@mdevs/mai-cli@1.0.20: AI-agent control-surface risk

Loading npm security reports…

@mdevs/mai-cli@1.0.20: AI-agent control-surface risk | LPM Firewall

Source & flagged code

26 flagged

package.jsonView file

Lines 45-85json

45 "build:vite": "vite build && bun run scripts/post-build.ts",

46 "build:vite:only": "vite build",

47 "build:bun": "bun run build.ts",

48 "dev": "bun run scripts/dev.ts",

49 "dev:inspect": "bun run scripts/dev-debug.ts",

50 "prepublishOnly": "bun run build:vite",

51 "lint": "biome lint .",

52 "lint:fix": "biome lint --fix .",

53 "format": "biome format --write .",

54 "check": "biome check .",

55 "check:fix": "biome check --fix .",

56 "prepare": "husky",

57 "test": "bun test",

58 "test:production": "bun run scripts/production-test.ts",

59 "test:production:offline": "bun run scripts/production-test.ts --offline",

60 "test:production:verbose": "bun run scripts/production-test.ts --verbose",

61 "test:production:bun": "bun run scripts/production-test.ts --bun",

62 "check:bundle": "bun run scripts/check-bundle-integrity.ts",

63 "check:unused": "knip-bun",

64 "health": "bun run scripts/health-check.ts",

65 "postinstall": "node scripts/run-parallel.mjs scripts/postinstall.cjs scripts/setup-chrome-mcp.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L65

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L65

66 "docs:dev": "npx mintlify dev",

67 "typecheck": "tsc --noEmit",

68 "precheck": "bun run typecheck && bun run check:fix && bun test",

69 "rcs": "bun run scripts/rcs.ts",

70 "reset:api": "node --env-file=.env scripts/reset-api-usage.js",

71 "reset:mai": "node --env-file=.env scripts/reset-mai-usage.js"

72 },

73 "dependencies": {

74 "@agentclientprotocol/sdk": "^0.19.0",

75 "@claude-code-best/mcp-chrome-bridge": "^3.0.1",

76 "highlight.js": "^11.11.1",

77 "ws": "^8.20.0"

78 },

79 "devDependencies": {

80 "@alcalzone/ansi-tokenize": "^0.3.0",

81 "@ant/claude-for-chrome-mcp": "workspace:*",

82 "@ant/computer-use-input": "workspace:*",

83 "@ant/computer-use-mcp": "workspace:*",

84 "@ant/computer-use-swift": "workspace:*",

85 "@ant/model-provider": "workspace:*",

dist/chunks/exit-BbAyh7iz.jsView file

Lines 1-1javascript

1import{n as e}from"./chunk-DR8-3Aex.js";import{Rn as t}from"./src-r4yz4Txc.js";import{t as n}from"./jsx-runtime-D-D469L8.js";import{dl as r,fl as i}from

scripts/postinstall.cjsView file

Lines 2-42javascript

2/**

3 * Postinstall script — runs automatically after `bun install` or `npm install`.

4 *

5 * Downloads ripgrep binary (idempotent, skips if exists).

6 * Works in dev mode (src/ exists), published mode (dist/ exists), with bun or node.

7 *

8 * Usage:

9 * node scripts/postinstall.js

10 * node scripts/postinstall.js --force

11 * bun run scripts/postinstall.js

12 */

dist/chunks/instinctParser-B3kl9V1w.jsView file

Lines 1-1javascript

1import{n as e}from"./chunk-DR8-3Aex.js";import{createHash as t}from"node:crypto";function n(){return i?{minConfidence:i.minConfidence??r.minConfidence,minClusterSize:i.minClusterSize??r.minClusterSize,llm:{...

dist/chunks/esm-CsGLyWmS.jsView file

Lines 1-21javascript

1import{i as e,n as t,o as n,t as r}from"./chunk-DR8-3Aex.js";import{n as i,t as a}from"./defineProperty-80gRi2ZW.js";import{n as o,t as s}from

dist/chunks/dist-es-DuAZyxJ02.jsView file

3- ECS container host 169.254.170.2 L4: - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:t})}}}));function y(e){return new t({protocol:e.protocol,hostname:e.hostname,port:Number(e.port),path:e.pathname,quer... L5: Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:e.logger});let l=new URL(t);_(l,e.logger);let d=i.create({requestTimeout:e.timeout??1e3,c...

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/chunks/dist-es-DuAZyxJ02.jsView on unpkg · L3

dist/chunks/bridgeMain-BBSHlt23.jsView file

1Cross-file remote execution chain: dist/chunks/bridgeMain-BBSHlt23.js spawns dist/chunks/debug-Cisktvhb.js; helper contains network access plus dynamic code execution. L1: import{d as e,s as t,u as n}from"./envUtils-BWeoiL4Y.js";import{Cn as r,In as i,Ln as a,t as o}from"./src-r4yz4Txc.js";import{M as s,Ms as c,Ns as l,S as u,js as d,l as f,z as p}fr... L2: `).filter(e=>e.length>0)}function Le(e){let t=e.write??(e=>process.stdout.write(e)),n=e.verbose,a=0,o=`idle`,s=`Ready`,l=``,u=``,f=``,p=``,m=``,h=``,g=null,_=[],v=!1,b=null,x=0,S=0... L3: `)){if(i.length===0){n++;continue}let e=r(i);n+=Math.max(1,Math.ceil(e/t))}return e.endsWith(` L4: `)&&n--,n}function M(e){t(e),a+=j(e)}function N(){a<=0||(y(`[bridge:ui] clearStatusLines count=${a}`),t(`\x1b[${a}A`),t(`\x1B[J`),a=0)}function F(e){N(),

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-BBSHlt23.jsView on unpkg · L1

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView file

•path = dist/vendor/audio-capture/x64-darwin/audio-capture.node kind = native_binary sizeBytes = 439076 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView on unpkg

dist/chunks/loadAgentsDir-UyQxvIqQ.jsView file

•matchType = token_shingles matchedPackage = @twinklerg/ccb@2.8.6 matchedPath = dist/chunks/loadAgentsDir-Dt65bOMO.js matchedIdentity = npm:QHR3aW5rbGVyZy9jY2I:2.8.6 similarity = 1.000 shingleOverlap = 43 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/loadAgentsDir-UyQxvIqQ.jsView on unpkg

•path = dist/chunks/loadAgentsDir-UyQxvIqQ.js kind = oversized_source_file sizeBytes = 4329139 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/chunks/loadAgentsDir-UyQxvIqQ.jsView on unpkg

dist/chunks/createSSHSession-BHSorGb4.jsView file

•matchType = normalized_sha256 matchedPackage = @mdevs/mai-cli@1.0.19 matchedPath = dist/chunks/createSSHSession-cz2LbC-m.js matchedIdentity = npm:QG1kZXZzL21haS1jbGk:1.0.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/createSSHSession-BHSorGb4.jsView on unpkg

dist/chunks/dist-Cg1a1Exw.jsView file

•matchType = normalized_sha256 matchedPackage = @mdevs/mai-cli@1.0.19 matchedPath = dist/chunks/dist-Cg1a1Exw.js matchedIdentity = npm:QG1kZXZzL21haS1jbGk:1.0.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/dist-Cg1a1Exw.jsView on unpkg

dist/chunks/executor-D6F3IuTA.jsView file

•matchType = normalized_sha256 matchedPackage = @mdevs/mai-cli@1.0.19 matchedPath = dist/chunks/executor-0LskEQWE.js matchedIdentity = npm:QG1kZXZzL21haS1jbGk:1.0.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/executor-D6F3IuTA.jsView on unpkg

dist/chunks/open-CDditBQ-.jsView file

•matchType = normalized_sha256 matchedPackage = @mdevs/mai-cli@1.0.19 matchedPath = dist/chunks/open-CDditBQ-.js matchedIdentity = npm:QG1kZXZzL21haS1jbGk:1.0.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/open-CDditBQ-.jsView on unpkg

dist/chunks/REPL-DnHJofkV.jsView file

•matchType = normalized_sha256 matchedPackage = @mdevs/mai-cli@1.0.19 matchedPath = dist/chunks/REPL-Ce4YOPOK.js matchedIdentity = npm:QG1kZXZzL21haS1jbGk:1.0.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/REPL-DnHJofkV.jsView on unpkg

dist/chunks/cliLaunch-lSqbpipz.jsView file

•matchType = normalized_sha256 matchedPackage = @mdevs/mai-cli@1.0.19 matchedPath = dist/chunks/cliLaunch-BQLM_VtG.js matchedIdentity = npm:QG1kZXZzL21haS1jbGk:1.0.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cliLaunch-lSqbpipz.jsView on unpkg

dist/chunks/escHotkey-DzMWu-0q.jsView file

•matchType = normalized_sha256 matchedPackage = @mdevs/mai-cli@1.0.19 matchedPath = dist/chunks/escHotkey-DzMWu-0q.js matchedIdentity = npm:QG1kZXZzL21haS1jbGk:1.0.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/escHotkey-DzMWu-0q.jsView on unpkg

dist/chunks/insights-DydC1MGH.jsView file

•matchType = normalized_sha256 matchedPackage = @mdevs/mai-cli@1.0.19 matchedPath = dist/chunks/insights-C2o7asev.js matchedIdentity = npm:QG1kZXZzL21haS1jbGk:1.0.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/insights-DydC1MGH.jsView on unpkg

dist/chunks/SSETransport-Sj1hLbwN.jsView file

•matchType = normalized_sha256 matchedPackage = @mdevs/mai-cli@1.0.19 matchedPath = dist/chunks/SSETransport-CWRmwahP.js matchedIdentity = npm:QG1kZXZzL21haS1jbGk:1.0.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/SSETransport-Sj1hLbwN.jsView on unpkg

dist/chunks/bridgeMessaging-BVQPWW7V.jsView file

•matchType = normalized_sha256 matchedPackage = @mdevs/mai-cli@1.0.19 matchedPath = dist/chunks/bridgeMessaging-SODsFdVN.js matchedIdentity = npm:QG1kZXZzL21haS1jbGk:1.0.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/bridgeMessaging-BVQPWW7V.jsView on unpkg

Source & flagged code

26 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/run-parallel.mjs scripts/postinstall.cjs scripts/setup-chrome-mcp.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/run-parallel.mjs scripts/postinstall.cjs scripts/setup-chrome-mcp.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/chunks/exit-BbAyh7iz.jsView file

1import{n as e}from"./chunk-DR8-3Aex.js";import{Rn as t}from"./src-r4yz4Txc.js";import{t as n}from"./jsx-runtime-D-D469L8.js";import{dl as r,fl as i}from"./paths-lAtRt-7B.js";import...

High

Child Process

Package source references child process execution.

dist/chunks/exit-BbAyh7iz.jsView on unpkg · L1

scripts/postinstall.cjsView file

23} = require('fs') L24: const { spawnSync } = require('child_process') L25: const { setDefaultResultOrder } = require('node:dns') L26: const path = require('path') ... L41: const RELEASE_BASE = ( L42: process.env.RIPGREP_DOWNLOAD_BASE ?? DEFAULT_RELEASE_BASE L43: ).replace(/\/$/, '') ... L50: function getPlatformMapping() { L51: const arch = process.arch L52: const platform = process.platform ... L170: } L171: return Buffer.from(await response.arrayBuffer())

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/postinstall.cjsView on unpkg · L23

High

Install Named Payload File

Install-named source file stages remote content through filesystem writes and execution.

scripts/postinstall.cjsView on unpkg · L23

22chmodSync, L23: } = require('fs') L24: const { spawnSync } = require('child_process')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunks/instinctParser-B3kl9V1w.jsView file

1import{n as e}from"./chunk-DR8-3Aex.js";import{createHash as t}from"node:crypto";function n(){return i?{minConfidence:i.minConfidence??r.minConfidence,minClusterSize:i.minClusterSi...

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunks/instinctParser-B3kl9V1w.jsView on unpkg · L1

dist/chunks/esm-CsGLyWmS.jsView file

1import{i as e,n as t,o as n,t as r}from"./chunk-DR8-3Aex.js";import{n as i,t as a}from"./defineProperty-80gRi2ZW.js";import{n as o,t as s}from"./src-BaB-bpCj.js";import{a as c,i as... L2: `);super(`${t}\n${n}`),a(this,`errors`,void 0),this.errors=e,this.name=He}},We=class extends Error{constructor(e){super(e.message,e.cause?{cause:e.cause}:void 0),a(this,`scopes`,vo... L3: \r

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/chunks/esm-CsGLyWmS.jsView on unpkg · L1

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunks/esm-CsGLyWmS.jsView on unpkg · L1

High

dist/chunks/dist-es-DuAZyxJ02.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/chunks/dist-es-DuAZyxJ02.jsView on unpkg · L3

dist/chunks/bridgeMain-BBSHlt23.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-BBSHlt23.jsView on unpkg · L1

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView file

•path = dist/vendor/audio-capture/x64-darwin/audio-capture.node kind = native_binary sizeBytes = 439076 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView on unpkg

dist/chunks/loadAgentsDir-UyQxvIqQ.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/loadAgentsDir-UyQxvIqQ.jsView on unpkg

•path = dist/chunks/loadAgentsDir-UyQxvIqQ.js kind = oversized_source_file sizeBytes = 4329139 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/chunks/loadAgentsDir-UyQxvIqQ.jsView on unpkg

dist/chunks/createSSHSession-BHSorGb4.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/createSSHSession-BHSorGb4.jsView on unpkg

dist/chunks/dist-Cg1a1Exw.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/dist-Cg1a1Exw.jsView on unpkg

dist/chunks/executor-D6F3IuTA.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/executor-D6F3IuTA.jsView on unpkg

dist/chunks/open-CDditBQ-.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/open-CDditBQ-.jsView on unpkg

dist/chunks/REPL-DnHJofkV.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/REPL-DnHJofkV.jsView on unpkg

dist/chunks/cliLaunch-lSqbpipz.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cliLaunch-lSqbpipz.jsView on unpkg

dist/chunks/escHotkey-DzMWu-0q.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/escHotkey-DzMWu-0q.jsView on unpkg

dist/chunks/insights-DydC1MGH.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/insights-DydC1MGH.jsView on unpkg

dist/chunks/SSETransport-Sj1hLbwN.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/SSETransport-Sj1hLbwN.jsView on unpkg

dist/chunks/bridgeMessaging-BVQPWW7V.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/bridgeMessaging-BVQPWW7V.jsView on unpkg

Source & flagged code

26 flagged

package.jsonView file

Lines 45-85json

45 "build:vite": "vite build && bun run scripts/post-build.ts",

46 "build:vite:only": "vite build",

47 "build:bun": "bun run build.ts",

48 "dev": "bun run scripts/dev.ts",

49 "dev:inspect": "bun run scripts/dev-debug.ts",

50 "prepublishOnly": "bun run build:vite",

51 "lint": "biome lint .",

52 "lint:fix": "biome lint --fix .",

53 "format": "biome format --write .",

54 "check": "biome check .",

55 "check:fix": "biome check --fix .",

56 "prepare": "husky",

57 "test": "bun test",

58 "test:production": "bun run scripts/production-test.ts",

59 "test:production:offline": "bun run scripts/production-test.ts --offline",

60 "test:production:verbose": "bun run scripts/production-test.ts --verbose",

61 "test:production:bun": "bun run scripts/production-test.ts --bun",

62 "check:bundle": "bun run scripts/check-bundle-integrity.ts",

63 "check:unused": "knip-bun",

64 "health": "bun run scripts/health-check.ts",

65 "postinstall": "node scripts/run-parallel.mjs scripts/postinstall.cjs scripts/setup-chrome-mcp.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L65

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L65

66 "docs:dev": "npx mintlify dev",

67 "typecheck": "tsc --noEmit",

68 "precheck": "bun run typecheck && bun run check:fix && bun test",

69 "rcs": "bun run scripts/rcs.ts",

70 "reset:api": "node --env-file=.env scripts/reset-api-usage.js",

71 "reset:mai": "node --env-file=.env scripts/reset-mai-usage.js"

72 },

73 "dependencies": {

74 "@agentclientprotocol/sdk": "^0.19.0",

75 "@claude-code-best/mcp-chrome-bridge": "^3.0.1",

76 "highlight.js": "^11.11.1",

77 "ws": "^8.20.0"

78 },

79 "devDependencies": {

80 "@alcalzone/ansi-tokenize": "^0.3.0",

81 "@ant/claude-for-chrome-mcp": "workspace:*",

82 "@ant/computer-use-input": "workspace:*",

83 "@ant/computer-use-mcp": "workspace:*",

84 "@ant/computer-use-swift": "workspace:*",

85 "@ant/model-provider": "workspace:*",

dist/chunks/exit-BbAyh7iz.jsView file

Lines 1-1javascript

1import{n as e}from"./chunk-DR8-3Aex.js";import{Rn as t}from"./src-r4yz4Txc.js";import{t as n}from"./jsx-runtime-D-D469L8.js";import{dl as r,fl as i}from

scripts/postinstall.cjsView file

Lines 2-42javascript

2/**

3 * Postinstall script — runs automatically after `bun install` or `npm install`.

4 *

5 * Downloads ripgrep binary (idempotent, skips if exists).

6 * Works in dev mode (src/ exists), published mode (dist/ exists), with bun or node.

7 *

8 * Usage:

9 * node scripts/postinstall.js

10 * node scripts/postinstall.js --force

11 * bun run scripts/postinstall.js

12 */

dist/chunks/instinctParser-B3kl9V1w.jsView file

Lines 1-1javascript

dist/chunks/esm-CsGLyWmS.jsView file

Lines 1-21javascript

1import{i as e,n as t,o as n,t as r}from"./chunk-DR8-3Aex.js";import{n as i,t as a}from"./defineProperty-80gRi2ZW.js";import{n as o,t as s}from

dist/chunks/dist-es-DuAZyxJ02.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/chunks/dist-es-DuAZyxJ02.jsView on unpkg · L3

dist/chunks/bridgeMain-BBSHlt23.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/bridgeMain-BBSHlt23.jsView on unpkg · L1

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView file

•path = dist/vendor/audio-capture/x64-darwin/audio-capture.node kind = native_binary sizeBytes = 439076 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView on unpkg

dist/chunks/loadAgentsDir-UyQxvIqQ.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/loadAgentsDir-UyQxvIqQ.jsView on unpkg

•path = dist/chunks/loadAgentsDir-UyQxvIqQ.js kind = oversized_source_file sizeBytes = 4329139 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/chunks/loadAgentsDir-UyQxvIqQ.jsView on unpkg

dist/chunks/createSSHSession-BHSorGb4.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/createSSHSession-BHSorGb4.jsView on unpkg

dist/chunks/dist-Cg1a1Exw.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/dist-Cg1a1Exw.jsView on unpkg

dist/chunks/executor-D6F3IuTA.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/executor-D6F3IuTA.jsView on unpkg

dist/chunks/open-CDditBQ-.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/open-CDditBQ-.jsView on unpkg

dist/chunks/REPL-DnHJofkV.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/REPL-DnHJofkV.jsView on unpkg

dist/chunks/cliLaunch-lSqbpipz.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/cliLaunch-lSqbpipz.jsView on unpkg

dist/chunks/escHotkey-DzMWu-0q.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/escHotkey-DzMWu-0q.jsView on unpkg

dist/chunks/insights-DydC1MGH.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/insights-DydC1MGH.jsView on unpkg

dist/chunks/SSETransport-Sj1hLbwN.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/SSETransport-Sj1hLbwN.jsView on unpkg

dist/chunks/bridgeMessaging-BVQPWW7V.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunks/bridgeMessaging-BVQPWW7V.jsView on unpkg

@mdevs/mai-cli@1.0.20

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code