registry / @granular-software/sdk / 0.4.61

@granular-software/sdk@0.4.61

⚠ Under review

TypeScript SDK and CLI for Granular - define, build, and deploy AI sandboxes

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 18 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetwork

Supply chain

HighEntropyStringsPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 9 file(s), 4.64 MB of source, external domains: 127.0.0.1, api.openai.com, app.granular.software, checkout.example, developers.openai.com, docs.granular.dev, dotenvx.com, example.com, github.com, northwind.example, rivergate.example

Source & flagged code

10 flagged

dist/cli/index.jsView file

6var readline = require('readline'); L7: var http = require('http'); L8: var child_process = require('child_process'); L9: var crypto$1 = require('crypto'); ... L85: * Constructs the CommanderError class L86: * @param {number} exitCode suggested exit code which could be used with process.exit L87: * @param {string} code an id string representing the error ... L1245: this._outputConfiguration = { L1246: writeOut: (str) => process10.stdout.write(str), L1247: writeErr: (str) => process10.stderr.write(str), ... L1284: * @returns {Command[]} L1285: * @private

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli/index.jsView on unpkg · L6

6Trigger-reachable chain: manifest.bin -> dist/cli/index.js L6: var readline = require('readline'); L7: var http = require('http'); L8: var child_process = require('child_process'); L9: var crypto$1 = require('crypto'); ... L85: * Constructs the CommanderError class L86: * @param {number} exitCode suggested exit code which could be used with process.exit L87: * @param {string} code an id string representing the error ... L1245: this._outputConfiguration = { L1246: writeOut: (str) => process10.stdout.write(str), L1247: writeErr: (str) => process10.stderr.write(str), ... L1284: * @returns {Command[]} L1285: * @private

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli/index.jsView on unpkg · L6

7var http = require('http'); L8: var child_process = require('child_process'); L9: var crypto$1 = require('crypto');

High

Child Process

Package source references child process execution.

dist/cli/index.jsView on unpkg · L7

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli/index.js: var readline = require('readline'); var readline__namespace = /*#__PURE__*/_interopNamespace(readline); fs__namespace.writeFileSync(filePath, JSON.stringify(project, null, 2) + "\n", "utf-8"); fs__namespace.writeFileSync( fs__namespace.writeFileSync(filePath, JSON.stringify(merged, null, 2) + "\n", "utf-8"); fs__namespace.writeFileSync(envLocalPath, content, "utf-8"); fs__namespace.writeFileSync(gitignorePath, content + section, "utf-8"); "No API key found. Run `granular login` or set GRANULAR_API_KEY environment variable."

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli/index.jsView on unpkg

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli/index.jsView on unpkg · L6

6Cross-file remote execution chain: dist/cli/index.js spawns dist/index.js; helper contains network access plus dynamic code execution. L6: var readline = require('readline'); L7: var http = require('http'); L8: var child_process = require('child_process'); L9: var crypto$1 = require('crypto'); ... L85: * Constructs the CommanderError class L86: * @param {number} exitCode suggested exit code which could be used with process.exit L87: * @param {string} code an id string representing the error ... L1245: this._outputConfiguration = { L1246: writeOut: (str) => process10.stdout.write(str), L1247: writeErr: (str) => process10.stderr.write(str), ... L1284: * @returns {Command[]} L1285: * @private

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/index.jsView on unpkg · L6

6Trigger-reachable credential exfiltration chain: manifest.bin -> dist/cli/index.js L6: var readline = require('readline'); L7: var http = require('http'); L8: var child_process = require('child_process'); L9: var crypto$1 = require('crypto'); ... L85: * Constructs the CommanderError class L86: * @param {number} exitCode suggested exit code which could be used with process.exit L87: * @param {string} code an id string representing the error ... L1245: this._outputConfiguration = { L1246: writeOut: (str) => process10.stdout.write(str), L1247: writeErr: (str) => process10.stderr.write(str), ... L1284: * @returns {Command[]} L1285: * @private

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/cli/index.jsView on unpkg · L6

dist/agent-evals.jsView file

19770try { L19771: new Function(`return (async () => { L19772: ${withoutImports}

High

Eval

Package source references dynamic code evaluation.

dist/agent-evals.jsView on unpkg · L19770

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/agent-evals.js: // ../../node_modules/ws/lib/constants.js "../../node_modules/ws/lib/constants.js"(exports, module) { // ../../node_modules/node-gyp-build/node-gyp-build.js "../../node_modules/node-gyp-build/node-gyp-build.js"(exports, module) { // ../../node_modules/node-gyp-build/index.js "../../node_modules/node-gyp-build/index.js"(exports, module) { // ../../node_modules/bufferutil/fallback.js "../../node_modules/bufferutil/fallback.js"(exports, module) {

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/agent-evals.jsView on unpkg

2L3: var promises = require('fs/promises'); L4: var path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/agent-evals.jsView on unpkg · L2

Source & flagged code

10 flagged · loading source

@granular-software/sdk@0.4.61

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code