registry  /  @kiroku/cli  /  1.8.1

@kiroku/cli@1.8.1

AI-powered memory system for Claude Code — MCP Server & Proxy

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
DynamicRequire
Supply chain
HighEntropyStringsMinifiedObfuscatedTrivial
Manifest
NoLicense
scanned 4 file(s), 1005 KB of source

Source & flagged code

2 flagged · loading source
dist/mcp.cjsView file
1const _0x463cbb=_0x4ff3;(function(_0x158aac,_0x12b270){const _0x1a05ef=_0x4ff3,_0x2ec36c=_0x158aac();while(!![]){try{const _0x2b3eb4=parseInt(_0x1a05ef(0x246))/0x1*(-parseInt(_0x1a...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/mcp.cjsView on unpkg · L1
1const _0x463cbb=_0x4ff3;(function(_0x158aac,_0x12b270){const _0x1a05ef=_0x4ff3,_0x2ec36c=_0x158aac();while(!![]){try{const _0x2b3eb4=parseInt(_0x1a05ef(0x246))/0x1*(-parseInt(_0x1a...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/mcp.cjsView on unpkg · L1

Findings

2 High2 Medium4 Low
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
MediumDynamic Requiredist/mcp.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowNo License