registry / @omega3_0/nanoagent / 2.6.2

@omega3_0/nanoagent@2.6.2

⚠ Under review

Ultra-lightweight, scalable CLI/TUI coding agent optimized for tiny local models & remote runtimes

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 129 file(s), 1.03 MB of source, external domains: 127.0.0.1, ai.azure.com, ai.google.dev, anthropic.com, api-docs.deepseek.com, api.anthropic.com, api.cerebras.ai, api.cohere.ai, api.deepseek.com, api.fireworks.ai, api.frogbot.ai, api.gmi-serving.com, api.groq.com, api.helicone.ai, api.kimi.com, api.minimax.io, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.nebius.com, api.openai.com, api.search.ai, api.thegrid.ai, api.together.xyz, api.x.ai, api.z.ai, app.baseten.co, aws.amazon.com, baseten.co, bedrock-runtime.us-east-1.amazonaws.com, bigmodel.cn, build.nvidia.com, bun.sh, cloud.ollama.ai, coding-intl.dashscope.aliyuncs.com, coding.dashscope.aliyuncs.com, cohere.ai, console.groq.com, dashscope-intl.aliyuncs.com, dashscope.aliyuncs.com, docs.docker.com, docs.fireworks.ai, docs.gmicloud.ai, docs.nebius.com, docs.together.ai, docs.x.ai, frogbot.ai, generativelanguage.googleapis.com, github.com, helicone.ai

Source & flagged code

6 flagged

dist/graph/MemoryGraph.jsView file

Lines 325-365javascript

325 py: 'python',

326 java: 'java',

327 go: 'go',

328 rs: 'rust',

329 php: 'php',

330 rb: 'ruby',

331 };

332 return languageMap[ext || ''] || 'unknown';

333 }

334 /**

335 * Process TypeScript/JavaScript file using the native TS compiler AST parser

336 */

337 processTypeScriptFile(filePath, content, fileNode) {

338 const isTSX = filePath.endsWith('.tsx');

339 const sourceFile = ts.createSourceFile(filePath, content, ts.ScriptTarget.Latest, true, isTSX ? ts.ScriptKind.TSX : ts.ScriptKind.TS);

340 for (const statement of sourceFile.statements) {

341 this.processTSStatement(statement, fileNode, sourceFile);

342 }

343 }

344 processTSStatement(node, fileNode, sf) {

345 if (ts.isImportDeclaration(node)) {

346 this.processTSImport(node, fileNode, sf);

347 }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/graph/MemoryGraph.jsView on unpkg · L345

348 else if (ts.isExportDeclaration(node)) {

349 this.processTSExport(node, fileNode, sf);

350 }

351 else if (ts.isClassDeclaration(node) && node.name) {

352 this.processTSClass(node, fileNode, sf);

353 }

354 else if (ts.isFunctionDeclaration(node) && node.name) {

355 this.processTSFunction(node, fileNode, sf);

356 }

357 else if (ts.isVariableStatement(node)) {

358 this.processTSVariables(node, fileNode, sf);

359 }

360 else if (ts.isInterfaceDeclaration(node) && node.name) {

361 this.processTSType(node, fileNode, sf, 'interface');

362 }

363 else if (ts.isTypeAliasDeclaration(node) && node.name) {

364 this.processTSType(node, fileNode, sf, 'alias');

365 }

dist/mcp/index.jsView file

Lines 1-36javascript

1import { Client } from '@modelcontextprotocol/sdk/client/index.js';

2import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';

3import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';

4import { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js'

skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.shView file

•path = skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.sh kind = build_helper sizeBytes = 4641 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.shView on unpkg

dist/agent/run.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/agent/run.js#virtual:normalized:round1View on unpkg

dist/subagents/pool.jsView file

•matchType = normalized_sha256 matchedPackage = @omega3_0/nanoagent@2.1.9 matchedPath = dist/subagents/pool.js matchedIdentity = npm:QG9tZWdhM18wL25hbm9hZ2VudA:2.1.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/subagents/pool.jsView on unpkg

dist/bun-detect.jsView file

•matchType = token_shingles matchedPackage = @omega3_0/nanoagent@2.1.9 matchedPath = dist/bun-detect.js matchedIdentity = npm:QG9tZWdhM18wL25hbm9hZ2VudA:2.1.9 similarity = 0.729 shingleOverlap = 35 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bun-detect.jsView on unpkg

Source & flagged code

6 flagged · loading source

dist/graph/MemoryGraph.jsView file

345if (ts.isImportDeclaration(node)) { L346: this.processTSImport(node, fileNode, sf); L347: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/graph/MemoryGraph.jsView on unpkg · L345

dist/mcp/index.jsView file

16.replace(/\{env:([^}]+)\}/g, (_, varName) => { L17: return process.env[varName] ?? ''; L18: }) ... L31: } L32: // Refuse to interpolate blocked files (workspace .env, private keys, L33: // etc.) into MCP server env/headers — that would exfiltrate secrets. ... L81: this.configs = configs ?? {}; L82: this.workspace = workspace || process.cwd(); L83: } ... L200: cwd: config.cwd ?? this.workspace, L201: // Never inherit stderr into the TUI — MCP servers (Serena especially) L202: // emit INFO logs that corrupt the OpenTUI screen.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/mcp/index.jsView on unpkg · L16

skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.sh

Findings

3 High5 Medium5 Low

HighSemantic Analysis Limiteddist/agent/run.js#virtual:normalized:round1

HighKnown Malware Source Similaritydist/subagents/pool.js

HighKnown Malware Source Similaritydist/bun-detect.js

MediumDynamic Requiredist/graph/MemoryGraph.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperskills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/mcp/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @omega3_0/nanoagent@2.6.2.

See all versions of @omega3_0/nanoagent for other recorded verdicts.

Review the evidence and your use of @omega3_0/nanoagent@2.6.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-15 15:56:18.318Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.