registry / @funny-booth/agent-core / 0.1.35
@funny-booth/agent-core@0.1.35
AIエージェント起動CLI（共有ランチャー + MCPサーバー）
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest explains that published files are obfuscated, but the launcher’s automatically triggered detached inline script remains opaque. No concrete attack behavior was confirmed, so this is a warning rather than a block.
Static reason
One or more suspicious static signals were detected.
Trigger
The launcher runs with a newer package version available, unless FB_PROFILE is set.
Impact
The background process executes automatically, but its effects could not be determined from inspected source.
Mechanism
It checks the npm registry and launches Node with an inline script decoded from obfuscated source.
AI rationale
The manifest explains that published files are obfuscated, but the launcher’s automatically triggered detached inline script remains opaque. No concrete attack behavior was confirmed, so this is a warning rather than a block.
Evidence
dist/launcher.jspackage.json
Network endpoints1
registry.npmjs.org/
Decision evidence
public snapshotAI called this Suspicious at 77.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest’s publish script explicitly runs a build step that obfuscates the published JavaScript, which explains the obfuscated artifact but does not resolve its behavior.
- The launcher checks the package’s latest version at the npm registry and starts a detached Node process with an obfuscated inline script when an update is available.
- The inline script’s behavior could not be established from the inspected source, leaving an automatically triggered background execution path unresolved.
Evidence against
- No concrete credential theft, unrelated data transfer, or destructive action was established in the inspected excerpts.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
4 flagged · loading sourcedist/feedback.jsView file
1'use strict';const _0x4bc7cd=_0x17e2;function _0x5bf4(){const _0x42961f=['[redacted]...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/feedback.jsView on unpkg · L11'use strict';const _0x4bc7cd=_0x17e2;function _0x5bf4(){const _0x42961f=['[redacted]...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/feedback.jsView on unpkg · L1dist/launcher.jsView file
1'use strict';const _0x460bfc=_0x30b9;(function(_0xb7c351,_0x333f22){const _0x312544=_0x30b9,_0x2dc1e2=_0xb7c351();while(!![]){try{const _0x3f61c9=parseInt(_0x312544(0x164))/0x1*(pa...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
4 High4 Medium6 Low
HighSame File Env Network Executiondist/launcher.js
HighCommand Output Exfiltrationdist/launcher.js#virtual:normalized:round1
HighObfuscated Payload Loaderdist/feedback.js
HighObfuscated
MediumDynamic Requiredist/feedback.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @funny-booth/agent-core@0.1.35.
See all versions of @funny-booth/agent-core for other recorded verdicts.
- Review the evidence and your use of @funny-booth/agent-core@0.1.35 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.