registry / @hanzlaa/rcode / 4.13.0

@hanzlaa/rcode@4.13.0

⚠ Under review

rcode — the AI team that never forgets. Persistent memory, specialist agents, and slash commands for AI IDEs. Works in Claude Code, Cursor, Gemini, VS Code, and Antigravity.

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 34 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 111 file(s), 1.95 MB of source, external domains: 127.0.0.1, cdn.jsdelivr.net, claude.ai, fonts.googleapis.com, fonts.gstatic.com, github.com, leadlyze.com, schema.org, www.conventionalcommits.org, www.npmjs.com, www.w3.org

Source & flagged code

26 flagged

package.jsonView file

Lines 1-33json

2 "name": "@hanzlaa/rcode",

3 "version": "4.13.0",

4 "description": "rcode — the AI team that never forgets. Persistent memory, specialist agents, and slash commands for AI IDEs. Works in Claude Code, Cursor, Gemini, VS Code, and Antigravity.",

5 "main": "cli/index.js",

6 "bin": {

7 "rcode": "dist/rcode.js"

8 },

9 "scripts": {

10 "dashboard": "node server/dashboard.js",

11 "test": "node --test",

12 "test:ci": "node --test --test-reporter=spec",

13 "postinstall": "node cli/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L13

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L13

14 "build:cli": "node scripts/build.cjs",

15 "build": "node scripts/build.cjs",

16 "prepack": "node scripts/prepack-strip.cjs && node scripts/build.cjs",

17 "postpack": "node scripts/postpack-restore.cjs",

18 "dogfood": "bash scripts/dogfood-check.sh",

19 "test:skills": "node test/skill-snapshot.test.cjs"

20 },

21 "files": [

22 "cli/",

23 "rcode/",

24 "server/",

25 "dist/",

26 "README.md",

27 "AGENTS.md",

28 "CLAUDE.md",

29 "CONTRIBUTING.md"

30 ],

31 "keywords": [

32 "rcode",

33 "claude-code",

•devDependencies registry_only=@clack/prompts,diff,esbuild,fast-glob,nanospinner,picocolors,semver,zod

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

dist/rcode.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

2/* rcode — built with esbuild. Source: github.com/hanzlahabib/rihal-code */

3var v=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports);var Qt=v((YF

rcode/bin/lib/brain.cjsView file

Lines 192-232javascript

192 const out = path.join(destPath, rel);

193 fs.mkdirSync(path.dirname(out), { recursive: true });

194 fs.copyFileSync(full, out);

195 copied++;

cli/postinstall.jsView file

Lines 1-52javascript

1/**

2 * rcode postinstall hook — runs automatically after `npm install -g`

3 *

4 * Auto-installs commands, skills, workflows, and bin tools into the global

5 * Claude Code directory (~/.claude/) so every project can use rcode immediately

6 * without needing a per-project `rcode install` run.

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

cli/postinstall.jsView on unpkg · L4

7 *

8 * Artifacts (.planning/, STATE.md, ROADMAP.md) are always created in the

cli/index.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: ────────────────────────────────────'); console.log(`▶ to run: paste the above into claude code as /${workflowname === 'execute-sprint' ? 'rcode-execute-sprint' : `rcode-${workflowname}`}`); console.log(' or pipe it directly: rcode ' + (workflowname === 'execute-sprint' ? 'execute' : workflowname) + ' | cld --model sonnet'); if (hasauto) { console.log('\n auto mode detected — in claude code run: /rcode-' + (workflowname === 'execute-sprint' ? 'execute-sprint' : workflowname) + ' --auto (applies yolo defaults, skips confirmation prompts)'); } }

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

cli/index.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @hanzlaa/rcode@4.14.0 matchedPath = cli/index.js matchedIdentity = npm:QGhhbnpsYWEvcmNvZGU:4.14.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/index.jsView on unpkg

cli/install.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. oin(cmddestdir, file)); copied++; } const routersrc = path.join(package_root, 'cli', 'rcode-slash-router.cjs'); const routerdest = path.join(bindestdir, 'rcode-slash-router.cjs'); fs.copyfilesync(routersrc, routerdest); if (opts && opts.global !== 'silent') { console.log(' ' + ok(`slash-router: ${copied} command bodies → ~/.rcode/slash-commands/ + router → ~/.rcode/bin/`)); } return routerdest; } function slashrouterhookcommand() { return `node "${path.join(homedir(), '.rcode', 'bin', 'rcode-slash-router.cjs')}"

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

cli/install.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @hanzlaa/rcode@4.14.0 matchedPath = cli/install.js matchedIdentity = npm:QGhhbnpsYWEvcmNvZGU:4.14.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/install.jsView on unpkg

rcode/skills/core/rcode-distillator/scripts/tests/test_analyze_sources.pyView file

•path = rcode/skills/core/rcode-distillator/scripts/tests/test_analyze_sources.py kind = payload_in_excluded_dir sizeBytes = 7723 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

rcode/skills/core/rcode-distillator/scripts/tests/test_analyze_sources.pyView on unpkg

•path = rcode/skills/core/rcode-distillator/scripts/tests/test_analyze_sources.py kind = build_helper sizeBytes = 7723 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

rcode/skills/core/rcode-distillator/scripts/tests/test_analyze_sources.pyView on unpkg

cli/doctor.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

cli/doctor.js#virtual:normalized:round1View on unpkg

server/orchestrator.jsView file

•matchType = normalized_sha256 matchedPackage = @hanzlaa/rcode@4.14.0 matchedPath = server/orchestrator.js matchedIdentity = npm:QGhhbnpsYWEvcmNvZGU:4.14.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/orchestrator.jsView on unpkg

server/dashboard.jsView file

•matchType = normalized_sha256 matchedPackage = @hanzlaa/rcode@4.14.0 matchedPath = server/dashboard.js matchedIdentity = npm:QGhhbnpsYWEvcmNvZGU:4.14.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/dashboard.jsView on unpkg

cli/agent.jsView file

•matchType = normalized_sha256 matchedPackage = @hanzlaa/rcode@4.17.0 matchedPath = cli/agent.js matchedIdentity = npm:QGhhbnpsYWEvcmNvZGU:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/agent.jsView on unpkg

rcode/bin/lib/memory-drift.cjsView file

•matchType = normalized_sha256 matchedPackage = @hanzlaa/rcode@4.17.0 matchedPath = rcode/bin/lib/memory-drift.cjs matchedIdentity = npm:QGhhbnpsYWEvcmNvZGU:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

rcode/bin/lib/memory-drift.cjsView on unpkg

rcode/bin/lib/progress.cjsView file

•matchType = normalized_sha256 matchedPackage = @hanzlaa/rcode@4.17.0 matchedPath = rcode/bin/lib/progress.cjs matchedIdentity = npm:QGhhbnpsYWEvcmNvZGU:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

rcode/bin/lib/progress.cjsView on unpkg

rcode/bin/rcode-hooks.cjsView file

•matchType = normalized_sha256 matchedPackage = @hanzlaa/rcode@4.17.0 matchedPath = rcode/bin/rcode-hooks.cjs matchedIdentity = npm:QGhhbnpsYWEvcmNvZGU:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

rcode/bin/rcode-hooks.cjsView on unpkg

cli/dashboard.jsView file

•matchType = normalized_sha256 matchedPackage = @hanzlaa/rcode@4.17.0 matchedPath = cli/dashboard.js matchedIdentity = npm:QGhhbnpsYWEvcmNvZGU:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/dashboard.jsView on unpkg

Source & flagged code

26 flagged · loading source

@hanzlaa/rcode@4.13.0

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code