registry / @guangnao/agent-proxy / 1.5.7

@guangnao/agent-proxy@1.5.7

⚠ Under review

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 229 KB of source, external domains: 127.0.0.1, api.anthropic.com, api.openai.com, auth.openai.com, chatgpt.com, console.anthropic.com

Source & flagged code

6 flagged

dist/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @guangnao/agent-proxy@1.2.4 matchedIdentity = npm:QGd1YW5nbmFvL2FnZW50LXByb3h5:1.2.4 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L1

63L64: `),g=(_,$={})=>({id:o,object:"response",created_at:i,status:_,model:t.model,error:null,...$}),f=async()=>{n.started()||await c("response.created",{response:g("in_progress",{output:... L65: As you answer the user's questions, you can use the following context:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L63

71L72: `}}function wl(e){if(!Array.isArray(e)||e.length===0)return e;let t=[...e],n=t[0];if(!n||n.role!=="user")return e;let r=n.content,o=yl();if(typeof r=="string")t[0]={...n,content:[o... L73: Note Auth flows open a browser. No browser on this box? ... L83: L84: `,Al=e=>e.startsWith("~")?Bn(Wo(),e.slice(1)):e,Mt=()=>process.env.CODEX_HOME||Bn(Wo(),".codex"),ce=()=>process.env.CODEX_AUTH_FILE||Bn(Mt(),"auth.json"),Xo=(e,t)=>{process.platfor... L85:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L71

1#!/usr/bin/env node L2: import{createInterface as Hf}from"node:readline/promises";import{spawnSync as Qe,spawn as Yf}from"node:child_process";import{stdin as na,stdout as ra}from"node:process";import{join... L3: `)}var Z={info:(e,t)=>un(process.stdout,"info",e,t),warn:(e,t)=>un(process.stderr,"warn",e,t),error:(e,t)=>un(process.stderr,"error",e,t)};var Et=class{constructor(t,n){this.max=t;... L4: ... L15: L16: ${r.join(" ")}`}function we(){let e={text:"",thinking:"",toolUses:[],usage:oo(),stop:"stop"};return{sink:{meta(n){n.id&&(e.id=n.id),n.model&&(e.model=n.model)},text(n){e.text+=n},t... L17: import { createInterface } from 'node:readline'; ... L45: L46: `:"")+Tt(e),s=["exec","--json","--sk[redacted]","--ignore-user-config","--ephemeral","-C",o,"--sandbox",n.codexSandbox];n.codex

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L1

deploy/provision-auth.shView file

•path = deploy/provision-auth.sh kind = build_helper sizeBytes = 2002 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

deploy/provision-auth.shView on unpkg

Source & flagged code

6 flagged · loading source

dist/cli.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code