registry / @octostaff/reef / 0.4.2

@octostaff/reef@0.4.2

OctoStaff reef connector worker — bridges Bubble and hosted A2A agents.

Static Scan Results

scanned 7m ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 405 KB of source, external domains: ai.azure.com, github.com, json-schema.org

Source & flagged code

4 flagged

dist/lib.jsView file

Lines 1-21javascript

1import{parseArgs as Fo}from"util";function Uo(e){let{values:t,positionals:r}=Fo({args:e,options:{config:{type:"string",short:"c"},prompt:{type:"string"}},strict:!0,allowPositionals:!0});if(r.length>1)throw new Error(`reef: unexpected arguments: ${r.slice(1).join(" ")}`);let n=r[0]??"connect";if(n!=="connect"&&n!=="ping")throw new Error(`reef: unknown command "${n}"`);if(n!=="ping"&&t.prompt!==void 0)throw new Error("reef: --prompt is only supported by `reef ping`.");return{command:n,configPath:t.config,prompt:t.prompt??"hi"}}var G={Unauthenticated:"unauthenticated",Forbidden:"forbidden",NotFou ...

2${r.newText}`);return t.length>0?t.join(`

High

Child Process

Package source references child process execution.

dist/lib.jsView on unpkg · L1

3`):void 0}function ps(e){if(typeof e=="string")return e;if(e&&typeof e=="object"){let t=e;if(typeof t.error=="string")return t.error;if(typeof t.message=="string")return t.message}return JSON.stringify(e??null)}async function rt(e,t,r={}){let n=r.logger,a=fs(e.command,e.args??[],{env:{...process.env,...e.env},stdio:["pipe","pipe","inherit"]});if(a.on("error",d=>n?.error({command:e.command,err:String(d)},"acp: spawn failed")),a.on("exit",(d,p)=>{d!==0&&d!==null&&n?.warn({command:e.command,code:d,signal:p},"acp: agent process exited")}),!a.stdin||!a.stdout)throw new Error("acp: spawned agent has ...

4${l}`}let p=Bt(e.buffer,a[s],o[s],e.position,d);l+=`${" ".repeat(r.indent)}${jt((e.line+1).toString(),u)} | ${p.str}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/lib.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/lib.jsView on unpkg · L1

5`,l+=`${"-".repeat(r.indent+u+3+p.pos)}^

6`;for(let h=1;h<=r.linesAfter&&!(s+h>=o.length);h++){let S=Bt(e.buffer,a[s+h],o[s+h],e.position-(a[s]-a[s+h]),d);l+=`${" ".repeat(r.indent)}${jt((e.line

7`}return l.replace(/\n$/,"")}function ln(e,t){let r="";return e.mark?(e.mark.name&&(r+=`in "${e.mark.name}" `),r+=`(${e.mark.line+1}:${e

9${e.mark.snippet}`),`${e.reason} ${r}`):e.reason}var it=class extends Error{reason;mark;constructor(e,t){super(),this.name="YAMLException",this.reason=e,this.mark=t,this

10`;case 118:return"\v";case 102:return"\f";case 114:return"\r";case 101:return"\x1B";case 32:return" ";case 34:return'"';case 47:return"/";case 92:return"\\";case

11`.repeat(e-1)}function tl(e,t,r){let n="",a=t,o=t,i=t;for(;a<r;){let s=e.charCodeAt(a);if(s===10||s===13){n+=e.slice(o,i);let l=lt(e,a,r);n+=er(l.breaks),a=o=i=l.position}else a++,s!==32&&s!==9&&(i=a)}return n+e.slice(o,i)}function rl(e,t,r){let n="",a=t,o=t,i=t;for(;a<r;){let s=e.charCodeAt(a);if(s===39)n+=e.slice(o,a)+"'",a+=2,o=i=a;else if(s===10||s===13){n+=e.slice(o,i);let l=lt(e,a,r);n+=er(l.breaks),a=o=i=l.position}else a++,s!==32&&s!==9&&(i=a)}return n+e.slice(o,r)}function nl(e,t,r){let n="",a=t,o=t,i=t;for(;a<r;){let s=e.charCodeAt(a);if(s===92){n+=e.slice(o,a),a++;let l=e.charCodeAt ...

12`),l=s===""?[]:(s.endsWith(`

13`)?s.slice(0,-1):s).split(`

14`),u="",d=!1,p=0,h=!1;for(let S of l){let I=0;for(;I<i&&S.charCodeAt(I)===32;)I++;if(n<0||I

15`.repeat(d?1+p:p)):h?(h=!1,u+=`

16`.repeat(p+1)):p===0?d&&(u+=" "):u+=`

17`.repeat(p):u+=`

18`.repeat(d?1+p:p),u+=T,d=!0,p=0}return a===3?u+=`

19`.repeat(d?1+p:p):a!==2&&d&&(u+=`

20`),u}function al(e,t){if(t.valueStart===Zi)return"";let{valueStart:r,valueEnd:n}=t;if(t.fast)return e.slice(r,n);switch(t.style){case 2:return rl(e,r,n);case 3:return nl(e,r,n);case

21Error message: ${ba(t)}`,cause:t}),this[Zn]=!0,this.text=e}static isInstance(e){return _.hasMarker(e,xa)}},Ra="AI_LoadAPIKeyError",ka=`vercel.ai.error.${Ra}`,ou=Symbol.for(ka),Xn,ea,Tm=class extends(ea=_,Xn=ou,ea){constructor({message:e}){super({name:Ra,message:e}),this[Xn]=!0}static isInstance(e){return _.hasMarker(e,ka)}},Ma="AI_LoadSettingError",Pa=`vercel.ai.error.${Ma}`,su=Symbol.for(Pa),ta,ra,Sm=class extends(ra=_,ta=su,ra){constructor({message:e}){super({name:Ma,message:e}),this[ta]=!0}static isInstance(e){return _.hasMarker(e,Pa)}},Oa="AI_NoContentGeneratedError",Na=`vercel.ai.error.${ ...

Long lines were clipped for display.

package.jsonView file

•scripts registry_only=build,dev,dev:azure,dev:mock,format,format:check,lint,lint:fix; devDependencies registry_only=@octostaff/bubble,@octostaff/devkit,@octostaff/sdk,@types/node,@types/ws,eslint,fastify,husky

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

Source & flagged code

4 flagged · loading source

dist/lib.jsView file

High

Child Process

Package source references child process execution.

dist/lib.jsView on unpkg · L1

1import{parseArgs as Fo}from"util";function Uo(e){let{values:t,positionals:r}=Fo({args:e,options:{config:{type:"string",short:"c"},prompt:{type:"string"}},strict:!0,allowPositionals... L2: ${r.newText}`);return t.length>0?t.join(` L3: `):void 0}function ps(e){if(typeof e=="string")return e;if(e&&typeof e=="object"){let t=e;if(typeof t.error=="string")return t.error;if(typeof t.message=="string")return t.message}... L4: ${l}`}let p=Bt(e.buffer,a[s],o[s],e.position,d);l+=`${" ".repeat(r.indent)}${jt((e.line+1).toString(),u)} | ${p.str}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/lib.jsView on unpkg · L1

1import{parseArgs as Fo}from"util";function Uo(e){let{values:t,positionals:r}=Fo({args:e,options:{config:{type:"string",short:"c"},prompt:{type:"string"}},strict:!0,allowPositionals... L2: ${r.newText}`);return t.length>0?t.join(` L3: `):void 0}function ps(e){if(typeof e=="string")return e;if(e&&typeof e=="object"){let t=e;if(typeof t.error=="string")return t.error;if(typeof t.message=="string")return t.message}... L4: ${l}`}let p=Bt(e.buffer,a[s],o[s],e.position,d);l+=`${" ".repeat(r.indent)}${jt((e.line+1).toString(),u)} | ${p.str}

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/lib.jsView on unpkg · L1

package.jsonView file

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

Findings

1 Critical3 High3 Medium5 Low

CriticalManifest Confusionpackage.json

HighChild Processdist/lib.js

HighSame File Env Network Executiondist/lib.js

HighCommand Output Exfiltrationdist/lib.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

4 flagged

dist/lib.jsView file

Lines 1-21javascript

2${r.newText}`);return t.length>0?t.join(`

High

Child Process

Package source references child process execution.

dist/lib.jsView on unpkg · L1

4${l}`}let p=Bt(e.buffer,a[s],o[s],e.position,d);l+=`${" ".repeat(r.indent)}${jt((e.line+1).toString(),u)} | ${p.str}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/lib.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/lib.jsView on unpkg · L1

5`,l+=`${"-".repeat(r.indent+u+3+p.pos)}^

6`;for(let h=1;h<=r.linesAfter&&!(s+h>=o.length);h++){let S=Bt(e.buffer,a[s+h],o[s+h],e.position-(a[s]-a[s+h]),d);l+=`${" ".repeat(r.indent)}${jt((e.line

7`}return l.replace(/\n$/,"")}function ln(e,t){let r="";return e.mark?(e.mark.name&&(r+=`in "${e.mark.name}" `),r+=`(${e.mark.line+1}:${e

9${e.mark.snippet}`),`${e.reason} ${r}`):e.reason}var it=class extends Error{reason;mark;constructor(e,t){super(),this.name="YAMLException",this.reason=e,this.mark=t,this

10`;case 118:return"\v";case 102:return"\f";case 114:return"\r";case 101:return"\x1B";case 32:return" ";case 34:return'"';case 47:return"/";case 92:return"\\";case

12`),l=s===""?[]:(s.endsWith(`

13`)?s.slice(0,-1):s).split(`

14`),u="",d=!1,p=0,h=!1;for(let S of l){let I=0;for(;I<i&&S.charCodeAt(I)===32;)I++;if(n<0||I

15`.repeat(d?1+p:p)):h?(h=!1,u+=`

16`.repeat(p+1)):p===0?d&&(u+=" "):u+=`

17`.repeat(p):u+=`

18`.repeat(d?1+p:p),u+=T,d=!0,p=0}return a===3?u+=`

19`.repeat(d?1+p:p):a!==2&&d&&(u+=`

20`),u}function al(e,t){if(t.valueStart===Zi)return"";let{valueStart:r,valueEnd:n}=t;if(t.fast)return e.slice(r,n);switch(t.style){case 2:return rl(e,r,n);case 3:return nl(e,r,n);case

Long lines were clipped for display.

package.jsonView file

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg