registry / @hasna/sandboxes / 0.2.5

@hasna/sandboxes@0.2.5

Universal cloud sandbox manager for AI coding agents - supports e2b, Daytona, Modal, Kernel

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 1.42 MB of source, external domains: deb.nodesource.com, github.com, json-schema.org, raw.githubusercontent.com

Source & flagged code

7 flagged

package.jsonView file

Lines 76-101json

76 "gemini",

77 "cli"

78 ],

79 "license": "Apache-2.0",

80 "publishConfig": {

81 "registry": "https://registry.npmjs.org",

82 "access": "public"

83 },

84 "scripts": {

85 "build": "rm -rf dist && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external pg --external @hasna/contracts --external @hasna/mcp-harness --external @modelcontextprotocol/sdk --external @e2b/code-interpreter --external @daytonaio/sdk --external @onkernel/sdk --external modal && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external pg --external @hasna/contracts --external @hasna/mcp-harness --external @modelcontextprotocol/sdk --external @e2b/code-interpreter --external @daytonaio/sdk --external @onkernel/sdk ...

86 "typecheck": "tsc --noEmit",

87 "test": "bun test",

88 "migrate": "bun run src/server/index.ts migrate",

89 "generate:sdk": "bun run scripts/generate-sdk.ts",

90 "verify:release": "bun run scripts/release-guard.ts",

91 "dev:cli": "bun run src/cli/index.tsx",

92 "dev:mcp": "bun run src/mcp/index.ts",

93 "dev:serve": "bun run src/server/index.ts",

94 "prepack": "bun run build && bun run verify:release",

95 "prepublishOnly": "bun run typecheck && bun run test",

96 "postinstall": "mkdir -p $HOME/.hasna/sandboxes 2>/dev/null || true"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L96

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L96

97 },

98 "type": "module",

99 "types": "dist/index.d.ts"

100}

101

Long lines were clipped for display.

dist/index.jsView file

Lines 186-226javascript

186 id: sandbox.sandboxId,

187 status: "running"

188 };

189 } catch (err) {

190 throw new ProviderError("e2b", `Failed to create sandbox: ${err.message}`);

191 }

192

dist/server/index.jsView file

8358resolveSigningSecret: () => resolveSigningSecret, L8359: resolveCloudDatabaseUrl: () => resolveCloudDatabaseUrl, L8360: pingCloud: () => pingCloud, ... L9937: try { L9938: const raw = readFileSync(configPath, "utf-8"); L9939: return JSON.parse(raw); ... L23933: { name: "list_projects", description: "List all projects" }, L23934: { name: "describe_tools", description: "List all available tools" }, L23935: { name: "search_tools", description: "Search tools by keyword" },

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/server/index.jsView on unpkg · L8358

3998sourceCode = this.opts.code.process(sourceCode, sch); L3999: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L4000: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/server/index.jsView on unpkg · L3998

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = mkdir -p $HOME/.hasna/sandboxes 2>/dev/null || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = mkdir -p $HOME/.hasna/sandboxes 2>/dev/null || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

206} L207: async exec(sandboxId, command, opts) { L208: const sandbox = await this.getInstance(sandboxId);

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L206

711const cmd = `mkdir -p ${this.shellEscape(dirPath)} && echo ${encoded} | base64 -d > ${this.shellEscape(path)}`; L712: const result = await this.exec(sandboxId, `sh -c ${this.shellEscape(cmd)}`); L713: const execResult = result;

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L711

•matchType = previous_version_dangerous_delta matchedPackage = @hasna/sandboxes@0.2.1 matchedIdentity = npm:QGhhc25hL3NhbmRib3hlcw:0.2.1 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

dist/server/index.jsView file

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/server/index.jsView on unpkg · L8358

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/server/index.jsView on unpkg · L3998

Findings

5 High4 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/index.js

HighShelldist/index.js

HighRemote Agent Bridgedist/server/index.js

HighPrevious Version Dangerous Deltadist/index.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/server/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

package.jsonView file

Lines 76-101json

76 "gemini",

77 "cli"

78 ],

79 "license": "Apache-2.0",

80 "publishConfig": {

81 "registry": "https://registry.npmjs.org",

82 "access": "public"

83 },

84 "scripts": {

86 "typecheck": "tsc --noEmit",

87 "test": "bun test",

88 "migrate": "bun run src/server/index.ts migrate",

89 "generate:sdk": "bun run scripts/generate-sdk.ts",

90 "verify:release": "bun run scripts/release-guard.ts",

91 "dev:cli": "bun run src/cli/index.tsx",

92 "dev:mcp": "bun run src/mcp/index.ts",

93 "dev:serve": "bun run src/server/index.ts",

94 "prepack": "bun run build && bun run verify:release",

95 "prepublishOnly": "bun run typecheck && bun run test",

96 "postinstall": "mkdir -p $HOME/.hasna/sandboxes 2>/dev/null || true"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L96

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L96

97 },

98 "type": "module",

99 "types": "dist/index.d.ts"

100}

101

Long lines were clipped for display.

dist/index.jsView file

Lines 186-226javascript

186 id: sandbox.sandboxId,

187 status: "running"

188 };

189 } catch (err) {

190 throw new ProviderError("e2b", `Failed to create sandbox: ${err.message}`);

191 }

192

dist/server/index.jsView file

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/server/index.jsView on unpkg · L8358

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/server/index.jsView on unpkg · L3998

Lines 691-731javascript

691 }

692 }

693 async readFile(sandboxId, path) {

694 try {

695 const result = await this.exec(sandboxId, `cat ${this.shellEscape(path)}`);

696 const execResult = result;

697 if (execResult.exit_code !== 0) {

698 throw new Error(execResult.stderr || `cat exited with code ${execResult.exit_code}`);

699 }

700 return execResult.stdout;

701 } catch (err) {

702 if (err instanceof ProviderError)

703 throw err;

704 throw new ProviderError("modal", `Failed to read file ${path}: ${err.message}`);

705 }

706 }

707 async writeFile(sandboxId, path, content) {

708 try {

709 const encoded = Buffer.from(content).toString("base64");

710 const dirPath = path.substring(0, path.lastIndexOf("/")) || "/";

711 const cmd = `mkdir -p ${this.shellEscape(dirPath)} && echo ${encoded} | base64 -d > ${this.shellEscape(path)}`;

712 const result = await this.exec(sandboxId, `sh -c ${this.shellEscape(cmd)}`);

713 const execResult = result;

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L711

714 if (execResult.exit_code !== 0) {

715 throw new Error(execResult.stderr || `write exited with code ${execResult.exit_code}`);

716 }

717 } catch (err) {

718 if (err instanceof ProviderError)

719 throw err;

720 throw new ProviderError("modal", `Failed to write file ${path}: ${err.message}`);

721 }

722 }

723 async listFiles(sandboxId, path) {

724 try {

725 const result = await this.exec(sandboxId, `ls -la ${this.shellEscape(path)}`);

726 const execResult = result;

727 if (execResult.exit_code !== 0) {

728 throw new Error(execResult.stderr || `ls exited with code ${execResult.exit_code}`);

729 }

730 const lines = execResult.stdout.split(`

731`).filter((l) => l.trim());