registry / @omega3_0/nanoagent / 2.7.3

@omega3_0/nanoagent@2.7.3

⚠ Under review

Ultra-lightweight, scalable CLI/TUI coding agent optimized for tiny local models & remote runtimes

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 14 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 134 file(s), 1.10 MB of source, external domains: 127.0.0.1, ai.azure.com, ai.google.dev, anthropic.com, api-docs.deepseek.com, api.anthropic.com, api.cerebras.ai, api.cohere.ai, api.deepseek.com, api.fireworks.ai, api.frogbot.ai, api.gmi-serving.com, api.groq.com, api.helicone.ai, api.kimi.com, api.minimax.io, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.nebius.com, api.openai.com, api.search.ai, api.thegrid.ai, api.together.xyz, api.x.ai, api.z.ai, app.baseten.co, aws.amazon.com, baseten.co, bedrock-runtime.us-east-1.amazonaws.com, bigmodel.cn, build.nvidia.com, bun.sh, cloud.ollama.ai, coding-intl.dashscope.aliyuncs.com, coding.dashscope.aliyuncs.com, cohere.ai, console.groq.com, dashscope-intl.aliyuncs.com, dashscope.aliyuncs.com, docs.docker.com, docs.fireworks.ai, docs.gmicloud.ai, docs.nebius.com, docs.together.ai, docs.x.ai, example.com, frogbot.ai, generativelanguage.googleapis.com, github.com

Source & flagged code

7 flagged

scripts/run-nanoagent.mjsView file

Lines 268-308javascript

268 process.on('SIGTERM', forward);

269 const code = await new Promise((resolveExit) => {

270 child.on('exit', (exitCode, signal) => {

271 process.off('SIGINT', forward);

272 process.off('SIGTERM', forward);

273 if (signal) resolveExit(1);

274 else resolveExit(exitCode ?? 1);

275 });

276 child.on('error', () => resolveExit(1));

277 });

278 process.exit(code);

279 }

280

281 if (launch.kind === 'node-dist') {

282 process.env.NANOAGENT_ROOT = packageRoot;

283 process.env.NANOAGENT_LAUNCH_CWD = launchCwd;

284 try {

285 process.chdir(packageRoot);

286 } catch {

287 /* ignore */

288 }

289 await import(pathToFileURL(launch.entry).href);

290 return;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/run-nanoagent.mjsView on unpkg · L288

291 }

292

293 console.error(

294 'NanoAgent entry not found. The package needs either src/main.ts or dist/main.js ' +

295 'inside the install root: ' +

296 packageRoot

297 );

298 process.exit(1);

299}

300

301function env(name) {

302 const v = process.env[name];

303 return v && v.length > 0 ? v : undefined;

304}

305

306if (isMainModule()) {

307 void main();

308}

dist/mcp/index.jsView file

Lines 1-36javascript

1import { Client } from '@modelcontextprotocol/sdk/client/index.js';

2import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';

3import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';

4import { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js'

skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.shView file

•path = skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.sh kind = build_helper sizeBytes = 4641 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.shView on unpkg

dist/agent/run.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/agent/run.js#virtual:normalized:round1View on unpkg

dist/subagents/pool.jsView file

•matchType = normalized_sha256 matchedPackage = @omega3_0/nanoagent@2.1.9 matchedPath = dist/subagents/pool.js matchedIdentity = npm:QG9tZWdhM18wL25hbm9hZ2VudA:2.1.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/subagents/pool.jsView on unpkg

dist/bun-detect.jsView file

•matchType = token_shingles matchedPackage = @omega3_0/nanoagent@2.1.9 matchedPath = dist/bun-detect.js matchedIdentity = npm:QG9tZWdhM18wL25hbm9hZ2VudA:2.1.9 similarity = 0.729 shingleOverlap = 35 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bun-detect.jsView on unpkg

dist/main.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @omega3_0/nanoagent@2.5.11 matchedIdentity = npm:QG9tZWdhM18wL25hbm9hZ2VudA:2.5.11 similarity = 0.642 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/main.jsView on unpkg

Source & flagged code

7 flagged · loading source

scripts/run-nanoagent.mjsView file

288} L289: await import(pathToFileURL(launch.entry).href); L290: return;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/run-nanoagent.mjsView on unpkg · L288

dist/mcp/index.jsView file

16.replace(/\{env:([^}]+)\}/g, (_, varName) => { L17: return process.env[varName] ?? ''; L18: }) ... L31: } L32: // Refuse to interpolate blocked files (workspace .env, private keys, L33: // etc.) into MCP server env/headers — that would exfiltrate secrets. ... L81: this.configs = configs ?? {}; L82: this.workspace = workspace || process.cwd(); L83: } ... L200: cwd: config.cwd ?? this.workspace, L201: // Never inherit stderr into the TUI — MCP servers (Serena especially) L202: // emit INFO logs that corrupt the OpenTUI screen.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/mcp/index.jsView on unpkg · L16

skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.sh

Findings

4 High5 Medium5 Low

HighSemantic Analysis Limiteddist/agent/run.js#virtual:normalized:round1

HighKnown Malware Source Similaritydist/subagents/pool.js

HighKnown Malware Source Similaritydist/bun-detect.js

HighPrevious Version Dangerous Deltadist/main.js

MediumDynamic Requirescripts/run-nanoagent.mjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperskills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/mcp/index.js

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @omega3_0/nanoagent@2.7.3.

See all versions of @omega3_0/nanoagent for other recorded verdicts.

Review the evidence and your use of @omega3_0/nanoagent@2.7.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-19 00:20:00.043Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.