registry / @funny-booth/agent-core / 0.1.38
@funny-booth/agent-core@0.1.38
AIエージェント起動CLI（共有ランチャー + MCPサーバー）
AI Security Review
scanned 1d ago · by lpm-firewall-aiStatic inspection found an opaque detached child-process command in the launcher’s update path, alongside deliberate obfuscation in the published build. The inspected source does not establish a concrete attack, so this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the launcher when the registry reports a newer package version.
Impact
The child process may perform an update action; its exact behavior is unresolved.
Mechanism
The update path passes an obfuscated string to a detached Node process using the -e option.
AI rationale
Static inspection found an opaque detached child-process command in the launcher’s update path, alongside deliberate obfuscation in the published build. The inspected source does not establish a concrete attack, so this warrants a warning rather than a block.
Evidence
dist/launcher.js
Network endpoints1
registry.npmjs.org
Decision evidence
public snapshotAI called this Suspicious at 76.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The launcher checks npm for a newer release and starts a detached Node process with an obfuscated inline command when one is found; the command’s behavior is unresolved.
- The published build runs an obfuscation script, and the shipped CLI and launcher use encoded string tables that make runtime behavior harder to audit.
Evidence against
- The only declared lifecycle hook is prepublishOnly, which invokes the publishing build; no install-time hook is declared.
- The inspected launcher excerpts do not establish credential theft, command-output exfiltration, or another concrete attack.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcedist/secretValues.jsView file
7// 受け取るのは Mod（Claude Code の中のプログラム）だけで、AI や会話の記録には渡らない。
L8: const vault_1 = require("./vault");
L9: exports.REDACT_MIN = 6;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/secretValues.jsView on unpkg · L7dist/launcher.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @funny-booth/agent-core@0.1.37
matchedIdentity = npm:QGZ1bm55LWJvb3RoL2FnZW50LWNvcmU:0.1.37
similarity = 0.600
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/launcher.jsView on unpkg1'use strict';const _0x215930=_0x4054;(function(_0x2fd304,_0x23ede7){const _0x5914f5=_0x4054,_0x18cc04=_0x2fd304();while(!![]){try{const _0x4d505e=parseInt(_0x5914f5(0x181))/0x1+par...
Findings
1 Critical4 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/launcher.js
HighSame File Env Network Executiondist/launcher.js
HighCommand Output Exfiltrationdist/launcher.js#virtual:normalized:round1
HighObfuscated Payload Loaderdist/feedback.js
HighObfuscated
MediumDynamic Requiredist/secretValues.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @funny-booth/agent-core@0.1.38.
See all versions of @funny-booth/agent-core for other recorded verdicts.
- Review the evidence and your use of @funny-booth/agent-core@0.1.38 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.