registry / @hiver.sh/client / 0.1.23

@hiver.sh/client@0.1.23

TypeScript client for the Hiver runtime.

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 42 file(s), 208 KB of source, external domains: 127.0.0.1, console.cloud.google.com, example.com, example.org, finnhub.io, github.com, news.ycombinator.com, www.google.com, www.googleapis.com

Source & flagged code

5 flagged

dist/index.jsView file

Lines 464-504javascript

464 if (!follow) armIdle();

465 try {

466 for await (const frame of parseSSE(res.body, ac.signal)) {

467 if (!follow) armIdle();

468 yield SandboxEvent.parse(JSON.parse(frame.data));

469 }

470 } catch (err) {

471 if (!isAbortError(err)) throw err;

472 } finally {

473 clearTimeout(idleTimer);

474 ac.abort();

475 }

476 }

477 /**

478 * Run `command` inside the sandbox and return buffered stdout, stderr,

479 * and exit code once the process finishes.

480 *

481 * `command` may be a string (passed to a shell via `sh -c`) or a string

482 * array (executed directly as argv, each element a literal argument with no

483 * shell, word-splitting, or expansion).

484 */

485 async exec(command, opts) {

486 const body = { command };

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L484

487 if (opts?.cwd !== void 0) body.cwd = opts.cwd;

488 if (opts?.env !== void 0) body.env = opts.env;

489 const res = await this.fetchImpl(`${this.apiServerUrl}/v1/${encodeURIComponent(this.key)}/exec`, {

490 method: "POST",

491 headers: { "content-type": "application/json" },

492 body: JSON.stringify(body),

493 signal: resolveSignal(opts)

494 });

495 if (!res.ok) throw await toError(res, "exec");

496 return res.json();

497 }

498 /**

499 * Run `command` inside the sandbox and return an `ExecProcess` handle for

500 * interactive use: stream output via `exec.pipes`, send input via

501 * `exec.writeStdin()`, and await the result via `exec.exitCode`.

502 *

503 * `command` may be a string (passed to a shell via `sh -c`) or a string

504 * array (executed directly as argv, each element a literal argument with no

examples/mcp-server/image/server.tsView file

Lines 1-21typescript

1import { createServer } from "node:http";

2import { execFile } from "node:child_process";

3import { promisify } from "node:util";

4import { readFile, writeFile, mkdir, readdir, stat } from "node:fs/promises";

5import { join, dirname, relative, basename } from "node:path";

examples/mcp-server/index.tsView file

Lines 1-23typescript

1// Spin up a sandbox running the local `mcp-server` image and hand its

2// exposed port to the MCP Inspector.

3//

4// Run with: npx tsx examples/mcp-server

5import { spawn } from "node:child_process";

6import { dirname, join } from "node:path";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

examples/mcp-server/index.tsView on unpkg · L3

7import

examples/local-filesystem-mount/skills/echo/echo.shView file

•path = examples/local-filesystem-mount/skills/echo/echo.sh kind = build_helper sizeBytes = 81 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/local-filesystem-mount/skills/echo/echo.shView on unpkg

Source & flagged code

5 flagged · loading source

dist/index.jsView file

484*/ L485: async exec(command, opts) { L486: const body = { command };

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L484

examples/mcp-server/image/server.tsView file

214inputSchema: { L215: cmd: z.string().describe("Shell command to execute via /bin/sh -c"), L216: cwd: z

High

Shell

Package source references shell execution.

examples/mcp-server/image/server.tsView on unpkg · L214

1import { createServer } from "node:http"; L2: import { execFile } from "node:child_process"; L3: import { promisify } from "node:util"; ... L11: L12: const PORT = Number(process.env.PORT ?? 3000); L13: const DEFAULT_READ_LIMIT = 2000;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

examples/mcp-server/image/server.tsView on unpkg · L1

examples/mcp-server/index.tsView file

3// L4: // Run with: npx tsx examples/mcp-server L5: import { spawn } from "node:child_process"; L6: import { dirname, join } from "node:path";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

examples/mcp-server/index.tsView on unpkg · L3

examples/local-filesystem-mount/skills/echo/echo.shView file

•path = examples/local-filesystem-mount/skills/echo/echo.sh kind = build_helper sizeBytes = 81 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/local-filesystem-mount/skills/echo/echo.shView on unpkg

Findings

4 High4 Medium6 Low

HighChild Processdist/index.js

HighShellexamples/mcp-server/image/server.ts

HighSame File Env Network Executionexamples/mcp-server/image/server.ts

HighRuntime Package Installexamples/mcp-server/index.ts

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperexamples/local-filesystem-mount/skills/echo/echo.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

5 flagged

dist/index.jsView file

Lines 464-504javascript

464 if (!follow) armIdle();

465 try {

466 for await (const frame of parseSSE(res.body, ac.signal)) {

467 if (!follow) armIdle();

468 yield SandboxEvent.parse(JSON.parse(frame.data));

469 }

470 } catch (err) {

471 if (!isAbortError(err)) throw err;

472 } finally {

473 clearTimeout(idleTimer);

474 ac.abort();

475 }

476 }

477 /**

478 * Run `command` inside the sandbox and return buffered stdout, stderr,

479 * and exit code once the process finishes.

480 *

481 * `command` may be a string (passed to a shell via `sh -c`) or a string

482 * array (executed directly as argv, each element a literal argument with no

483 * shell, word-splitting, or expansion).

484 */

485 async exec(command, opts) {

486 const body = { command };

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L484

487 if (opts?.cwd !== void 0) body.cwd = opts.cwd;

488 if (opts?.env !== void 0) body.env = opts.env;

489 const res = await this.fetchImpl(`${this.apiServerUrl}/v1/${encodeURIComponent(this.key)}/exec`, {

490 method: "POST",

491 headers: { "content-type": "application/json" },

492 body: JSON.stringify(body),

493 signal: resolveSignal(opts)

494 });

495 if (!res.ok) throw await toError(res, "exec");

496 return res.json();

497 }

498 /**

499 * Run `command` inside the sandbox and return an `ExecProcess` handle for

500 * interactive use: stream output via `exec.pipes`, send input via

501 * `exec.writeStdin()`, and await the result via `exec.exitCode`.

502 *

503 * `command` may be a string (passed to a shell via `sh -c`) or a string

504 * array (executed directly as argv, each element a literal argument with no

examples/mcp-server/image/server.tsView file

Lines 1-21typescript

1import { createServer } from "node:http";

2import { execFile } from "node:child_process";

3import { promisify } from "node:util";

4import { readFile, writeFile, mkdir, readdir, stat } from "node:fs/promises";

5import { join, dirname, relative, basename } from "node:path";

examples/mcp-server/index.tsView file

Lines 1-23typescript

1// Spin up a sandbox running the local `mcp-server` image and hand its

2// exposed port to the MCP Inspector.

3//

4// Run with: npx tsx examples/mcp-server

5import { spawn } from "node:child_process";

6import { dirname, join } from "node:path";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

examples/mcp-server/index.tsView on unpkg · L3

7import

examples/local-filesystem-mount/skills/echo/echo.shView file

•path = examples/local-filesystem-mount/skills/echo/echo.sh kind = build_helper sizeBytes = 81 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/local-filesystem-mount/skills/echo/echo.shView on unpkg

Lines 194-234typescript

194 } else {

195 await grepFile(path);

196 }

197 return { matches };

198}

199

200// ── MCP server setup ──────────────────────────────────────────────────────────

201

202function buildMcpServer(): McpServer {

203 const server = new McpServer({

204 name: "sandbox-mcp-server",

205 version: "1.0.0",

206 });

207

208 server.registerTool(

209 "bash",

210 {

211 description:

212 "Execute a shell command and return stdout, stderr, and exit code. " +

213 "Use 'read'/'write'/'edit'/'glob'/'grep' before falling back to 'bash' equivalents — they are typed, faster, and produce cleaner diffs.",

214 inputSchema: {

215 cmd: z.string().describe("Shell command to execute via /bin/sh -c"),

216 cwd: z

High

Shell

Package source references shell execution.

examples/mcp-server/image/server.tsView on unpkg · L214

217 .string()

218 .optional()

219 .describe("Absolute working directory. Defaults to the process cwd."),

220 },

221 },

222 async ({ cmd, cwd }) => {

223 console.log(`[bash] ${cmd}`);

224 return {

225 content: [{ type: "text", text: JSON.stringify(await bash(cmd, cwd)) }],

226 };

227 },

228 );

229

230 server.registerTool(

231 "read",

232 {

233 description:

234 "Read the contents of a file. Use this instead of 'cat' when you only need to inspect a file.",