registry / @lotics/cli / 0.66.0

@lotics/cli@0.66.0

⚠ Under review

Lotics SDK and CLI for AI agents

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis flagged 17 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 34 file(s), 2.15 MB of source, external domains: api.lotics.ai, chevrotain.io, en.wikipedia.org, github.com, lotics.ai, purl.org, registry.npmjs.org, schemas.openxmlformats.org, stuk.github.io, unpkg.com, www.npmjs.com, www.w3.org

Source & flagged code

8 flagged

dist/app_commands.jsView file

Lines 1-35javascript

1/**

2 * `lotics app *` subcommands — create / pull / deploy.

3 *

4 * Apps are user-owned npm projects. Source-of-truth during editing is the

5 * local filesystem; the server stores deployed bundles (source.tar.gz + dist)

6 * in R2 keyed per version. These commands are the only sanctioned lifecycle

7 * surface — everything else (validate, logs, watch) folds into a flag on

8 * deploy or lives in the web UI.

9 *

10 * Tarball handling shells out to the system `tar` command. CLI users are

11 * developers; macOS/Linux/WSL all ship a working tar. Avoids adding a

12 * runtime dep to the published @lotics/cli package.

13 */

14import fs from "node:fs";

15import path from "node:path";

16import { spawn } from "node:child_process";

17import { tmpdir } from "node:os";

High

Child Process

Package source references child process execution.

dist/app_commands.jsView on unpkg · L15

18import { buildStarterTemplate } from "./starter_template.js";

19import { startDevServer, openBrowser } from "./dev/server.js";

20import { ipv4ChildEnv } from "./child_env.js";

21import { generateAppWorkflowsDts } from "./generate_app_workflows_dts.js";

22import { generateAppAgentsDts } from "./generate_app_agents_dts.js";

23import { generateAppQueriesDts } from "./generate_app_queries_dts.js";

24import { collectQueryTableIds } from "@lotics/shared/app_query_ast";

25import { generateAppFields } from "./generate_app_fields.js";

26import { loadProjectTypescript, checkWorkflowBodies, } from "./app_workflow_check.js";

27/**

28 * Resolve the latest published version of a package from the npm registry.

29 * Returns null on any failure (network error, 404, malformed payload) so

30 * callers can fall back to a static pin rather than crashing `app create`.

31 *

32 * 1.5s timeout — npm registry is fast when reachable; the fallback is fine

33 * the rare times it isn't, and we don't want to block scaffold on a hang.

34 */

35async function fetchLatestNpmVersion(packageName) {

•matchType = previous_version_dangerous_delta matchedPackage = @lotics/cli@0.65.0 matchedIdentity = npm:QGxvdGljcy9jbGk:0.65.0 similarity = 0.853 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/app_commands.jsView on unpkg

dist/src/cli.jsView file

46298execute() { L46299: for (const cmd of commands) cmd.execute(); L46300: },

High

Shell

Package source references shell execution.

dist/src/cli.jsView on unpkg · L46298

31527const vitePort = await pickPort(args.vitePort ?? DEFAULT_VITE_PORT, wrapperPort); L31528: const viteUrl = `http://localhost:${vitePort}/`; L31529: const html = buildWrapperPage({ ... L31535: }); L31536: const viteChild = spawn( L31537: "npx", ... L31541: stdio: [process.stdin.isTTY ? "inherit" : "ignore", "inherit", "inherit"], L31542: env: ipv4ChildEnv({ ...process.env, FORCE_COLOR: "1" }) L31543: }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/src/cli.jsView on unpkg · L31527

400modulo = (dividend - 1) % 26; L401: name = String.fromCharCode("A".charCodeAt(0) + modulo) + name; L402: dividend = Math.floor((dividend - modulo) / 26); ... L716: else if (v >= base1904) epoch += 24 * 60 * 60 * 1e3; L717: return (epoch - (dnthresh + (v.getTimezoneOffset() - basedate.getTimezoneOffset()) * 6e4)) / (24 * 60 * 60 * 1e3); L718: } ... L1910: } catch (e) { L1911: throw Error(`Error in https://github.com/jojoee/bahttext L1912: ${e.toString()}`); ... L10240: return toBecomeFast; L10241: eval(toBecomeFast); L10242: }

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/src/cli.jsView on unpkg · L400

dist/app_workflow_check.jsView file

Lines 66-106javascript

66 *

67 * Mirrors the body shape `writeWorkflowFile` produces; recognized structurally

68 * (the `__workflow` opener) so a future header tweak can't silently desync the

69 * line mapping. A file with no recognizable opener (degraded) maps

dist/dev/server.jsView file

Lines 1-24javascript

1/**

2 * `lotics app dev` orchestrator.

3 *

4 * Two child processes managed in one Node lifecycle:

5 * 1. Vite dev server (npx vite --port <vite-port>) — child_process.spawn,

6 * stdio inherited so Vite's own logging surfaces to the developer.

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/dev/server.jsView on unpkg · L4

7 * 2. node:http server on <port> serving:

8 * GET / → wrapper HTML (cached: no)

Source & flagged code

8 flagged · loading source

dist/app_commands.js

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code