deliberately obfuscated, and the visible excerpts do not resolve all network behavior or execution paths. No concrete attack was established, but the remaining uncertainty warrants a warning.
Evidence
dist/index.jsdist/launcher.jsdist/feedback.jspackage.json
Decision evidence
public snapshotAI called this Suspicious at 74.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- package.json runs a publish build that invokes an obfuscation script.
- dist/index.js and dist/launcher.js are heavily obfuscated, obscuring runtime behavior.
- The launcher prompts for email and password, then posts them to a URL derived from portal configuration.
- The feedback module auto-reports selected failures, but its obfuscated destination and payload details are unresolved.
Evidence against
- The manifest has no install-time lifecycle hook; prepublishOnly runs during publishing.
- The visible login path sends credentials to the configured portal URL as part of interactive login.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscated
NoLicense
Source & flagged code
4 flagged · loading sourcedist/feedback.jsView file
1'use strict';const _0x12ca49=_0x433f;(function(_0x4165f3,_0x3f363f){const _0x2f6bd1=_0x433f,_0x4238f6=_0x4165f3();while(!![]){try{const _0x2560a6=-parseInt(_0x2f6bd1(0x11a))/0x1*(-...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/feedback.jsView on unpkg · L11'use strict';const _0x12ca49=_0x433f;(function(_0x4165f3,_0x3f363f){const _0x2f6bd1=_0x433f,_0x4238f6=_0x4165f3();while(!![]){try{const _0x2560a6=-parseInt(_0x2f6bd1(0x11a))/0x1*(-...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/feedback.jsView on unpkg · L1dist/launcher.jsView file
1'use strict';const _0x41c847=_0xe001;(function(_0x3bb6d9,_0x2f5763){const _0x295ce5=_0xe001,_0x40817b=_0x3bb6d9();while(!![]){try{const _0x634b2a=-parseInt(_0x295ce5(0x2a9))/0x1*(p...
High
Findings
4 High4 Medium5 Low
HighSame File Env Network Executiondist/launcher.js
HighCommand Output Exfiltrationdist/launcher.js#virtual:normalized:round1
HighObfuscated Payload Loaderdist/feedback.js
HighObfuscated
MediumDynamic Requiredist/feedback.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to @funny-booth/agent-core@0.1.31.
See all versions of @funny-booth/agent-core for other recorded verdicts.
- Review the evidence and your use of @funny-booth/agent-core@0.1.31 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.