registry / @lovrabet/lovrabet-cli / 2.1.16

@lovrabet/lovrabet-cli@2.1.16

Runtime CLI for Lovrabet apps, datasets, SQL, BFF, skills, and AI agent workflows.

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 120 file(s), 568 KB of source, external domains: api.lovrabet.com, daily-api.lovrabet.com, daily-runtime.lovrabet.com, registry.npmjs.org, runtime.lovrabet.com, skills-daily.lovrabet.com, skills.lovrabet.com, user-daily.lovrabet.com, user.lovrabet.com, www.npmjs.com

Source & flagged code

4 flagged

lib/commands/update.jsView file

Lines 1-1javascript

1const a60_0x31bafe=a60_0xa3f8;(function(_0x10004c,_0x1c4525){const _0x4c38ca=a60_0xa3f8,_0x368116=_0x10004c();while(!![]){try{const _0x427982=-parseInt(_0x4c38ca(0xc9))/0x1*(parseInt(_0x4c38ca(0xf2))/0x2)+-parseInt(_0x4c38ca(0xfb))/0x3*(-parseInt(_0x4c38ca(0xc2))/0x4)+parseInt(_0x4c38ca(0xc0))/0x5*(parseInt(_0x4c38ca(0xd4))/0x6)+-parseInt(_0x4c38ca(0xd0))/0x7*(-parseInt(_0x4c38ca(0xcd))/0x8)+parseInt(_0x4c38ca(0xfc))/0x9+parseInt(_0x4c38ca(0xe4))/0xa+-parseInt(_0x4c38ca(0xda))/0xb;if(_0x427982===_0x1c4525)break;else _0x368116['push'](_0x368116['shift']());}catch(_0x1e6174){_0x368116['push'](_0 ...

High

Child Process

Package source references child process execution.

lib/commands/update.jsView on unpkg · L1

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/commands/update.jsView on unpkg · L1

Long lines were clipped for display.

lib/framework/runner.jsView file

Lines 1-1javascript

1const a90_0x1c15c6=a90_0x1df7;(function(_0x1fa9eb,_0x5ee893){const _0x5889a4=a90_0x1df7,_0x32ba40=_0x1fa9eb();while(!![]){try{const _0x153235

lib/generated/build-info.jsView file

Lines 1-1javascript

1const a94_0x46482d=a94_0x4a87;function a94_0x40ef(){const _0x2a893c=['b478d0e','12oBnfnX','7772030wXqjeL','4kijlux','3752992RVSpov','3076zzcJXn','1491264TkiEhC',

Source & flagged code

4 flagged · loading source

lib/commands/update.js

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code