registry / @ipv9/tokentracker-cli / 0.39.31

@ipv9/tokentracker-cli@0.39.31

Local-first token and cost dashboard for 22 AI coding tools, including Claude Code, Codex, Cursor, Gemini, Kiro, OpenCode, OpenClaw, Copilot, Antigravity, Zed, and Goose.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 88 file(s), 3.19 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.github.com, api.kimi.com, api.openai.com, auth.kimi.com, auth.openai.com, base-ui.com, chatgpt.com, cloudcode-pa.googleapis.com, cursor.com, fonts.googleapis.com, github.com, ip.net.coffee, jcgt.org, local.tokentracker, oauth2.googleapis.com, open.er-api.com, raw.githubusercontent.com, reactjs.org, skills.sh, socket.io, srctyff5.us-east.insforge.app, tokentracker.statuspage.io, twitter.com, va.vercel-scripts.com, vercel.com, www.cursor.com, www.tokentracker.cc, www.w3.org

Source & flagged code

6 flagged

src/lib/claude-categorizer.jsView file

Lines 314-354javascript

314 total_calls: [...toolCallCounts.values()].reduce((a, b) => a + b, 0),

315 by_name: new Map(

316 [...toolCallCounts.entries()].map(([name, calls]) => [

317 name,

318 { name, calls, output_tokens: toolTokensByName.get(name) || 0 },

319 ]),

320 ),

321 },

322 subagents: {

323 total_calls: [...subagentCounts.values()].reduce((a, b) => a + b, 0),

324 by_name: new Map(

325 [...subagentCounts.entries()].map(([name, calls]) => [

326 name,

327 { name, calls, output_tokens: subagentTokensByName.get(name) || 0 },

328 ]),

329 ),

330 },

331 };

332}

333

334function defaultClaudeProjectsDir() {

335 return path.join(os.homedir(), ".claude", "projects");

336}

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/lib/claude-categorizer.jsView on unpkg · L334

337

338function listSessionFiles(rootDir) {

339 const out = [];

340 const stack = [rootDir];

341 while (stack.length > 0) {

342 const dir = stack.pop();

343 let entries;

344 try {

345 entries = fssync.readdirSync(dir, { withFileTypes: true });

346 } catch (_e) {

347 continue;

348 }

349 for (const entry of entries) {

350 const fp = path.join(dir, entry.name);

351 if (entry.isDirectory()) {

352 stack.push(fp);

353 } else if (entry.isFile() && entry.name.endsWith(".jsonl")) {

354 out.push(fp);

src/lib/proxy-env.jsView file

Lines 86-126javascript

86}

88// Node's built-in NODE_USE_ENV_PROXY support only landed in v22.21 / v24.5.

89// For older runtimes (including the v22.14 we historically embedded in the

90// macOS app, and the v22.16 a community user hit on Discussion #68) the env

91// var is silently ignored and fetch() bypasses the proxy. Setting an undici

92// ProxyAgent dispatcher at startup gives us proxy support on every Node ≥ 18

93// regardless of the env-proxy flag.

94function applyUndiciProxyIfNeeded({

95 env =

scripts/uninstall-local-service.shView file

•path = scripts/uninstall-local-service.sh kind = build_helper sizeBytes = 813 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/uninstall-local-service.shView on unpkg

dashboard/dist/assets/geist-mono-cyrillic-500-normal-mNhfPmgl.woffView file

•path = dashboard/dist/assets/geist-mono-cyrillic-500-normal-mNhfPmgl.woff kind = high_entropy_blob sizeBytes = 7352 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dashboard/dist/assets/geist-mono-cyrillic-500-normal-mNhfPmgl.woffView on unpkg

src/lib/local-api.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @ipv9/tokentracker-cli@0.39.29 matchedIdentity = npm:QGlwdjkvdG9rZW50cmFja2VyLWNsaQ:0.39.29 similarity = 0.989 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/lib/local-api.jsView on unpkg

src/lib/cursor-config.jsView file

Lines 55-95javascript

56function readCursorAccessTokenFromStateDb(stateDbPath, deps = {}) {

57 return readSqliteFirstValue(stateDbPath, CURSOR_ACCESS_TOKEN_SQL, "value", {

58 execFileSync: deps.execFileSync,

59 requireFn: deps.requireFn,

60 env: deps.env,

61 stderr: deps.stderr,

Source & flagged code

6 flagged · loading source

src/lib/claude-categorizer.jsView file

334function defaultClaudeProjectsDir() { L335: return path.join(os.homedir(), ".claude", "projects"); L336: } ... L511: try { L512: obj = JSON.parse(line); L513: } catch (_e) {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/lib/claude-categorizer.jsView on unpkg · L334

src/lib/proxy-env.jsView file

106package = @ipv9/tokentracker-cli; repositoryIdentity = tokentracker; dependency = undici L106: // eslint-disable-next-line global-require L107: const undici = require("undici"); L108: setter = setter || undici.setGlobalDispatcher;

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

src/lib/proxy-env.jsView on unpkg · L106

scripts/uninstall-local-service.shView file

•path = scripts/uninstall-local-service.sh kind = build_helper sizeBytes = 813 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/uninstall-local-service.shView on unpkg

dashboard/dist/assets/geist-mono-cyrillic-500-normal-mNhfPmgl.woffView file

•path = dashboard/dist/assets/geist-mono-cyrillic-500-normal-mNhfPmgl.woff kind = high_entropy_blob sizeBytes = 7352 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dashboard/dist/assets/geist-mono-cyrillic-500-normal-mNhfPmgl.woffView on unpkg

src/lib/local-api.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/lib/local-api.jsView on unpkg

src/lib/cursor-config.jsView file

75patternName = generic_password severity = medium line = 75 matchedText = * - na...XXX"

Medium

Secret Pattern

Hardcoded password in src/lib/cursor-config.js

src/lib/cursor-config.jsView on unpkg · L75

Findings

3 High5 Medium6 Low

HighCopied Package Dependency Bridgesrc/lib/proxy-env.js

HighShips High Entropy Blobdashboard/dist/assets/geist-mono-cyrillic-500-normal-mNhfPmgl.woff

HighPrevious Version Dangerous Deltasrc/lib/local-api.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/uninstall-local-service.sh

MediumStructural Risk Force Deep Review

MediumSecret Patternsrc/lib/cursor-config.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptosrc/lib/claude-categorizer.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

src/lib/claude-categorizer.jsView file

Lines 314-354javascript

314 total_calls: [...toolCallCounts.values()].reduce((a, b) => a + b, 0),

315 by_name: new Map(

316 [...toolCallCounts.entries()].map(([name, calls]) => [

317 name,

318 { name, calls, output_tokens: toolTokensByName.get(name) || 0 },

319 ]),

320 ),

321 },

322 subagents: {

323 total_calls: [...subagentCounts.values()].reduce((a, b) => a + b, 0),

324 by_name: new Map(

325 [...subagentCounts.entries()].map(([name, calls]) => [

326 name,

327 { name, calls, output_tokens: subagentTokensByName.get(name) || 0 },

328 ]),

329 ),

330 },

331 };

332}

333

334function defaultClaudeProjectsDir() {

335 return path.join(os.homedir(), ".claude", "projects");

336}

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/lib/claude-categorizer.jsView on unpkg · L334

337

338function listSessionFiles(rootDir) {

339 const out = [];

340 const stack = [rootDir];

341 while (stack.length > 0) {

342 const dir = stack.pop();

343 let entries;

344 try {

345 entries = fssync.readdirSync(dir, { withFileTypes: true });

346 } catch (_e) {

347 continue;

348 }

349 for (const entry of entries) {

350 const fp = path.join(dir, entry.name);

351 if (entry.isDirectory()) {

352 stack.push(fp);

353 } else if (entry.isFile() && entry.name.endsWith(".jsonl")) {

354 out.push(fp);

src/lib/proxy-env.jsView file

Lines 86-126javascript

86}

88// Node's built-in NODE_USE_ENV_PROXY support only landed in v22.21 / v24.5.

89// For older runtimes (including the v22.14 we historically embedded in the

90// macOS app, and the v22.16 a community user hit on Discussion #68) the env

91// var is silently ignored and fetch() bypasses the proxy. Setting an undici

92// ProxyAgent dispatcher at startup gives us proxy support on every Node ≥ 18

93// regardless of the env-proxy flag.

94function applyUndiciProxyIfNeeded({

95 env =

scripts/uninstall-local-service.shView file

•path = scripts/uninstall-local-service.sh kind = build_helper sizeBytes = 813 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/uninstall-local-service.shView on unpkg

dashboard/dist/assets/geist-mono-cyrillic-500-normal-mNhfPmgl.woffView file

•path = dashboard/dist/assets/geist-mono-cyrillic-500-normal-mNhfPmgl.woff kind = high_entropy_blob sizeBytes = 7352 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dashboard/dist/assets/geist-mono-cyrillic-500-normal-mNhfPmgl.woffView on unpkg

src/lib/local-api.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/lib/local-api.jsView on unpkg

src/lib/cursor-config.jsView file

Lines 55-95javascript

56function readCursorAccessTokenFromStateDb(stateDbPath, deps = {}) {

57 return readSqliteFirstValue(stateDbPath, CURSOR_ACCESS_TOKEN_SQL, "value", {

58 execFileSync: deps.execFileSync,

59 requireFn: deps.requireFn,

60 env: deps.env,

61 stderr: deps.stderr,