@pikaa-ai/pikaa@0.3.12

⚠ Under review

PIKAA CLI - AI coding agent that runs locally in your terminal.

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 24 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsPossibleObfuscationUrlStrings

Manifest

WildcardDependency

scanned 3 file(s), 745 KB of source, external domains: 127.0.0.1, api.github.com, api.groupy-hub.store, api.openai.com, api.search.brave.com, api.tavily.com, bun.sh, crates.io, docs.rs, github.com, html.duckduckgo.com, pkg.go.dev, pypi.org, react.dev, registry.npmjs.org

Source & flagged code

15 flagged

bin/pikaa.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

3/**

4 * Universal Native Launcher for Pikaa Agent CLI.

5 *

6 * Automatically detects platform (macOS, Linux, Windows) and architecture (arm64, x64).

7 * If the native binary is already present, runs it with 0ms startup time.

8 * If not present (e.g. postinstall script skipped by npm allow-scripts), automatically

9 * downloads the native binary from GitHub Releases to ~/.pikaa/bin/ and executes it.

10 *

11 * Zero external dependencies required. Does NOT require Bun or compilation tools.

12 */

14import { spawnSync } from "node:child_process";

15import { existsSync, chmodSync, mkdirSync, createWriteStream, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/pikaa.jsView on unpkg · L13

16import { fileURLToPath } from "node:url";

17import { dirname, join } from "node:path";

18import { homedir } from "node:os";

19import { pipeline } from "node:stream/promises";

20import https from "node:https";

22const __filename = fileURLToPath(import.meta.url);

23const __dirname = dirname(__filename);

24const rootDir = join(__dirname, "..");

26const platform = process.platform;

27const arch = process.arch;

29let version = "";

30try {

31 const pkg = JSON.parse(readFileSync(join(rootDir, "package.json"), "utf8"));

32 version = pkg.version || "";

33} catch {}

•matchType = normalized_sha256 matchedPackage = @pikaa-ai/pikaa@0.3.9 matchedPath = bin/pikaa.js matchedIdentity = npm:QHBpa2FhLWFpL3Bpa2Fh:0.3.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/pikaa.jsView on unpkg

dist/index.jsView file

Lines 142-182javascript

142 } catch (x) {

143 return "<...>";

144 }

145 }

146 function getOwner() {

147 var dispatcher = ReactSharedInternals.A

dist/cli.jsView file

Lines 1-36javascript

1#!/usr/bin/env bun

2// @bun

4// src/cli/index.ts

5import { resolve as resolve21 } from "path";

6import { existsSync as existsSync21 } from "fs";

7import

bin/groupy.cmdView file

•path = bin/groupy.cmd kind = build_helper sizeBytes = 95 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/groupy.cmdView on unpkg

Source & flagged code

15 flagged · loading source

bin/pikaa.jsView file

13L14: import { spawnSync } from "node:child_process"; L15: import { existsSync, chmodSync, mkdirSync, createWriteStream, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/pikaa.jsView on unpkg · L13

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/pikaa.jsView on unpkg

dist/index.jsView file

2249const isWindows = process.platform === "win32"; L2250: const baseCmd = isWindows ? ["cmd.exe", "/d", "/s", "/c", command] : ["/bin/sh", "-c", command]; L2251: const sandboxProfile = globalKernelSandbox.buildDefaultProfile(ctx.cwd);

High

Findings

1 Critical12 High5 Medium6 Low

CriticalPrevious Version Dangerous Deltadist/cli.js

HighChild Processbin/pikaa.js

HighShelldist/index.js

HighSame File Env Network Executiondist/index.js

HighCredential Redirect Persistencedist/index.js

HighCloud Metadata Accessdist/index.js

HighObfuscated Payload Loaderdist/cli.js

HighRemote Agent Bridgedist/index.js

HighCross File Remote Execution Contextdist/cli.js

HighKnown Malware Source Similaritydist/cli.js

HighKnown Malware Source Similaritybin/pikaa.js

HighKnown Malware Source Similaritydist/index.js

Affected versions and remediation

This report applies to @pikaa-ai/pikaa@0.3.12.

See all versions of @pikaa-ai/pikaa for other recorded verdicts.

Review the evidence and your use of @pikaa-ai/pikaa@0.3.12 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-01 15:34:40.208Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.