registry / @jait/gateway / 0.1.563

@jait/gateway@0.1.563

⚠ Under review

Jait AI gateway — local-first AI coding agent with terminal, filesystem, and browser control

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis flagged 18 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 627 file(s), 14.4 MB of source, external domains: 127.0.0.1, 192.168.178.53, accounts.google.com, api.bitbucket.org, api.botframework.com, api.elevenlabs.io, api.github.com, api.moonshot.ai, api.openai.com, api.perplexity.ai, api.search.brave.com, api.telegram.org, api.x.ai, chevrotain.io, clawhub.ai, dev.azure.com, en.wikipedia.org, generativelanguage.googleapis.com, github.com, gmail.googleapis.com, graph.microsoft.com, ipapi.co, jquery.org, langium.org, login.botframework.com, login.microsoftonline.com, oauth2.googleapis.com, openrouter.ai, react.dev, sts.windows.net, tldrlegal.com, wttr.in, www.googleapis.com, www.w3.org

Oversized source lightweight scan

web-dist/assets/index-CKatg4Cd.js3.14 MB file, sampled 256 KB

FilesystemNetworkWebSocketDynamicRequireHighEntropyStringsMinifiedUrlStringsreact.dev

Source & flagged code

10 flagged

web-dist/assets/index-DANla4EU.jsView file

Lines 121-143javascript

121Join_Control Join_C

122Logical_Order_Exception LOE

123Lowercase Lower

124Math

125Noncharacter_Code_Point NChar

126Pattern_Syntax Pat_Syn

127Pattern_White_Space Pat_WS

128Quotation_Mark QMark

129Radical

130Regional_Indicator RI

131Sentence_Terminal STerm

132Soft_Dotted SD

133Terminal_Punctuation Term

134Unified_Ideograph UIdeo

135Uppercase Upper

136Variation_Selector VS

137White_Space space

138XID_Continue XIDC

139XID_Start XIDS`.split(/\s/).map(e=>[fe(e),e])),pi=new Map([["s",w(383)],[w(383),"s"]]),mi=new Map([[w(223),w(7838)],[w(107),w(8490)],[w(229),w(8491)],[w(969),w(8486)]]),ci=new Map([N(453),N(456),N(459),N(498),...Ie(8072,8079),...Ie(8088,8095),...Ie(8104,8111),N(8124),N(8140),N(8188)]),di=new Map([["alnum",g`[\p{Alpha}\p{Nd}]`],["alpha",g`\p{Alpha}`],["ascii",g`\p{ASCII}`],["blank",g`[\p{Zs}\t]`],["cntrl",g`\p{Cc}`],["digit",g`\p{Nd}`],["graph",g`[\P{space}&&\P{Cc}&&\P{Cn}&&\P{Cs}]`],["lower",g`\p{Lower}`],["print",g`[[\P{space}&&\P{Cc}

140]`:`(?>\r

141?|[

142\v\f\u2028\u2029])`),r));else if(l==="posix")if(!n&&(c==="graph"||c==="print")){if(i==="strict")throw new Error(`POSIX class "${c}" requires min target ES2024 or non-strict accuracy`);let m={graph:"!-~",print:" -~"}[c];p&&

143

Long lines were clipped for display.

bin/jait.mjsView file

Lines 617-657javascript

617 process.exit(1);

618 }

619}

620

621function resolveNodePath() {

622 try {

623 return runSilent("which node");

624 } catch {

625

dist/tools/screenshot-tools.jsView file

Lines 37-77javascript

37 description: "Click these elements before capturing (in order).",

38 },

39 fill: {

40 type: "array",

41 items: { type: "string", description: "'selector:text' pair" },

42 description

web-dist/assets/ruby-Wjq7vjNf.jsView file

Lines 1-2javascript

1import e from"./html-pp8916En.js";import n from"./haml-D5jkg6IW.js";import t from"./xml-sdJ4AIDG.js";import a from"./sql-BLtJtn59.js";import r from"./graphql-ChdNCCLP.js";import i from"./css-CLj8gQPS.js";import u from"./cpp-CofmeUqb.js";import s from"./c-BIGW1oBm.js"

dist/tools/redeploy-tools.jsView file

Lines 1-26javascript

1/**

2 * gateway.redeploy — Self-update tool for the Jait gateway.

3 *

4 * Detects the runtime environment and uses the appropriate strategy:

5 *

6 * **systemd** (detected when INVOCATION_ID is set):

7 * 1. npm install -g @jait/gateway@latest

8 * 2. Spawn canary on PORT+1, health-check it

9 * 3. If healthy → kill canary, exit process.

10 * systemd's Restart=always automatically brings up the new version.

11 * 4. If unhealthy → kill canary, report failure, stay running.

dist/tools/browser-tools.jsView file

Lines 1-24javascript

1import { BrowserSurface } from "../surfaces/browser.js";

2import { SSRFGuard } from "../security/ssrf-guard.js";

3import { SandboxManager } from "../security/sandbox-manager.js";

4const DEFAULT_BROWSER_ID = "browser-default";

5const DEFAULT_OPENAI_BASE_URL =

web-dist/noVNC/app/images/icons/MakefileView file

•path = web-[redacted] kind = build_helper sizeBytes = 1331 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

web-dist/noVNC/app/images/icons/MakefileView on unpkg

web-dist/noVNC/app/sounds/bell.ogaView file

•path = web-dist/noVNC/app/sounds/bell.oga kind = high_entropy_blob sizeBytes = 8495 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web-dist/noVNC/app/sounds/bell.ogaView on unpkg

web-dist/assets/index-CKatg4Cd.jsView file

•path = web-dist/assets/index-CKatg4Cd.js kind = oversized_source_file sizeBytes = 3295023 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

web-dist/assets/index-CKatg4Cd.jsView on unpkg

Source & flagged code

10 flagged · loading source

web-dist/assets/index-DANla4EU.jsView file

141?|[ L142: \v\f\u2028\u2029])`),r));else if(l==="posix")if(!n&&(c==="graph"||c==="print")){if(i==="strict")throw new Error(`POSIX class "${c}" requires min target ES2024 or non-strict accura...

High

Child Process

Package source references child process execution.

web-dist/assets/index-DANla4EU.jsView on unpkg · L141

bin/jait.mjsView file

637L638: const execArgs = [nodePath, jaitBin]; L639: if (existsSync(envFlag)) execArgs.push("--env", envFlag);

High

Shell

Package source references shell execution.

bin/jait.mjsView on unpkg · L637

dist/tools/screenshot-tools.jsView file

57try { L58: const loadPlaywright = new Function("return import('playwright')"); L59: const mod = (await loadPlaywright());

High

Eval

Package source references dynamic code evaluation.

dist/tools/screenshot-tools.jsView on unpkg · L57

web-dist/assets/ruby-Wjq7vjNf.jsView file

1import e from"./html-pp8916En.js";import n from"./haml-D5jkg6IW.js";import t from"./xml-sdJ4AIDG.js";import a from"./sql-BLtJtn59.js";import r from"./graphql-ChdNCCLP.js";import i ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

web-dist/assets/ruby-Wjq7vjNf.jsView on unpkg · L1

dist/tools/redeploy-tools.jsView file

101log(`🐤 Starting canary on port ${canaryPort}...\n`); L102: const canary = spawn("jait", ["--port", String(canaryPort)], { L103: stdio: "ignore", L104: detached: true, L105: env: { ...process.env, PORT: String(canaryPort), __JAIT_CLI: "1" }, L106: windowsHide: true, ... L108: canary.unref(); L109: const healthy = await waitForHealth(`http://127.0.0.1:${canaryPort}`, 30_000); L110: if (!healthy) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/tools/redeploy-tools.jsView on unpkg · L101

6* **systemd** (detected when INVOCATION_ID is set): L7: * 1. npm install -g @jait/gateway@latest L8: * 2. Spawn canary on PORT+1, health-check it ... L19: */ L20: import { execSync, spawn } from "node:child_process"; L21: export function createRedeployTool(deps) {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/tools/redeploy-tools.jsView on unpkg · L6

dist/tools/browser-tools.jsView file

4const DEFAULT_BROWSER_ID = "browser-default"; L5: const DEFAULT_OPENAI_BASE_URL = "https://api.openai.com/v1"; L6: const DEFAULT_OPENAI_WEB_SEARCH_MODEL = "gpt-5"; ... L131: message: `Navigated to ${snapshot.url}`, L132: data: buildSnapshotPayload(surface.id, snapshot, session), L133: }; ... L362: const timeout = setTimeout(() => controller.abort(), timeoutMs); L363: const ignoreTlsErrors = input.ignoreTlsErrors === true || process.env["WEB_FETCH_IGNORE_TLS_ERRORS"] === "true"; L364: try { ... L370: }, ignoreTlsErrors); L371: const text = await response.text(); L372: return {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/tools/browser-tools.jsView on unpkg · L4

web-dist/noVNC/app/images/icons/MakefileView file

•path = web-[redacted] kind = build_helper sizeBytes = 1331 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

web-dist/noVNC/app/images/icons/MakefileView on unpkg

web-dist/noVNC/app/sounds/bell.ogaView file

•path = web-dist/noVNC/app/sounds/bell.oga kind = high_entropy_blob sizeBytes = 8495 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web-dist/noVNC/app/sounds/bell.ogaView on unpkg

web-dist/assets/index-CKatg4Cd.jsView file

•path = web-dist/assets/index-CKatg4Cd.js kind = oversized_source_file sizeBytes = 3295023 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

web-dist/assets/index-CKatg4Cd.jsView on unpkg

Findings

1 Critical7 High5 Medium5 Low

CriticalCredential Exfiltrationdist/tools/browser-tools.js

HighChild Processweb-dist/assets/index-DANla4EU.js

HighShellbin/jait.mjs

HighEvaldist/tools/screenshot-tools.js

HighSame File Env Network Executiondist/tools/redeploy-tools.js

HighRuntime Package Installdist/tools/redeploy-tools.js

HighShips High Entropy Blobweb-dist/noVNC/app/sounds/bell.oga

HighOversized Source Fileweb-dist/assets/index-CKatg4Cd.js

MediumDynamic Requireweb-dist/assets/ruby-Wjq7vjNf.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperweb-dist/noVNC/app/images/icons/Makefile

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

10 flagged

web-dist/assets/index-DANla4EU.jsView file

Lines 121-143javascript

121Join_Control Join_C

122Logical_Order_Exception LOE

123Lowercase Lower

124Math

125Noncharacter_Code_Point NChar

126Pattern_Syntax Pat_Syn

127Pattern_White_Space Pat_WS

128Quotation_Mark QMark

129Radical

130Regional_Indicator RI

131Sentence_Terminal STerm

132Soft_Dotted SD

133Terminal_Punctuation Term

134Unified_Ideograph UIdeo

135Uppercase Upper

136Variation_Selector VS

137White_Space space

138XID_Continue XIDC

140]`:`(?>\r

141?|[

143

Long lines were clipped for display.

bin/jait.mjsView file

Lines 617-657javascript

617 process.exit(1);

618 }

619}

620

621function resolveNodePath() {

622 try {

623 return runSilent("which node");

624 } catch {

625

dist/tools/screenshot-tools.jsView file

Lines 37-77javascript

37 description: "Click these elements before capturing (in order).",

38 },

39 fill: {

40 type: "array",

41 items: { type: "string", description: "'selector:text' pair" },

42 description

web-dist/assets/ruby-Wjq7vjNf.jsView file

Lines 1-2javascript

dist/tools/redeploy-tools.jsView file

Lines 1-26javascript

1/**

2 * gateway.redeploy — Self-update tool for the Jait gateway.

3 *

4 * Detects the runtime environment and uses the appropriate strategy:

5 *

6 * **systemd** (detected when INVOCATION_ID is set):

7 * 1. npm install -g @jait/gateway@latest

8 * 2. Spawn canary on PORT+1, health-check it

9 * 3. If healthy → kill canary, exit process.

10 * systemd's Restart=always automatically brings up the new version.

11 * 4. If unhealthy → kill canary, report failure, stay running.

dist/tools/browser-tools.jsView file

Lines 1-24javascript

1import { BrowserSurface } from "../surfaces/browser.js";

2import { SSRFGuard } from "../security/ssrf-guard.js";

3import { SandboxManager } from "../security/sandbox-manager.js";

4const DEFAULT_BROWSER_ID = "browser-default";

5const DEFAULT_OPENAI_BASE_URL =

web-dist/noVNC/app/images/icons/MakefileView file

•path = web-[redacted] kind = build_helper sizeBytes = 1331 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

web-dist/noVNC/app/images/icons/MakefileView on unpkg

web-dist/noVNC/app/sounds/bell.ogaView file

•path = web-dist/noVNC/app/sounds/bell.oga kind = high_entropy_blob sizeBytes = 8495 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web-dist/noVNC/app/sounds/bell.ogaView on unpkg

web-dist/assets/index-CKatg4Cd.jsView file

•path = web-dist/assets/index-CKatg4Cd.js kind = oversized_source_file sizeBytes = 3295023 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

web-dist/assets/index-CKatg4Cd.jsView on unpkg