registry / @guangnao/agent-proxy / 1.5.3

@guangnao/agent-proxy@1.5.3

⚠ Under review

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 227 KB of source, external domains: 127.0.0.1, api.anthropic.com, api.openai.com, auth.openai.com, chatgpt.com, console.anthropic.com

Source & flagged code

6 flagged

dist/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @guangnao/agent-proxy@1.2.4 matchedIdentity = npm:QGd1YW5nbmFvL2FnZW50LXByb3h5:1.2.4 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L1

64L65: `),h=(g,T={})=>({id:o,object:"response",created_at:s,status:g,model:t.model,error:null,...T}),m=async()=>{n.started()||await c("response.created",{response:h("in_progress",{output:... L66: As you answer the user's questions, you can use the following context:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L64

72L73: `}}function sl(e){if(!Array.isArray(e)||e.length===0)return e;let t=[...e],n=t[0];if(!n||n.role!=="user")return e;let r=n.content,o=ol();if(typeof r=="string")t[0]={...n,content:[o... L74: Note Auth flows open a browser. No browser on this box? ... L84: L85: `,fl=e=>e.startsWith("~")?Bn(Ho(),e.slice(1)):e,Pt=()=>process.env.CODEX_HOME||Bn(Ho(),".codex"),ce=()=>process.env.CODEX_AUTH_FILE||Bn(Pt(),"auth.json"),Yo=(e,t)=>{process.platfor... L86:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L72

1#!/usr/bin/env node L2: import{createInterface as _f}from"node:readline/promises";import{spawnSync as Qe,spawn as yf}from"node:child_process";import{stdin as Qi,stdout as Zi}from"node:process";import{join... L3: `)}var Z={info:(e,t)=>un(process.stdout,"info",e,t),warn:(e,t)=>un(process.stderr,"warn",e,t),error:(e,t)=>un(process.stderr,"error",e,t)};var St=class{constructor(t,n){this.max=t;... L4: ... L16: L17: Continue from the final user message.`}function we(){let e={text:"",thinking:"",toolUses:[],usage:so(),stop:"stop"};return{sink:{meta(n){n.id&&(e.id=n.id),n.model&&(e.model=n.model... L18: import { createInterface } from 'node:readline'; ... L46: L47: `:"")+Tt(e),i=["exec","--json","--sk[redacted]","--ignore-user-config","--ephemeral","-C",o,"--sandbox",n.codexSandbox];n.codex

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L1

deploy/provision-auth.shView file

•path = deploy/provision-auth.sh kind = build_helper sizeBytes = 2002 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

deploy/provision-auth.shView on unpkg

Source & flagged code

6 flagged · loading source

dist/cli.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code