registry / @rallycry/conveyor-agent / 10.13.17

@rallycry/conveyor-agent@10.13.17

⚠ Under review

Conveyor Agent Runner v10 - PTY harness for the task chat (SDK harness for audit/project-chat). Agent-as-User architecture with BaseService patterns. Works locally too.

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 12 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 17 file(s), 610 KB of source, external domains: api.conveyor.rallycryapp.com, github.com, registry.npmjs.org

Source & flagged code

4 flagged

dist/boot-NMXFM4GK.jsView file

Lines 3-43javascript

3 isLegacyEntrypointLaunch

4} from "./chunk-6GS5ADIY.js";

5import {

6 GitPrepJob,

7 defaultGit,

8 ensureDir,

9 readAgentVersion,

10 redactToken

11} from "./chunk-UZTJJD7Y.js";

12import {

13 workbenchPort

14} from "./chunk-4VUQ2NPF.js";

15import {

16 startWorkbenchServer

17} from "./chunk-5UYMDSAE.js";

18import "./chunk-JG54UJ6V.js";

19import {

20 DEFAULT_WORKBENCH_PORT

21} from "./chunk-JIGG755T.js";

23// src/boot/index.ts

24import { spawn } from "child_process";

25import { statSync as statSync3 } from "fs";

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

dist/boot-NMXFM4GK.jsView on unpkg · L23

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/boot-NMXFM4GK.jsView on unpkg · L23

26import { hostname as osHostname } from "os";

28// src/boot/bundle.ts

29function requireString(source, field) {

30 const value = source[field];

31 if (typeof value !== "string") {

32 throw new Error(`bundle missing field: ${field}`);

33 }

34 return value;

35}

36function parseGitPlan(raw) {

37 if (typeof raw !== "object" || raw === null) {

38 throw new Error("bundle missing field: gitPlan");

39 }

40 const obj = raw;

41 const plan = {

42 repoOwner: requireString(obj, "repoOwner"),

43 repoName: requireString(obj, "repoName"),

•matchType = previous_version_dangerous_delta matchedPackage = @rallycry/conveyor-agent@10.13.13 matchedIdentity = npm:[redacted]:10.13.13 similarity = 0.538 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/boot-NMXFM4GK.jsView on unpkg

runtime/entrypoint.shView file

•path = runtime/entrypoint.sh kind = build_helper sizeBytes = 521 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

runtime/entrypoint.shView on unpkg

Source & flagged code

4 flagged · loading source

dist/boot-NMXFM4GK.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code