1257`?i-2:i>0&&a[i-1]===`
L1258: `?i-1:-1;if(r!==-1&&a[r-1]==="\\"){let t=r-1;for(;t>0&&/[ \t]/.test(a[t-1]??"");)t--;return t}return i}function Dea(a){let e=!1,i=!1,r=!1;for(let t=0;t<a.length;t++){let n=a[t]??""...
L1259: `)){let t=a.split(`
L1260: `)[0].trim();if(t){let n=pR(t)??_R(t);if(n)return`${n}:*`}}let i=pR(a);if(i)return`${i}:*`;let r=_R(a);return r?`${r}:*`:a.trim()}function Pea(a){let e=Mea(a),i=new Set([e]),r=[{ki...
L1261: ${r.join(`
...
L1270: ${a.slice(-250)}`}function Raa(a){let e=kR(a.tool_call_args),i=kR(a.tool_call_result_data),r=[`tool:${a.tool_name??""}`];return e&&r.push(`args=${e}`),i&&r.push(`result=${i}`),r.jo...
L1271: `)}var Ay=class{timeoutMs;endpointOverride;authTokenProvider;constructor(e={}){this.timeoutMs=e.timeoutMs??6e4,this.endpointOverride=e.endpoin
CriticalSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
chunks/chunk-VVZRUBTN.jsView on unpkg · L1257 1221`)));return i.length>0?Gu(i):0}function Ase(a){return{role:"user",content:[{type:"text",text:a}],timestamp:0}}var MJe=16384,PJe=2048,LJe=1024,xse=1,OJe={minimal:1024,low:2048,mediu...
L1222: `)}function XJe(a,e){let i=[];for(let r of a){let t=r.type.toLowerCase();if(t==="text"||t==="message"||t==="assistant_text"){let n=r.text??Bu(r.data,["text","content"]);n&&i.push({...
L1223: `),r=a.selected.map(m=>NYe(m,a.options.maxSeedMessageChars)),t=[i,...r].join(`
...
L1236: `,"utf-8");try{KYe(i,a)}catch(r){throw xm(i,{force:!0}),r}}function KYe(a,e,i=3){for(let r=0;;r++)try{AYe(a,e);return}catch(t){let n=t.code;if((n==="EPERM"||n==="EACCES")&&r<i){let...
L1237: `,"utf-8"),await h9e(t,e)}catch(s){throw await nV(t,{force:!0}).catch(()=>{}),s}}readStorageWriteVersion(){return this.storageWrit
CriticalCommand Output Exfiltration
Source executes local commands and sends command output to an external endpoint.
chunks/chunk-VVZRUBTN.jsView on unpkg · L1221 1221Trigger-reachable chain: manifest.bin -> cli.js -> chunks/main-KR4ULBZO.js -> chunks/provider-command-NMPS5C3N.js -> chunks/chunk-VVZRUBTN.js
L1221: `)));return i.length>0?Gu(i):0}function Ase(a){return{role:"user",content:[{type:"text",text:a}],timestamp:0}}var MJe=16384,PJe=2048,LJe=1024,xse=1,OJe={minimal:1024,low:2048,mediu...
L1222: `)}function XJe(a,e){let i=[];for(let r of a){let t=r.type.toLowerCase();if(t==="text"||t==="message"||t==="assistant_text"){let n=r.text??Bu(r.data,["text","content"]);n&&i.push({...
L1223: `),r=a.selected.map(m=>NYe(m,a.options.maxSeedMessageChars)),t=[i,...r].join(`
...
L1236: `,"utf-8");try{KYe(i,a)}catch(r){throw xm(i,{force:!0}),r}}function KYe(a,e,i=3){for(let r=0;;r++)try{AYe(a,e);return}catch(t){let n=t.code;if((n==="EPERM"||n==="EACCES")&&r<i){le
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
chunks/chunk-VVZRUBTN.jsView on unpkg · L1221 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
chunks/chunk-VVZRUBTN.js:
`,e};zi.prototype.Program=function(a){var e="",i=a.body,r=void 0,t=void 0;if(a.blockParams){var n="BLOCK PARAMS: [";for(r=0,t=a.blockParams.length;r<t;r++)n+=" "+a.blockParams[r];n...
`).run(i.taskId,i.ownerSessionId,i.kind,i.status,i.createdAt,i.updatedAt,i.endedAt??null,i.deliveredAt??null,JSON.stringify(yu(i)))}withDb(e){return da(this.dataDir,e)}},pg=class{d...
`))}catch(p){throw await c().catch(()=>{}),p}},async cancel(){o=!0,await c()}})}function lQe(a){if(mQe(a))return a[Symbol.asyncIterator]();let e=a[Symbol.iterator]();return{next:as...
VALUES (?, ?, ?)`).run(e,this.nowMs(),JSON.stringify(i))})}withDb
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
chunks/chunk-VVZRUBTN.jsView on unpkg •Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
chunks/chunk-VVZRUBTN.js:
`,e=this.i;break;case tDa:{let{entityReturnState:r}=this,t=this.entity+i.slice(e,this.prevI);this.state=r;let n;t===""?(this.fail("empty entity name."),n="&;"):(n=this.parseEntity(...
See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details`))}function rUa(){Object.keys(OO).forEach(function(a){delete OO[a]})...
`,e};zi.prototype.Program=function(a){var e="",i=a.body,r=void 0,t=void 0;if(a.blockParams){var n="BLOCK PARAMS: [";for(r=0,t=a.blockParams.length;r<t;r++)n+=" "+a.blockParams[r];n...
`))}catch(p){throw await c().catch(()=>{}),p}},async cancel(){o=!0,await c()}})}functi
HighEntrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
chunks/chunk-VVZRUBTN.jsView on unpkg 31`.trim()},blockValue:function(e){var i=this.aliasable("container.hooks.blockHelperMissing"),r=[this.contextName(0)];this.setupHelperArgs(e,0,r);var t=this.popStack();r.splice(1,0,t...
L32: `,e};zi.prototype.Program=function(a){var e="",i=a.body,r=void 0,t=void 0;if(a.blockParams){var n="BLOCK PARAMS: [";for(r=0,t=a.blockParams.length;r<t;r++)n+=" "+a.blockParams[r];n...
L33: CREATE TABLE IF NOT EXISTS local_runtime_background_tasks (
...
L680: record_json = excluded.record_json
L681: `).run(i.taskId,i.ownerSessionId,i.kind,i.status,i.createdAt,i.updatedAt,i.endedAt??null,i.deliveredAt??null,JSON.stringify(yu(i)))}withDb(e){return da(this.dataDir,e)}},pg=class{d...
L682: `);return a.dataLines=[],e.trim()==="[DONE]"?{kind:"done"}:{kind:"frame",frame:JSON.parse(e)}}function oQe(a){let e=
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
chunks/chunk-VVZRUBTN.jsView on unpkg · L31 1221Trigger-reachable command-output exfiltration chain: manifest.bin -> cli.js -> chunks/main-KR4ULBZO.js -> chunks/provider-command-NMPS5C3N.js -> chunks/chunk-VVZRUBTN.js
L1221: `)));return i.length>0?Gu(i):0}function Ase(a){return{role:"user",content:[{type:"text",text:a}],timestamp:0}}var MJe=16384,PJe=2048,LJe=1024,xse=1,OJe={minimal:1024,low:2048,mediu...
L1222: `)}function XJe(a,e){let i=[];for(let r of a){let t=r.type.toLowerCase();if(t==="text"||t==="message"||t==="assistant_text"){let n=r.text??Bu(r.data,["text","content"]);n&&i.push({...
L1223: `),r=a.selected.map(m=>NYe(m,a.options.maxSeedMessageChars)),t=[i,...r].join(`
...
L1236: `,"utf-8");try{KYe(i,a)}catch(r){throw xm(i,{force:!0}),r}}function KYe(a,e,i=3){for(let r=0;;r++)try{AYe(a,e);return}catch(t){let n=t.code;if((n==="EP
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
chunks/chunk-VVZRUBTN.jsView on unpkg · L1221 •stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 2
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
chunks/chunk-VVZRUBTN.jsView on unpkg •path = chunks/chunk-VVZRUBTN.js
kind = oversized_source_file
sizeBytes = 8285468
magicHex = [redacted]
MediumOversized Source File
Package contains source files above the normal full-analysis size ceiling.
chunks/chunk-VVZRUBTN.jsView on unpkg