registry / @guangnao/agent-proxy / 1.4.3

@guangnao/agent-proxy@1.4.3

⚠ Under review

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 176 KB of source, external domains: 127.0.0.1, api.anthropic.com, api.openai.com, auth.openai.com, chatgpt.com, console.anthropic.com

Source & flagged code

7 flagged

dist/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @guangnao/agent-proxy@1.2.4 matchedIdentity = npm:QGd1YW5nbmFvL2FnZW50LXByb3h5:1.2.4 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L1

25L26: `),d=(w,O={})=>({id:o,object:"response",created_at:a,status:w,model:t.model,error:null,...O}),_=async()=>{n.started()||await c("response.created",{response:d("in_progress",{output:... L27: As you answer the user's questions, you can use the following context:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L25

33L34: `}}function aa(e){if(!Array.isArray(e)||e.length===0)return e;let t=[...e],n=t[0];if(!n||n.role!=="user")return e;let r=n.content,o=ia();if(typeof r=="string")t[0]={...n,content:[o... L35: Note Auth flows open a browser. No browser on this box? ... L45: L46: `,ha=e=>e.startsWith("~")?un(jr(),e.slice(1)):e,Et=()=>process.env.CODEX_HOME||un(jr(),".codex"),se=()=>process.env.CODEX_AUTH_FILE||un(Et(),"auth.json"),Fr=(e,t)=>{process.platfor... L47:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L33

1#!/usr/bin/env node L2: import{createInterface as ad}from"node:readline/promises";import{spawnSync as We,spawn as cd}from"node:child_process";import{stdin as Es,stdout as Ss}from"node:process";var Vn="1.0... L3: `)}var Z={info:(e,t)=>Xt(process.stdout,"info",e,t),warn:(e,t)=>Xt(process.stderr,"warn",e,t),error:(e,t)=>Xt(process.stderr,"error",e,t)};var dt=class{constructor(t,n){this.max=t;... L4: ... L6: L7: `)}function me(){let e={text:"",thinking:"",usage:rr(),stop:"stop"};return{sink:{meta(n){n.id&&(e.id=n.id),n.model&&(e.model=n.model)},text(n){e.text+=n},thinking(n){e.thinking+=n}... L8: `}let u=_t(n.maxConcurrency,!!n.claudeToken),s=await u.acquire();try{await gt({bin:n.claudeBin,args:o,prompt:i,cwd:s.workDir,env:{...process.env,HOME:s.home,CLAUDE_CONFIG_DIR:s.con... ... L25:

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L1

6L7: `)}function me(){let e={text:"",thinking:"",usage:rr(),stop:"stop"};return{sink:{meta(n){n.id&&(e.id=n.id),n.model&&(e.model=n.model)},text(n){e.text+=n},thinking(n){e.thinking+=n}... L8: `}let u=_t(n.maxConcurrency,!!n.claudeToken),s=await u.acquire();try{await gt({bin:n.claudeBin,args:o,prompt:i,cwd:s.workDir,env:{...process.env,HOME:s.home,CLAUDE_CONFIG_DIR:s.con...

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L6

deploy/provision-auth.shView file

•path = deploy/provision-auth.sh kind = build_helper sizeBytes = 2002 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

deploy/provision-auth.shView on unpkg

Source & flagged code

7 flagged · loading source

dist/cli.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code