Loading npm security reports…
@jait/gateway@0.1.959: Manual Review npm security report (Allow) | LPM Firewall
Allowed — no malicious behavior detected
No malicious behavior detected. 37 low-signal pattern(s) reviewed.
@jait/gateway@0.1.959 ⚠ Under review Jait AI gateway — local-first AI coding agent with terminal, filesystem, and browser control
scanned 16h ago · by lpm-firewall-ai The inspected install and search behavior is consistent with runtime provisioning and user-invoked provider search, and does not establish a concrete attack. I cannot mark the package clean because required runtime coverage remains unresolved and includes a binary file that cannot receive a valid source citation.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The postinstall hook provisions Graphify; the Kimi request occurs when the web.search tool is invoked with the Kimi provider.
Impact
No malicious impact was confirmed in the inspected source; a clean verdict cannot be established from the incomplete required coverage.
Mechanism
Graphify setup creates a Python environment and installs a pinned package. Kimi search sends its configured key to the validated URL derived from KIMI_BASE_URL.
AI rationale
The inspected install and search behavior is consistent with runtime provisioning and user-invoked provider search, and does not establish a concrete attack. I cannot mark the package clean because required runtime coverage remains unresolved and includes a binary file that cannot receive a valid source citation.
Evidence
package.json bin/install-runtime.mjs dist/services/code-graph/graphify-runtime.js dist/index.js dist/tools/browser-tools.js dist/security/ssrf-guard.js
public snapshot AI called this Manual Review at 81.0% confidence as Unknown with medium false-positive risk.
AI review observations
The package has a postinstall hook that provisions its Graphify runtime; the inspected code creates a Python environment and installs a pinned package. The Kimi search tool sends its configured API key to a URL built from KIMI_BASE_URL; the inspected validator checks URL protocol and blocks private hosts, but does not enforce a service-host allowlist. The required clean review includes a verified binary file that cannot be cited as UTF-8 source, and the broader required runtime paths remain unresolved. Evidence against
The browser search code sends the key only when the web.search tool executes; the default Kimi endpoint is Moonshot and the destination passes URL validation. The inspected postinstall provisions Graphify through Python and pip; no concrete malicious action was established in that path. Behavioral surface
Source ChildProcess Crypto DynamicRequire EnvironmentVars Eval Filesystem Network Shell
30 flagged · loading source • scripts.postinstall = node ./bin/install-runtime.mjs
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg 1 /** Staged updates shared by the CLI and HTTP gateway. Never install over live files. */
L2: import { execFile } from "node:child_process";
L3: import { promisify } from "node:util";
High Child Process
Package source references child process execution.
bin/safe-update.mjs View on unpkg · L1 737 L738: const execArgs = [nodePath, jaitBin];
L739: if (existsSync(envFlag)) execArgs.push("--env", envFlag);
4 Critical 22 High 6 Medium 5 Low
Critical Credential Exfiltration dist/tools/browser-tools.js
Critical Remote Asset Decode Execute dist/services/messenger-matrix-runtime.js
Critical Trojan Source Unicode dist/services/messenger-matrix-runtime.js
Critical Trigger Reachable Dangerous Capability dist/tools/browser-tools.js
High Install Time Lifecycle Scripts package.json
High Child Process bin/safe-update.mjs
High Shell bin/jait.mjs
High Eval dist/services/messenger-matrix-runtime.js
High Same File Env Network Execution dist/tools/redeploy-tools.js
High Copied Package Dependency Bridge dist/surfaces/browser.js
High Trigger Reachable Credential Exfiltration
Affected versions and remediation This report applies to @jait/gateway@0.1.959 .
See all versions of @jait/gateway for other recorded verdicts.
Review the evidence and your use of @jait/gateway@0.1.959 before allowing it. Restrict the permissions described in this report. Choose an independently verified alternative or release. This report does not establish that other versions are safe. Evidence last updated: 2026-10-22 13:42:57.977Z (UTC) .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced .
WebSocket
Supply chain HighEntropyStrings Minified PossibleObfuscation UrlStrings
Manifest No manifest risk signals triggered.
scanned 792 file(s), 20.8 MB of source, external domains: 127.0.0.1, accounts.google.com, api.bitbucket.org, api.botframework.com, api.elevenlabs.io, api.github.com, api.moonshot.ai, api.openai.com, api.perplexity.ai, api.search.brave.com, api.telegram.org, api.typesafe.ai, api.x.ai, autoconfig.thunderbird.net, cdn.agentclientprotocol.com, chevrotain.io, clawhub.ai, dev.azure.com, dub.sh, en.wikipedia.org, evilmartians.com, fcm.googleapis.com, generativelanguage.googleapis.com, git.io, github.com, gmail.googleapis.com, graph.microsoft.com, ipapi.co, jait.invalid, json-schema.org, langium.org, login.botframework.com, login.microsoftonline.com, matrix.example.com, matrix.to, npms.io, oauth2.googleapis.com, ollama.com, opencode.ai, openrouter.ai, packages.mozilla.org, raw.githubusercontent.com, react.dev, registry.npmjs.org, sts.windows.net, t.me, tauri.localhost, wttr.in, www.googleapis.com, www.w3.org
Oversized source lightweight scan
web-dist/assets/index-CEKL9KgU.js 4.24 MB file, sampled 256 KB
Network WebSocket HighEntropyStrings Minified UrlStrings 127.0.0.1 react.dev
dist/services/messenger-matrix-runtime.js View file 56 module.exports = depd;
L57: var basePath = process.cwd();
L58: function containsNamespace(str, namespace) {
...
L129: }
L130: var str = process.env.NO_DEPRECATION || "";
L131: return containsNamespace(str, namespace);
...
L187: }
L188: var format = process.stderr.isTTY ? formatColor : formatPlain;
L189: var output = format.call(this, msg, caller, stack.slice(i));
L190: process.stderr.write(output + `
L191: `, "utf8");
...
L275: site.name = fn.name;
Critical Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/services/messenger-matrix-runtime.js View on unpkg · L56 82735 contains invisible/control Unicode U+200B (zero width space)
\f<U+200B>`,
Critical Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/services/messenger-matrix-runtime.js View on unpkg · L82735 275 site.name = fn.name;
L276: var deprecatedfn = new Function("fn", "log", "deprecate", "message", "site", `"use strict"
L277: ` + "return function (" + args + ") {" + `log.call(deprecate, message, site)
High Eval
Package source references dynamic code evaluation.
dist/services/messenger-matrix-runtime.js View on unpkg · L275 56 module.exports = depd;
L57: var basePath = process.cwd();
L58: function containsNamespace(str, namespace) {
...
L129: }
L130: var str = process.env.NO_DEPRECATION || "";
L131: return containsNamespace(str, namespace);
...
L187: }
L188: var format = process.stderr.isTTY ? formatColor : formatPlain;
L189: var output = format.call(this, msg, caller, stack.slice(i));
L190: process.stderr.write(output + `
L191: `, "utf8");
...
L275: site.name = fn.name;
Low Weak Crypto
Package source references weak cryptographic algorithms.
dist/services/messenger-matrix-runtime.js View on unpkg · L56 20 try {
L21: const { ensureGraphifyRuntime } = await import(runtimeModule);
L22: await ensureGraphifyRuntime({
Medium Dynamic Require
Package source references dynamic require/import behavior.
bin/install-runtime.mjs View on unpkg · L20 110 log(`🐤 Starting canary on port ${canaryPort}...\n`);
L111: const canary = spawn("jait", ["--port", String(canaryPort)], {
L112: stdio: "ignore",
L113: detached: true,
L114: env: { ...process.env, PORT: String(canaryPort), __JAIT_CLI: "1" },
L115: windowsHide: true,
...
L117: canary.unref();
L118: const healthy = await waitForHealth(`http://127.0.0.1:${canaryPort}`, 30_000);
L119: if (!healthy) {
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/tools/redeploy-tools.js View on unpkg · L110 6 * **systemd** (detected when INVOCATION_ID is set):
L7: * 1. npm install -g @jait/gateway@latest
L8: * 2. Spawn canary on PORT+1, health-check it
...
L19: */
L20: import { execSync, spawn } from "node:child_process";
L21: import { describeUpdateFailure } from "../routes/update-failure.js";
High Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/tools/redeploy-tools.js View on unpkg · L6 9 const browserStarts = new WeakMap();
L10: const DEFAULT_OPENAI_BASE_URL = "https://api.openai.com/v1";
L11: const DEFAULT_OPENAI_WEB_SEARCH_MODEL = "gpt-5";
...
L146: message: `Navigated to ${snapshot.url}`,
L147: data: buildSnapshotPayload(surface.id, snapshot, session),
L148: };
...
L350: const remote = await ws.proxyFsOp(context.executionNodeId, "readBinary", { path: screenshotPath });
L351: bytes = Buffer.from(remote.content, "base64");
L352: }
...
L398: const timeout = setTimeout(() => controller.abort(), timeoutMs);
L399: const ignoreTlsErrors = input.ignoreTlsErrors === true || process.env["WEB_FETCH_IGNORE_TLS_ERRORS"] === "true";
L400: try {
Critical Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/tools/browser-tools.js View on unpkg · L9 9 Trigger-reachable chain: manifest.main -> dist/index.js -> dist/tools/index.js -> dist/tools/browser-tools.js
L9: const browserStarts = new WeakMap();
L10: const DEFAULT_OPENAI_BASE_URL = "https://api.openai.com/v1";
L11: const DEFAULT_OPENAI_WEB_SEARCH_MODEL = "gpt-5";
...
L146: message: `Navigated to ${snapshot.url}`,
L147: data: buildSnapshotPayload(surface.id, snapshot, session),
L148: };
...
L350: const remote = await ws.proxyFsOp(context.executionNodeId, "readBinary", { path: screenshotPath });
L351: bytes = Buffer.from(remote.content, "base64");
L352: }
...
L398: const timeout = setTimeout(() => controller.abort(), timeoutMs);
L399: const ignoreTlsErrors = input.ignoreTlsErrors === true || process.env["WEB_FETCH_IGNORE_TLS_ERRORS"] === "true";
L400: try {
Critical Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/tools/browser-tools.js View on unpkg · L9 430 package = @jait/gateway; repositoryIdentity = jait; dependency = playwright
L430: try {
L431: mod = await import("playwright");
L432: }
High Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/surfaces/browser.js View on unpkg · L430 6 Trigger-reachable credential exfiltration chain: manifest.main -> dist/index.js -> dist/services/thread-review-sync.js -> dist/services/git-forge.js
L6: */
L7: import { exec as execCb } from "node:child_process";
L8: import { writeFile, unlink } from "node:fs/promises";
...
L13: return new Promise((resolve, reject) => {
L14: execCb(cmd, { encoding: "utf-8", windowsHide: true, ...opts }, (error, stdout, stderr) => {
L15: if (error) {
...
L27: function cleanGhEnv() {
L28: const { GH_REPO, GH_HOST, GH_TOKEN, GITHUB_TOKEN, ...rest } = process.env;
L29: return rest;
...
L101: proc.on("error", () => resolve(null));
L102: proc.stdin.write("protocol=https\nhost=github.com\n\n");
L103: proc.stdin.end();
High Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/services/git-forge.js View on unpkg · L6 • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/services/git-forge.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/services/git-forge.js View on unpkg web-dist/noVNC/app/images/icons/Makefile View file • path = web-[redacted]
kind = build_helper
sizeBytes = 1331
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
web-dist/noVNC/app/images/icons/Makefile View on unpkg • path = web-dist/noVNC/app/sounds/bell.oga
kind = high_entropy_blob
sizeBytes = 8495
magicHex = [redacted]
High Ships High Entropy Blob
Package ships high-entropy non-source blobs.
web-dist/noVNC/app/sounds/bell.oga View on unpkg • path = web-dist/assets/index-CEKL9KgU.js
kind = oversized_source_file
sizeBytes = 4447245
magicHex = [redacted]
Medium Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
web-dist/assets/index-CEKL9KgU.js View on unpkg dist/os-control/windows-driver.js#virtual:normalized:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 16
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/os-control/windows-driver.js#virtual:normalized:round1 View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/cli/doctor.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/cli/doctor.js View on unpkg dist/providers/acp-binary-launcher.js View file • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/providers/acp-binary-launcher.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/providers/acp-binary-launcher.js View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/clawhub/client.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/clawhub/client.js View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/os-control/windows-driver.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/os-control/windows-driver.js View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/skills/install.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/skills/install.js View on unpkg dist/services/code-graph/graphify-runtime.js View file • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/services/code-graph/graphify-runtime.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/services/code-graph/graphify-runtime.js View on unpkg dist/services/github-pull-requests.js View file • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/services/github-pull-requests.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/services/github-pull-requests.js View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/services/maintenance.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/services/maintenance.js View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/channels/msteams/connector.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/channels/msteams/connector.js View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = [redacted].js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/channels/telegram/connector.js View on unpkg • matchType = token_shingles
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/db/connection.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/db/connection.js View on unpkg dist/services/git-forge.js
High Runtime Package Install dist/tools/redeploy-tools.js
High Ships High Entropy Blob web-dist/noVNC/app/sounds/bell.oga
High Semantic Analysis Limited dist/os-control/windows-driver.js#virtual:normalized:round1
High Known Malware Source Similarity dist/cli/doctor.js
High Known Malware Source Similarity dist/providers/acp-binary-launcher.js
High Known Malware Source Similarity dist/clawhub/client.js
High Known Malware Source Similarity dist/os-control/windows-driver.js
High Known Malware Source Similarity dist/services/git-forge.js
High Known Malware Source Similarity dist/skills/install.js
High Known Malware Source Similarity dist/services/code-graph/graphify-runtime.js
High Known Malware Source Similarity dist/services/github-pull-requests.js
High Known Malware Source Similarity dist/services/maintenance.js
High Known Malware Source Similarity dist/channels/msteams/connector.js
High Known Malware Source Similarity dist/channels/telegram/connector.js
High Known Malware Source Similarity dist/db/connection.js
Medium Dynamic Require bin/install-runtime.mjs
Medium Ships Build Helper web-dist/noVNC/app/images/icons/Makefile
Medium Oversized Source File web-dist/assets/index-CEKL9KgU.js
Medium Structural Risk Force Deep Review
Low Weak Crypto dist/services/messenger-matrix-runtime.js
main → dist/index.js types → dist/index.d.ts bin → jait, jait-matrix
Artifact 30.5 MB · 1,939 files 2 signature(s)
Install lifecycle postinstall
Behavioral surface ChildProcess Crypto DynamicRequire EnvironmentVars Eval Filesystem Network Shell WebSocket HighEntropyStrings Minified PossibleObfuscation UrlStrings Manifest: clean
30 flagged • scripts.postinstall = node ./bin/install-runtime.mjs
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg 1 /** Staged updates shared by the CLI and HTTP gateway. Never install over live files. */
L2: import { execFile } from "node:child_process";
L3: import { promisify } from "node:util";
High Child Process
Package source references child process execution.
bin/safe-update.mjs View on unpkg · L1 737 L738: const execArgs = [nodePath, jaitBin];
L739: if (existsSync(envFlag)) execArgs.push("--env", envFlag);
dist/services/messenger-matrix-runtime.js View file 56 module.exports = depd;
L57: var basePath = process.cwd();
L58: function containsNamespace(str, namespace) {
...
L129: }
L130: var str = process.env.NO_DEPRECATION || "";
L131: return containsNamespace(str, namespace);
...
L187: }
L188: var format = process.stderr.isTTY ? formatColor : formatPlain;
L189: var output = format.call(this, msg, caller, stack.slice(i));
L190: process.stderr.write(output + `
L191: `, "utf8");
...
L275: site.name = fn.name;
Critical Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/services/messenger-matrix-runtime.js View on unpkg · L56 82735 contains invisible/control Unicode U+200B (zero width space)
\f<U+200B>`,
Critical Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/services/messenger-matrix-runtime.js View on unpkg · L82735 275 site.name = fn.name;
L276: var deprecatedfn = new Function("fn", "log", "deprecate", "message", "site", `"use strict"
L277: ` + "return function (" + args + ") {" + `log.call(deprecate, message, site)
High Eval
Package source references dynamic code evaluation.
dist/services/messenger-matrix-runtime.js View on unpkg · L275 20 try {
L21: const { ensureGraphifyRuntime } = await import(runtimeModule);
L22: await ensureGraphifyRuntime({
Medium Dynamic Require
Package source references dynamic require/import behavior.
bin/install-runtime.mjs View on unpkg · L20 110 log(`🐤 Starting canary on port ${canaryPort}...\n`);
L111: const canary = spawn("jait", ["--port", String(canaryPort)], {
L112: stdio: "ignore",
L113: detached: true,
L114: env: { ...process.env, PORT: String(canaryPort), __JAIT_CLI: "1" },
L115: windowsHide: true,
...
L117: canary.unref();
L118: const healthy = await waitForHealth(`http://127.0.0.1:${canaryPort}`, 30_000);
L119: if (!healthy) {
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/tools/redeploy-tools.js View on unpkg · L110 6 * **systemd** (detected when INVOCATION_ID is set):
L7: * 1. npm install -g @jait/gateway@latest
L8: * 2. Spawn canary on PORT+1, health-check it
...
L19: */
L20: import { execSync, spawn } from "node:child_process";
L21: import { describeUpdateFailure } from "../routes/update-failure.js";
High Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/tools/redeploy-tools.js View on unpkg · L6 9 const browserStarts = new WeakMap();
L10: const DEFAULT_OPENAI_BASE_URL = "https://api.openai.com/v1";
L11: const DEFAULT_OPENAI_WEB_SEARCH_MODEL = "gpt-5";
...
L146: message: `Navigated to ${snapshot.url}`,
L147: data: buildSnapshotPayload(surface.id, snapshot, session),
L148: };
...
L350: const remote = await ws.proxyFsOp(context.executionNodeId, "readBinary", { path: screenshotPath });
L351: bytes = Buffer.from(remote.content, "base64");
L352: }
...
L398: const timeout = setTimeout(() => controller.abort(), timeoutMs);
L399: const ignoreTlsErrors = input.ignoreTlsErrors === true || process.env["WEB_FETCH_IGNORE_TLS_ERRORS"] === "true";
L400: try {
Critical Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/tools/browser-tools.js View on unpkg · L9 9 Trigger-reachable chain: manifest.main -> dist/index.js -> dist/tools/index.js -> dist/tools/browser-tools.js
L9: const browserStarts = new WeakMap();
L10: const DEFAULT_OPENAI_BASE_URL = "https://api.openai.com/v1";
L11: const DEFAULT_OPENAI_WEB_SEARCH_MODEL = "gpt-5";
...
L146: message: `Navigated to ${snapshot.url}`,
L147: data: buildSnapshotPayload(surface.id, snapshot, session),
L148: };
...
L350: const remote = await ws.proxyFsOp(context.executionNodeId, "readBinary", { path: screenshotPath });
L351: bytes = Buffer.from(remote.content, "base64");
L352: }
...
L398: const timeout = setTimeout(() => controller.abort(), timeoutMs);
L399: const ignoreTlsErrors = input.ignoreTlsErrors === true || process.env["WEB_FETCH_IGNORE_TLS_ERRORS"] === "true";
L400: try {
Critical Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/tools/browser-tools.js View on unpkg · L9 430 package = @jait/gateway; repositoryIdentity = jait; dependency = playwright
L430: try {
L431: mod = await import("playwright");
L432: }
High Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/surfaces/browser.js View on unpkg · L430 6 Trigger-reachable credential exfiltration chain: manifest.main -> dist/index.js -> dist/services/thread-review-sync.js -> dist/services/git-forge.js
L6: */
L7: import { exec as execCb } from "node:child_process";
L8: import { writeFile, unlink } from "node:fs/promises";
...
L13: return new Promise((resolve, reject) => {
L14: execCb(cmd, { encoding: "utf-8", windowsHide: true, ...opts }, (error, stdout, stderr) => {
L15: if (error) {
...
L27: function cleanGhEnv() {
L28: const { GH_REPO, GH_HOST, GH_TOKEN, GITHUB_TOKEN, ...rest } = process.env;
L29: return rest;
...
L101: proc.on("error", () => resolve(null));
L102: proc.stdin.write("protocol=https\nhost=github.com\n\n");
L103: proc.stdin.end();
High Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/services/git-forge.js View on unpkg · L6 • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/services/git-forge.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/services/git-forge.js View on unpkg web-dist/noVNC/app/images/icons/Makefile View file • path = web-[redacted]
kind = build_helper
sizeBytes = 1331
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
web-dist/noVNC/app/images/icons/Makefile View on unpkg • path = web-dist/noVNC/app/sounds/bell.oga
kind = high_entropy_blob
sizeBytes = 8495
magicHex = [redacted]
High Ships High Entropy Blob
Package ships high-entropy non-source blobs.
web-dist/noVNC/app/sounds/bell.oga View on unpkg • path = web-dist/assets/index-CEKL9KgU.js
kind = oversized_source_file
sizeBytes = 4447245
magicHex = [redacted]
Medium Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
web-dist/assets/index-CEKL9KgU.js View on unpkg dist/os-control/windows-driver.js#virtual:normalized:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 16
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/os-control/windows-driver.js#virtual:normalized:round1 View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/cli/doctor.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/cli/doctor.js View on unpkg dist/providers/acp-binary-launcher.js View file • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/providers/acp-binary-launcher.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/providers/acp-binary-launcher.js View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/clawhub/client.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/clawhub/client.js View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/os-control/windows-driver.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/os-control/windows-driver.js View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/skills/install.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/skills/install.js View on unpkg dist/services/code-graph/graphify-runtime.js View file • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/services/code-graph/graphify-runtime.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/services/code-graph/graphify-runtime.js View on unpkg dist/services/github-pull-requests.js View file • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/services/github-pull-requests.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/services/github-pull-requests.js View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/services/maintenance.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/services/maintenance.js View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/channels/msteams/connector.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/channels/msteams/connector.js View on unpkg • matchType = normalized_sha256
matchedPackage = @jait/gateway@0.1.848
matchedPath = [redacted].js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/channels/telegram/connector.js View on unpkg • matchType = token_shingles
matchedPackage = @jait/gateway@0.1.848
matchedPath = dist/db/connection.js
matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.848
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/db/connection.js View on unpkg 56 module.exports = depd;
L57: var basePath = process.cwd();
L58: function containsNamespace(str, namespace) {
...
L129: }
L130: var str = process.env.NO_DEPRECATION || "";
L131: return containsNamespace(str, namespace);
...
L187: }
L188: var format = process.stderr.isTTY ? formatColor : formatPlain;
L189: var output = format.call(this, msg, caller, stack.slice(i));
L190: process.stderr.write(output + `
L191: `, "utf8");
...
L275: site.name = fn.name;
Low Weak Crypto
Package source references weak cryptographic algorithms.
dist/services/messenger-matrix-runtime.js View on unpkg · L56