@jacebenson/jsn@4.3.9

⚠ Under review

A command-line interface for ServiceNow that follows the Unix philosophy: simple, composable, and scriptable.

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 17 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 103 file(s), 1.19 MB of source, external domains: 127.0.0.1, dev12345.service-now.com, dev328604.service-now.com, github.com, install.service-now.com, raw.githubusercontent.com, registry.npmjs.org, store.servicenow.com, www.w3.org

Source & flagged code

8 flagged

src/auth.jsView file

Lines 1-29javascript

1// OAuth 2.0 with PKCE authentication

2// Credentials are stored in the OS keyring (shared with Go version via libsecret/secret-tool)

3// Falls back to file-based storage when keyring is unavailable.

4// Credentials are keyed by <username>@<instance> so different users on the

5// same instance have separate credential slots.

7import fs from 'node:fs';

8import path from 'node:path';

9import crypto from 'node:crypto';

10import { execFileSync } from 'node:child_process';

11import { password as passwordPrompt } from '@inquirer/prompts';

High

Child Process

Package source references child process execution.

src/auth.jsView on unpkg · L9

12import { globalConfigDir, normalizeInstanceURL } from './config.js';

13import { errAuth } from './errors.js';

15// ─── Credential key helpers ───

17/**

18 * Sanitize an instance URL into a filesystem/arg-safe key part.

19 *

20 * Whitelist approach (issue #143 findings #2/#3): first map the `://`

21 * protocol separator to `_` exactly as the Go version's encoding does

22 * (so existing keyring keys like `https_dev437538.service-now.com` keep

23 * matching), then drop everything outside [a-zA-Z0-9._-]. Blacklist

24 * stripping of just `/` and `:` left quotes, `$()`, backticks, `;`,

25 * spaces, and backslashes — which broke out of double-quoted shell args

26 * in keyring calls and, on Windows, out of path.join() credential dirs.

27 */

28export function sanitizeKeyPart(instance) {

29 return instance.replace(/:\/\//g, '_').replace(/[^a-zA-Z0-9._-]/g, '_');

src/midserver-direct.jsView file

Lines 1-23javascript

1import fs from 'node:fs';

2import path from 'node:path';

3import process from 'node:process';

4import { execFileSync } from 'node:child_process';

src/commands/skill.jsView file

Lines 1-40javascript

1import fs from 'node:fs';

2import path from 'node:path';

3import os from 'node:os';

4import process from 'node:process';

src/cli.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/cli.js#virtual:normalized:round1View on unpkg

src/commands/docs/public/vendor/marked.min.jsView file

•matchType = normalized_sha256 matchedPackage = @mindexec/cli@0.2.478 matchedPath = wwwroot/_content/MindExecution.Shared/js/marked.min.js matchedIdentity = npm:QG1pbmRleGVjL2NsaQ:0.2.478 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/commands/docs/public/vendor/marked.min.jsView on unpkg

Source & flagged code

8 flagged · loading source

src/auth.jsView file

9import crypto from 'node:crypto'; L10: import { execFileSync } from 'node:child_process'; L11: import { password as passwordPrompt } from '@inquirer/prompts';

High

Child Process

Package source references child process execution.

src/auth.jsView on unpkg · L9

src/midserver-direct.jsView file

3import process from 'node:process'; L4: import { execFileSync } from 'node:child_process'; L5: import { createHash } from 'node:crypto'; ... L11: L12: export function detectDirectPlatform(platform = process.platform, arch = process.arch) { L13: if (!['linux', 'win32'].includes(platform)) throw new Error('Direct MID installs require Linux and Windows'); ... L25: if (Number.isNaN(date.valueOf()) || date.toISOString().slice(0, 10) !== `${year}-${month}-${day}`) throw new Error('Invalid MID build date'); L26: return `https://install.service-now.[redacted]-signed/mid/${year}/${month}/${day}/mid.${releaseName}.${native}.x86-64.zip`; L27: } ... L30: return execFileSync('powershell.exe', ['-NoLogo', '-NoProfile', '-NonInteractive', '-EncodedCommand', L31: Buffer.from(`$ErrorActionPreference='

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/midserver-direct.jsView on unpkg · L3

Findings

8 High4 Medium5 Low

HighChild Processsrc/auth.js

HighShell

HighSame File Env Network Executionsrc/commands/skill.js

HighSandbox Evasion Gated Capabilitysrc/midserver-direct.js

HighTrigger Reachable Persistencesrc/midserver-direct.js

HighSemantic Analysis Limitedsrc/cli.js#virtual:normalized:round1

HighKnown Malware Source Similaritysrc/commands/docs/public/vendor/marked.min.js

HighPrevious Version Dangerous Deltasrc/commands/skill.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencesrc/midserver-direct.js

MediumStructural Risk Force Deep Review

LowScripts Present

Affected versions and remediation

This report applies to @jacebenson/jsn@4.3.9.

See all versions of @jacebenson/jsn for other recorded verdicts.

Review the evidence and your use of @jacebenson/jsn@4.3.9 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-15 18:27:39.724Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.