97`):consoleLoggingEnabled&&process.stdout.write(fullMessage+`
L98: `),writeToFile(fullMessage)}function newInvocationId(){return crypto2.randomBytes(16).toString("hex")}function safeStringify(obj){try{return JSON.stringify(obj)}catch{return String...
L99: `:`
L100: `;function encode3(obj,opt){var children2=[],out="";typeof opt=="string"?opt={section:opt,whitespace:!1}:(opt=opt||{},opt.whitespace=opt.whitespace===!0);var separator=opt.whitespa...
L101: `}):val&&typeof val=="object"?children2.push(k):out+=safe(k)+separator+safe(val)+eol}),opt.section&&out.length&&(out="["+safe(opt.section)+"]"+eol+out),children2.forEach(function(k...
L102: `,PEM_END=`
CriticalSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/index.jsView on unpkg · L97 2import { createRequire as __mearlCreateRequire } from 'node:module'; const require = __mearlCreateRequire(import.meta.url);
L3: var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO...
L4: `).join(`
L5: `+prefix),args.push(colorCode+"m+"+module.exports.humanize(this.diff)+"\x1B[0m")}else args[0]=getDate()+name+" "+args[0]}function getDate(){return exports.inspectOpts.hideDate?"":n...
L6: `)}function save(namespaces){namespaces?process.env.DEBUG=namespaces:delete process.env.DEBUG}function load(){return process.env.DEBUG}function init(debug){debug.inspectOpts={};let...
L7: `).map(str=>str.trim()).join(" ")};formatters.O=function(v){return this.inspectOpts.colors
CriticalDownload Execute
Source downloads or fetches remote code and executes it.
dist/index.jsView on unpkg · L2 761);
L762: })()`,result=await session.client.sendCommand("Runtime.evaluate",{expression,returnByValue:!0,awaitPromise:!0},timeoutMs+2e3),error48=evaluationError(result);if(error48)throw new E...
L763: Content-Disposition: form-data; name="${safeName}"\r
...
L771: `))}return chunks.push(Buffer.from(`--${boundary}--\r
L772: `)),{contentType:`multipart/form-data; boundary=${boundary}`,body:Buffer.concat(chunks)}}function hasMultipartPayload(data){return data.formData!==void 0||data.files!==void 0}async...
L773: var el = document.querySelector(${JSON.stringify(selector)});
CriticalRemote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L761 67`?(parser.line++,parser.column=0):parser.column++);parser.textNode+=chunk.substring(starti,i-1)}c==="<"&&!(parser.sawRoot&&parser.closedRoot&&!parser.strict)?(parser.state=S.OPEN_W...
L68: `?(parser.line++,parser.column=0):parser.column++);parser.cdata+=chunk.substring(starti,i-1),c==="]"&&(parser.state=S.CDATA_ENDING);continue;case S.CDATA_ENDING:c==="]"?parser.stat...
L69: `,"utf8")}catch(error48){consoleLoggingEnabled&&process.stderr.write(`Failed to write to log file: ${error48}
L70: `)}}function setupLogger(config2){if(config2.level&&setLogLevel(config2.level),config2.logFile!==void 0)if(config2.logFile){logFilePath=config2.logFile,fileLoggingEnabled=!0;let di...
L71: `),writeToFile(message),args.length>0))for(let arg of args){let argStr=typeof arg=="object"&&arg!==null?JSON.stri
CriticalAi Agent Control Hijack
Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
dist/index.jsView on unpkg · L67 2Trigger-reachable chain: scripts.postinstall -> dist/index.js
L2: import { createRequire as __mearlCreateRequire } from 'node:module'; const require = __mearlCreateRequire(import.meta.url);
L3: var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO...
L4: `).join(`
L5: `+prefix),args.push(colorCode+"m+"+module.exports.humanize(this.diff)+"\x1B[0m")}else args[0]=getDate()+name+" "+args[0]}function getDate(){return exports.inspectOpts.hideDate?"":n...
L6: `)}function save(namespaces){namespaces?process.env.DEBUG=namespaces:delete process.env.DEBUG}function load(){return process.env.DEBUG}function init(debug){debug.inspectOpts={};let...
L7: `).map(str=>str.trim()).join
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkg · L2 •matchType = previous_version_dangerous_delta
matchedPackage = @mearl/native-host@2.17.1
matchedIdentity = npm:QG1lYXJsL25hdGl2ZS1ob3N0:2.17.1
similarity = 0.667
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg 100`;function encode3(obj,opt){var children2=[],out="";typeof opt=="string"?opt={section:opt,whitespace:!1}:(opt=opt||{},opt.whitespace=opt.whitespace===!0);var separator=opt.whitespa...
L101: `}):val&&typeof val=="object"?children2.push(k):out+=safe(k)+separator+safe(val)+eol}),opt.section&&out.length&&(out="["+safe(opt.section)+"]"+eol+out),children2.forEach(function(k...
L102: `,PEM_END=`
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
`;proxy.auth&&(headers["Proxy-Authorization"]=`Basic ${Buffer.from(proxy.auth).toString("base64")}`);let{host,port,secureEndpoint}=opts;isDefaultPort(port,secureEndpoint)||(host+=`...
`);let{statusCode,buffered}=yield proxyResponsePromise;if(statusCode===200){if(req.once("socket",resume),opts.secureEndpoint){debug("Upgrading socket connection to TLS");let server...
`)+4,req.outputData[0].data=req._header+first.substring(endOfHeaders),debug("Output buffer: %o",req.outputData[0].data))}return yield(0,once_1.default)(socket,"connect"),socket})}}...
`?(parser.line++,parser.column=0):parser.column++);parser.cdata+=chunk.subst
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkg 85`),writeToFile(msg)):(consoleLoggingEnabled&&process.stderr.write(msg+`
L86: `),writeToFile(msg)),fullResponse&&shouldLog("DEBUG")&&logDebug(`Full Response: ${fullResponse}`);return}if(success2){if(shouldLog("INFO")){let mainMessage=`✅ API Response: ${apiNa...
L87: `),writeToFile(`ℹ️ INFO: ${mainMessage}`)):logInfo(mainMessage),keyFields)for(let[key,value]of Object.entries(keyFields)){let maskedValue=maskSensitiveData({[key]:value}),keyMessa...
...
L97: `):consoleLoggingEnabled&&process.stdout.write(fullMessage+`
L98: `),writeToFile(fullMessage)}function newInvocationId(){return crypto2.randomBytes(16).toString("hex")}function safeStringify(obj){try{return JSON.stringify(obj)}catch{return String...
L99: `:`
L100: `;function encode3(obj,opt){var children2=[],out="";typeof opt=="string
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L85 2import { createRequire as __mearlCreateRequire } from 'node:module'; const require = __mearlCreateRequire(import.meta.url);
L3: var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO...
L4: `).join(`
L5: `+prefix),args.push(colorCode+"m+"+module.exports.humanize(this.diff)+"\x1B[0m")}else args[0]=getDate()+name+" "+args[0]}function getDate(){return exports.inspectOpts.hideDate?"":n...
L6: `)}function save(namespaces){namespaces?process.env.DEBUG=namespaces:delete process.env.DEBUG}function load(){return process.env.DEBUG}function init(debug){debug.inspectOpts={};let...
L7: `).map(str=>str.trim()).join(" ")};formatters.O=function(v){return this.inspectOpts.colors
HighCloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
dist/index.jsView on unpkg · L2 100`;function encode3(obj,opt){var children2=[],out="";typeof opt=="string"?opt={section:opt,whitespace:!1}:(opt=opt||{},opt.whitespace=opt.whitespace===!0);var separator=opt.whitespa...
L101: `}):val&&typeof val=="object"?children2.push(k):out+=safe(k)+separator+safe(val)+eol}),opt.section&&out.length&&(out="["+safe(opt.section)+"]"+eol+out),children2.forEach(function(k...
L102: `,PEM_END=`
...
L427: `),logInfo("[LocalMCPClient] Sent initialization request to MCP server"))},1e3)})}handleMessage(message){try{let parsed=JSON.parse(message);if(parsed.result&&this.toolCallQueue.len...
L428: `),setTimeout(()=>{reject(new Error(`Tool call timeout: ${toolName}`))},18e4)})}};__name(_LocalMCPClient,"LocalMCPClient");LocalMCPClient=_LocalMCPClient,_RuntimeError=class extend...
L429: "${nodePath}
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
dist/index.jsView on unpkg · L100 85Trigger-reachable command-output exfiltration chain: scripts.postinstall -> dist/index.js
L85: `),writeToFile(msg)):(consoleLoggingEnabled&&process.stderr.write(msg+`
L86: `),writeToFile(msg)),fullResponse&&shouldLog("DEBUG")&&logDebug(`Full Response: ${fullResponse}`);return}if(success2){if(shouldLog("INFO")){let mainMessage=`✅ API Response: ${apiNa...
L87: `),writeToFile(`ℹ️ INFO: ${mainMessage}`)):logInfo(mainMessage),keyFields)for(let[key,value]of Object.entries(keyFields)){let maskedValue=maskSensitiveData({[key]:value}),keyMessa...
...
L97: `):consoleLoggingEnabled&&process.stdout.write(fullMessage+`
L98: `),writeToFile(fullMessage)}function newInvocationId(){return crypto2.randomBytes(16).toString("hex")}function safeStringify(obj){try{return JSON.stringify(obj)}catch{return String
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.jsView on unpkg · L85 •stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.jsView on unpkg