registry / @rubytech/create-maxy-code / 0.1.472

@rubytech/create-maxy-code@0.1.472

⚠ Under review

Install Maxy — AI for Productive People

Static Scan Results

scanned 3mo ago · by rust-scanner

Static analysis flagged 40 finding(s) at 97.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

Manifest

NoLicense

scanned 833 file(s), 12.7 MB of source, external domains: 0.0.0.0, 127.0.0.1, accounts.google.com, api.anthropic.com, api.cloudflare.com, api.replicate.com, api.telegram.org, appcenter.intuit.com, astral.sh, brew.sh, chevrotain.io, claude.ai, deb.nodesource.com, debian.neo4j.com, dl.google.com, docs.getmaxy.com, docs.realagent.network, en.wikipedia.org, fonts.googleapis.com, fonts.gstatic.com, getmaxy.com, github.com, graph.microsoft.com, langium.org, llmstxt.org, login.microsoftonline.com, maxy.bot, maxy.setup, ns.adobe.com, oauth.platform.intuit.com, oauth2.googleapis.com, ollama.ai, one.dash.cloudflare.com, platform.claude.com, player.vimeo.com, quickbooks.api.intuit.com, react.dev, registry.npmjs.org, sandbox-quickbooks.api.intuit.com, schema.org, www.anthropic.com, www.googleapis.com, www.linkedin.com, www.w3.org, www.xfa.org, www.youtube-nocookie.com

Source & flagged code

26 flagged

payload/platform/scripts/smoke-boot-services.shView file

335patternName = generic_password severity = medium line = 335 matchedText = local ne...:-}"

Medium

Secret Pattern

Package contains a possible secret pattern.

payload/platform/scripts/smoke-boot-services.shView on unpkg · L335

dist/index.jsView file

161for (const host of ["registry.npmjs.org", "github.com"]) { L162: const dns = spawnSync("host", ["-W", "5", host], { encoding: "utf-8", stdio: "pipe", timeout: 10_000 }); L163: logFile(`DNS ${host}: ${dns.status === 0 ? "OK" : "FAIL"} — ${(dns.stdout || dns.stderr || "").trim().split("\n")[0]}`); ... L168: "--connect-timeout", "10", L169: "https://registry.npmjs.org/", L170: ], { encoding: "utf-8", stdio: "pipe", timeout: 15_000 }); ... L175: function captureNpmDebugLog() { L176: const logsDir = resolve(process.env.HOME ?? "/root", ".npm/_logs"); L177: if (!existsSync(logsDir))

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/index.jsView on unpkg · L161

1#!/usr/bin/env node L2: import { execFileSync, spawn, spawnSync } from "node:child_process"; L3: import { existsSync, mkdirSync, writeFileSync, cpSync, readFileSync, rmSync, readdirSync, appendFileSync, openSync, closeSync, chmodSync, statSync, realpathSync, accessSync, consta... ... L9: import { buildBrandCronBlock, mergeBrandCronBlock } from "./cron-registration.js"; L10: import { validateTierFlag, validateEntitlementBase64, applyTierToAccountConfig, entitlementPath } from "./tier-flag.js"; L11: import { parseOsRelease, isUbuntuLike as isUbuntuLikePure, parseAptCacheCandidate, decideAptResolution, } from "./apt-resolve.js"; ... L51: } L52: const INSTALL_DIR = resolve(process.env.HOME ?? "/root", BRAND.installDir); L53: const PERSIST_DIR = resolve(process.env.HOME ?? "/root", BRAND.co

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/index.jsView on unpkg · L1

1Trigger-reachable chain: manifest.bin -> dist/index.js L1: #!/usr/bin/env node L2: import { execFileSync, spawn, spawnSync } from "node:child_process"; L3: import { existsSync, mkdirSync, writeFileSync, cpSync, readFileSync, rmSync, readdirSync, appendFileSync, openSync, closeSync, chmodSync, statSync, realpathSync, accessSync, consta... ... L9: import { buildBrandCronBlock, mergeBrandCronBlock } from "./cron-registration.js"; L10: import { validateTierFlag, validateEntitlementBase64, applyTierToAccountConfig, entitlementPath } from "./tier-flag.js"; L11: import { parseOsRelease, isUbuntuLike as isUbuntuLikePure, parseAptCacheCandidate, decideAptResolution, } from "./apt-resolve.js"; ... L51: } L52: const INSTALL_DIR = resolve(process.env.HOME ?? "/root", BRAND.installDir); L53: const PERS

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L1

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

556// Fetch + dearmor the signing key, write to /etc/apt/trusted.gpg.d/. Pipe L557: // composition runs through bash -c so the curl|gpg pipeline is one L558: // privileged command rather than two separate sudo escalations.

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L556

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L1

304function canSudo() { L305: const result = spawnSync("sudo", ["-n", "true"], { stdio: "pipe", timeout: 5_000 }); L306: return result.status === 0; ... L308: /** True when the npm global prefix's node_modules dir is writable by the current L309: * user (nvm/Homebrew installs) — meaning `npm install -g` needs no sudo. */ L310: function npm[redacted]() {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L304

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L1

payload/platform/plugins/voice-mirror/mcp/scripts/smoke.mjsView file

28Cross-file remote execution chain: payload/platform/plugins/voice-mirror/mcp/scripts/smoke.mjs spawns dist/index.js; helper contains network access plus dynamic code execution. L28: * L29: * Exit code: 0 on pass, 1 on any assertion failure. L30: */ ... L35: import { readdirSync } from "node:fs"; L36: import { spawn } from "node:child_process"; L37: L38: const __dirname = dirname(fileURLToPath(import.meta.url)); L39: const TOOLS_SRC = join(__dirname, "../src/tools"); ... L234: const { closeDriver } = await import("../dist/lib/neo4j.js"); L235: const savedUri = process.env.NEO4J_URI; L236: try { ... L786: // lowercased once here so the Cypher compares term-to-body directly, and

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

payload/platform/plugins/voice-mirror/mcp/scripts/smoke.mjsView on unpkg · L28

payload/platform/plugins/prompt-optimiser/skills/prompt-optimiser/__tests__/restatement-ladder.test.shView file

•path = payload/platform/plugins/prompt-optimiser/skills/prompt-optimiser/__tests__/restatement-ladder.test.sh kind = payload_in_excluded_dir sizeBytes = 936 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

payload/platform/plugins/prompt-optimiser/skills/prompt-optimiser/__tests__/restatement-ladder.test.shView on unpkg

•path = payload/platform/plugins/prompt-optimiser/skills/prompt-optimiser/__tests__/restatement-ladder.test.sh kind = build_helper sizeBytes = 936 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

payload/platform/plugins/prompt-optimiser/skills/prompt-optimiser/__tests__/restatement-ladder.test.shView on unpkg

payload/server/public/brand/Archive.zipView file

•path = [redacted].zip kind = high_entropy_blob sizeBytes = 1079606 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

payload/server/public/brand/Archive.zipView on unpkg

•path = [redacted].zip kind = compressed_blob sizeBytes = 1079606 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

payload/server/public/brand/Archive.zipView on unpkg

•path = [redacted].zip kind = nested_archive_needs_inspection sizeBytes = 1079606 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

payload/server/public/brand/Archive.zipView on unpkg

payload/platform/plugins/cloudflare/mcp/dist/lib/cloudflared.jsView file

•matchType = normalized_sha256 matchedPackage = @rubytech/create-sitedesk-code@0.1.459 matchedPath = [redacted].js matchedIdentity = npm:[redacted]:0.1.459 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High