registry / @omega3_0/nanoagent / 2.1.15

@omega3_0/nanoagent@2.1.15

Ultra-lightweight, scalable CLI/TUI coding agent optimized for tiny local models & remote runtimes

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Source inspection found a normal coding-agent CLI rather than concrete malicious behavior. The flagged shell, network, and environment primitives are user-driven product features with relevant safeguards.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

User runs the CLI or TUI and configures or approves an agent action.

Impact

No unconsented install-time action, exfiltration, persistence, or payload execution was found.

Mechanism

User-configured agent, LLM, and MCP client operations.

AI rationale

Evidence

package.jsonscripts/run-nanoagent.mjsdist/main.jsdist/bun-detect.jsdist/agent-tools/execute.jsdist/agent-lifecycle.jsdist/mcp/index.jsdist/security/index.js

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest has CLI entry points but no install lifecycle hook.
Bun installation is offered only after an interactive affirmative response.
Agent tool execution checks permission and sanitizes output.
Project-local MCP servers are blocked from automatic connection.

Evidence against

No credential harvesting or unsolicited exfiltration was found.
No persistence, destructive install action, or hidden payload execution was found.
Network features are configured LLM and MCP client functionality.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 123 file(s), 917 KB of source, external domains: 127.0.0.1, ai.azure.com, ai.google.dev, anthropic.com, api-docs.deepseek.com, api.anthropic.com, api.cerebras.ai, api.cohere.ai, api.deepseek.com, api.fireworks.ai, api.frogbot.ai, api.gmi-serving.com, api.groq.com, api.helicone.ai, api.kimi.com, api.minimax.io, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.nebius.com, api.openai.com, api.search.ai, api.thegrid.ai, api.together.xyz, api.x.ai, api.z.ai, app.baseten.co, aws.amazon.com, baseten.co, bedrock-runtime.us-east-1.amazonaws.com, bigmodel.cn, build.nvidia.com, bun.sh, cloud.ollama.ai, coding-intl.dashscope.aliyuncs.com, coding.dashscope.aliyuncs.com, cohere.ai, console.groq.com, dashscope-intl.aliyuncs.com, dashscope.aliyuncs.com, docs.docker.com, docs.fireworks.ai, docs.gmicloud.ai, docs.nebius.com, docs.together.ai, docs.x.ai, frogbot.ai, generativelanguage.googleapis.com, github.com, helicone.ai

Source & flagged code

7 flagged

dist/graph/MemoryGraph.jsView file

Lines 325-365javascript

325 py: 'python',

326 java: 'java',

327 go: 'go',

328 rs: 'rust',

329 php: 'php',

330 rb: 'ruby',

331 };

332 return languageMap[ext || ''] || 'unknown';

333 }

334 /**

335 * Process TypeScript/JavaScript file using the native TS compiler AST parser

336 */

337 processTypeScriptFile(filePath, content, fileNode) {

338 const isTSX = filePath.endsWith('.tsx');

339 const sourceFile = ts.createSourceFile(filePath, content, ts.ScriptTarget.Latest, true, isTSX ? ts.ScriptKind.TSX : ts.ScriptKind.TS);

340 for (const statement of sourceFile.statements) {

341 this.processTSStatement(statement, fileNode, sourceFile);

342 }

343 }

344 processTSStatement(node, fileNode, sf) {

345 if (ts.isImportDeclaration(node)) {

346 this.processTSImport(node, fileNode, sf);

347 }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/graph/MemoryGraph.jsView on unpkg · L345

348 else if (ts.isExportDeclaration(node)) {

349 this.processTSExport(node, fileNode, sf);

350 }

351 else if (ts.isClassDeclaration(node) && node.name) {

352 this.processTSClass(node, fileNode, sf);

353 }

354 else if (ts.isFunctionDeclaration(node) && node.name) {

355 this.processTSFunction(node, fileNode, sf);

356 }

357 else if (ts.isVariableStatement(node)) {

358 this.processTSVariables(node, fileNode, sf);

359 }

360 else if (ts.isInterfaceDeclaration(node) && node.name) {

361 this.processTSType(node, fileNode, sf, 'interface');

362 }

363 else if (ts.isTypeAliasDeclaration(node) && node.name) {

364 this.processTSType(node, fileNode, sf, 'alias');

365 }

dist/mcp/index.jsView file

Lines 1-36javascript

1import { Client } from '@modelcontextprotocol/sdk/client/index.js';

2import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';

3import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';

4import { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js'

skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.shView file

•path = skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.sh kind = build_helper sizeBytes = 4641 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.shView on unpkg

dist/main.jsView file

•matchType = normalized_sha256 matchedPackage = @omega3_0/nanoagent@2.1.9 matchedPath = dist/main.js matchedIdentity = npm:QG9tZWdhM18wL25hbm9hZ2VudA:2.1.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/main.jsView on unpkg

dist/subagents/pool.jsView file

•matchType = normalized_sha256 matchedPackage = @omega3_0/nanoagent@2.1.9 matchedPath = dist/subagents/pool.js matchedIdentity = npm:QG9tZWdhM18wL25hbm9hZ2VudA:2.1.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/subagents/pool.jsView on unpkg

dist/tools/exec-tools.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @omega3_0/nanoagent@2.1.13 matchedIdentity = npm:QG9tZWdhM18wL25hbm9hZ2VudA:2.1.13 similarity = 0.942 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/tools/exec-tools.jsView on unpkg

dist/bun-detect.jsView file

•matchType = token_shingles matchedPackage = @omega3_0/nanoagent@2.1.9 matchedPath = dist/bun-detect.js matchedIdentity = npm:QG9tZWdhM18wL25hbm9hZ2VudA:2.1.9 similarity = 0.729 shingleOverlap = 35 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bun-detect.jsView on unpkg

Source & flagged code

7 flagged · loading source

dist/graph/MemoryGraph.jsView file

345if (ts.isImportDeclaration(node)) { L346: this.processTSImport(node, fileNode, sf); L347: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/graph/MemoryGraph.jsView on unpkg · L345

dist/mcp/index.jsView file

16.replace(/\{env:([^}]+)\}/g, (_, varName) => { L17: return process.env[varName] ?? ''; L18: }) ... L31: } L32: // Refuse to interpolate blocked files (workspace .env, private keys, L33: // etc.) into MCP server env/headers — that would exfiltrate secrets. ... L81: this.configs = configs ?? {}; L82: this.workspace = workspace || process.cwd(); L83: } ... L200: cwd: config.cwd ?? this.workspace, L201: // Never inherit stderr into the TUI — MCP servers (Serena especially) L202: // emit INFO logs that corrupt the OpenTUI screen.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/mcp/index.jsView on unpkg · L16

skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.sh

Findings

4 High5 Medium5 Low

HighKnown Malware Source Similaritydist/main.js

HighKnown Malware Source Similaritydist/subagents/pool.js

HighPrevious Version Dangerous Deltadist/tools/exec-tools.js

HighKnown Malware Source Similaritydist/bun-detect.js

MediumDynamic Requiredist/graph/MemoryGraph.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperskills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/mcp/index.js

LowFilesystem

LowHigh Entropy Strings

Low

Affected versions and remediation

This report applies to @omega3_0/nanoagent@2.1.15.

See all versions of @omega3_0/nanoagent for other recorded verdicts.

Review the evidence and your use of @omega3_0/nanoagent@2.1.15 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-28 01:37:04.615Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.