registry / @rubytech/create-maxy-code / 0.1.625

@rubytech/create-maxy-code@0.1.625

⚠ Under review

Install Maxy — AI for Productive People

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 42 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

NoLicense

scanned 1,055 file(s), 16.6 MB of source, external domains: 0.0.0.0, 127.0.0.1, account.microsoft.com, accounts.google.com, acme.example.com, api.cloudflare.com, api.replicate.com, api.telegram.org, appcenter.intuit.com, astral.sh, brew.sh, chevrotain.io, claude.ai, core.telegram.org, deb.nodesource.com, debian.neo4j.com, dl.google.com, docs.getmaxy.com, docs.realagent.network, en.wikipedia.org, fonts.googleapis.com, fonts.gstatic.com, getmaxy.com, github.com, graph.microsoft.com, langium.org, llmstxt.org, login.microsoftonline.com, maxy.bot, maxy.institute, ns.adobe.com, oauth.platform.intuit.com, oauth2.googleapis.com, ollama.ai, one.dash.cloudflare.com, platform.claude.com, player.vimeo.com, quickbooks.api.intuit.com, raw.githubusercontent.com, react.dev, registry.npmjs.org, sandbox-quickbooks.api.intuit.com, schema.org, tile.openstreetmap.org, www.anthropic.com, www.apple.com, www.googleapis.com, www.linkedin.com, www.openstreetmap.org, www.w3.org

Source & flagged code

31 flagged

payload/platform/scripts/smoke-boot-services.shView file

Lines 329-369shell

329 local required="${SMOKE_CYPHER_SCHEMA:-optional}"

330

331 skip_msg() { # $1=reason

332 if [ "$required" = "required" ]; then

333 echo "[smoke-boot] cypher-schema=fail err=$1 (SMOKE_CYPHER_SCHEMA=required)" >&2

334 return 1

335 fi

336 echo "[smoke-boot] cypher-schema=skip reason=$1 (export SMOKE_CYPHER_SCHEMA=required to fail hard; provision a disposable Neo4j to run the check)"

337 return 0

338 }

339

340 if ! command -v cypher-shell >/dev/null 2>&1; then

341 skip_msg cypher-shell-not-on-path; return $?

342 fi

343

344 if [ -z "${NEO4J_URI:-}" ]; then

345 skip_msg neo4j-uri-unset; return $?

346 fi

347

348 local neo4j_user="${NEO4J_USER:-neo4j}"

349 local neo4j_password="${NEO4J_PASSWORD:-}"

Medium

Secret Pattern

Package contains a possible secret pattern.

payload/platform/scripts/smoke-boot-services.shView on unpkg · L349

350 if [ -z "$neo4j_password" ]; then

351 # Fall back to the same password-file convention seed-neo4j.sh uses.

352 local pw_file="$REPO_ROOT/platform/config/.neo4j-password"

353 if [ -f "$pw_file" ]; then

354 neo4j_password="$(cat "$pw_file")"

355 fi

356 fi

357 if [ -z "$neo4j_password" ]; then

358 skip_msg neo4j-password-unset; return $?

359 fi

360

361 # Live probe: if the credentials don't authenticate, the check would fail

362 # for reasons unrelated to schema syntax (rotated password, etc.). Skip

363 # rather than fail so the maintainer's own install's Neo4j — whose password

364 # they own — can't block publish.

365 if ! cypher-shell -u "$neo4j_user" -p "$neo4j_password" -a "$NEO4J_URI" \

366 --non-interactive "RETURN 1" >/dev/null 2>&1; then

367 skip_msg neo4j-auth-failed; return $?

368 fi

369

dist/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { execFileSync, spawn, spawnSync } from "node:child_process";

3import { existsSync, mkdirSync, writeFileSync, cpSync, readFileSync, rmSync, readdirSync, appendFileSync, openSync, closeSync, chmodSync, statSync, realpathSync, accessSync, constants as fsConstants } from "node:fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

4import

payload/platform/plugins/ledger/lib/mcp-spawn-tee/index.jsView file

Lines 1-28javascript

1#!/usr/bin/env node

2"use strict";

3/**

4 * MCP spawn-tee — in-process stderr capture + lifecycle observability.

5 *

6 * Claude Code spawns each MCP server itself; the platform never holds a

7 * ChildProcess handle. This shim sits between Claude Code and the real MCP

8 * server: Claude Code runs `node <this> <real-entry>`, and the shim runs the

9 * real entry IN ITS OWN PROCESS via dynamic import() — one node runtime, not

payload/platform/plugins/admin/skills/flow-page/build.mjsView file

Lines 79-119javascript

80const argv = process.argv.slice(2);

81const arg = (flag, fallback = null)

payload/server/server.jsView file

358try { L359: out.push(JSON.parse(line)); L360: } catch { ... L469: function telegramStoreRoot2(platformRoot5) { L470: const brandDir = process.env.MAXY_DIR_OVERRIDE ?? (0, node_path_1.resolve)((0, node_os_1.homedir)(), configDirName2(platformRoot5)); L471: return (0, node_path_1.join)(brandDir, "data", "telegram-messages"); ... L566: var node_path_1 = __require("path"); L567: var TELEGRAM_API2 = "https://api.telegram.org"; L568: function refusalReason(body, status) { ... L742: }); L743: process.stderr.write(`[trash:marked] accountId=${accountId} elementId=${elementId} labels=${baseLabels.join(",")} by=${by} reason=${reason ?? "null"} L744: `);

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

payload/server/server.jsView on unpkg · L358

5370// app/lib/vnc.ts L5371: import { spawnSync, execFileSync } from "child_process"; L5372: import { createConnection } from "net"; L5373: import { mkdirSync as mkdirSync2, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs"; L5374: import { resolve as resolve5 } from "path"; L5375: var PLATFORM_ROOT2 = process.env.MAXY_PLATFORM_ROOT ?? resolve5(process.cwd(), ".."); L5376: var VNC_SCRIPT = resolve5(PLATFORM_ROOT2, "scripts/vnc.sh");

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

payload/server/server.jsView on unpkg · L5370

payload/platform/plugins/admin/mcp/dist/index.jsView file

6Cross-file remote execution chain: [redacted].js spawns dist/index.js; helper contains network access plus dynamic code execution. L6: import { resolve, join } from "node:path"; L7: import { execFile, execFileSync } from "node:child_process"; L8: import { appendFileSync, cpSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, statSync, writeFileSync } from "node:fs"; ... L19: import { createHash, randomInt, randomUUID } from "node:crypto"; L20: import { createConnection } from "node:net"; L21: import { homedir, hostname as osHostname } from "node:os"; ... L61: }); L62: const PLATFORM_ROOT = process.env.PLATFORM_ROOT ?? resolve(import.meta.dirname, "../../../.."); L63: // Plugin-system boot tolerance — see Task 202. ... L67: const ACCOUNT_ID = process.env.ACCOUNT_ID ?? null; L

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

payload/platform/plugins/admin/mcp/dist/index.jsView on unpkg · L6

payload/platform/plugins/memory/bin/conversation-archive-ingest.shView file

•path = [redacted]-archive-ingest.sh kind = build_helper sizeBytes = 4369 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

payload/platform/plugins/memory/bin/conversation-archive-ingest.shView on unpkg

payload/server/public/assets/graph-labels-BTFUSc63.js.gzView file

•path = [redacted]-labels-BTFUSc63.js.gz kind = high_entropy_blob sizeBytes = 9968 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

payload/server/public/assets/graph-labels-BTFUSc63.js.gzView on unpkg

•path = [redacted]-labels-BTFUSc63.js.gz kind = compressed_blob sizeBytes = 9968 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

payload/server/public/assets/graph-labels-BTFUSc63.js.gzView on unpkg

payload/platform/lib/account-enumeration/dist/index.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 42

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

payload/platform/lib/account-enumeration/dist/index.js#virtual:normalized:round1View on unpkg

dist/uninstall.jsView file

•matchType = normalized_sha256 matchedPackage = @rubytech/create-maxy-code@0.1.632 matchedPath = dist/uninstall.js matchedIdentity = npm:[redacted]:0.1.632 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High