registry / @gobi-starweaver/ws-cli / 0.3.3

@gobi-starweaver/ws-cli@0.3.3

⚠ Under review

北辰计划·望舒 Polaris·WS — 面向史学与人文研究的终端智能体（WS CLI）

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 22 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 4 file(s), 459 KB of source, external domains: ejs.co, github.com, jimmy.warting.se, react.dev, schemas.openxmlformats.org, stackoverflow.com, www.apache.org, www.libreoffice.org, yargs.js.org

Oversized source lightweight scan

dist/cli.js4.70 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsShellDynamicRequireUrlStringsejs.cogithub.comjimmy.warting.sereact.devstackoverflow.comwww.apache.orgyargs.js.org

Source & flagged code

14 flagged

dist/mcp/servers/doc-toolchain-server.jsView file

731init_esbuild_shims(); L732: import { spawn } from "node:child_process"; L733: import * as fs from "node:fs";

High

Child Process

Package source references child process execution.

dist/mcp/servers/doc-toolchain-server.jsView on unpkg · L731

dist/cli.jsView file

6Source sends the broad process environment to a literal external destination. L6: __commonJS, L7: __dirname, L8: __export, ... L495: ]; L496: if (process.platform !== "win32") { L497: module2.exports.push( ... L644: } L645: process24.exitCode = code || /* istanbul ignore next */ L646: 0; ... L1020: function formatProdErrorMessage(code) { L1021: var url2 = "https://react.dev/errors/" + code; L1022: if (1 < arguments.length) {

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/cli.jsView on unpkg · L6

•matchType = previous_version_dangerous_delta matchedPackage = @gobi-starweaver/ws-cli@0.4.2 matchedIdentity = npm:QGdvYmktc3RhcndlYXZlci93cy1jbGk:0.4.2 similarity = 0.600 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

69908if (process.platform === "win32") { L69909: return `cmd.exe /c "taskkill /PID ${processId} /T /F"`; L69910: }

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L69908

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli.js: function readLineBreak(state) { __name(readLineBreak, "readLineBreak"); readLineBreak(state); readLineBreak(state); if (ch !== 0) readLineBreak(state); "Authorization", "Proxy-Authorization", get baseUrl() {

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli.jsView on unpkg

6__commonJS, L7: __dirname, L8: __export, ... L495: ]; L496: if (process.platform !== "win32") { L497: module2.exports.push( ... L644: } L645: process24.exitCode = code || /* istanbul ignore next */ L646: 0; ... L1020: function formatProdErrorMessage(code) { L1021: var url2 = "https://react.dev/errors/" + code; L1022: if (1 < arguments.length) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L6

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/cli.jsView on unpkg · L6

6Cross-file remote execution chain: dist/cli.js spawns dist/chunks/devtools-6ASGFZ3B.js; helper contains network access plus dynamic code execution. L6: __commonJS, L7: __dirname, L8: __export, ... L495: ]; L496: if (process.platform !== "win32") { L497: module2.exports.push( ... L644: } L645: process24.exitCode = code || /* istanbul ignore next */ L646: 0; ... L1020: function formatProdErrorMessage(code) { L1021: var url2 = "https://react.dev/errors/" + code; L1022: if (1 < arguments.length) {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.jsView on unpkg · L6

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @gobi-starweaver/ws-cli@0.3.7 matchedPath = cli.js matchedIdentity = npm:QGdvYmktc3RhcndlYXZlci93cy1jbGk:0.3.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli.jsView on unpkg

536} else { L537: assert2 = __require("assert"); L538: signals = require_signals();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L536

•path = dist/cli.js kind = oversized_source_file sizeBytes = 4929106 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.jsView on unpkg

•path = dist/cli.js kind = oversized_cli_entrypoint sizeBytes = 4929106 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.jsView on unpkg

dist/vendor/hj_corpus/hj_corpus_mcp_server.pyView file

•path = dist/vendor/hj_corpus/hj_corpus_mcp_server.py kind = build_helper sizeBytes = 19867 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/vendor/hj_corpus/hj_corpus_mcp_server.pyView on unpkg

Source & flagged code

14 flagged · loading source

dist/mcp/servers/doc-toolchain-server.jsView file

731init_esbuild_shims(); L732: import { spawn } from "node:child_process"; L733: import * as fs from "node:fs";

High

Child Process

Package source references child process execution.

dist/mcp/servers/doc-toolchain-server.jsView on unpkg · L731

dist/cli.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/cli.jsView on unpkg · L6

•

Findings

2 Critical8 High6 Medium6 Low

CriticalHardcoded Runtime Data Exfiltrationdist/cli.js

CriticalPrevious Version Dangerous Deltadist/cli.js

HighChild Processdist/mcp/servers/doc-toolchain-server.js

HighShelldist/cli.js

HighCredential Redirect Persistencedist/cli.js

HighSandbox Evasion Gated Capabilitydist/cli.js

HighObfuscated Payload Loaderdist/cli.js

HighCross File Remote Execution Contextdist/cli.js

HighSemantic Analysis Limiteddist/cli.js

HighKnown Malware Source Similaritydist/cli.js

MediumDynamic Requiredist/cli.js

MediumEnvironment Vars

Affected versions and remediation

This report applies to @gobi-starweaver/ws-cli@0.3.3.

See all versions of @gobi-starweaver/ws-cli for other recorded verdicts.

Review the evidence and your use of @gobi-starweaver/ws-cli@0.3.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-19 15:54:41.280Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.