registry / @sema-agent/server / 1.226.0

@sema-agent/server@1.226.0

Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 199 file(s), 1.80 MB of source, external domains: 127.0.0.1, 169.254.169.254, api.anthropic.com, api.deepseek.com, api.nuget.org, api.search.brave.com, api.tavily.com, gitforwindows.org, proxy.golang.org, pub.dev, pypi.org, registry.npmjs.org, static.rust-lang.org, storage.googleapis.com

Source & flagged code

4 flagged

dist/orchestration/hardened-vm-runner.jsView file

Lines 7-47javascript

7 concurrency: 12,

8 maxHeapMb: 128,

9};

10const PROTO_TAMPER_KEYS = ["__proto__", "constructor", "prototype"];

11function scrubProtoDeep(value) {

12 if (value === null || typeof value !== "object")

13 return;

14 if (Array.isArray(value)) {

15 for (const el of value)

16 scrubProtoDeep(el);

17 return;

18 }

19 for (const key of Object.getOwnPropertyNames(value)) {

20 if (PROTO_TAMPER_KEYS.includes(key)) {

21 Reflect.deleteProperty(value, key);

22 continue;

23 }

24 scrubProtoDeep(value[key]);

25 }

26}

27function sterilizingParse(json) {

28 const parsed = JSON.parse(json);

29 scrubProtoDeep(parsed);

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/orchestration/hardened-vm-runner.jsView on unpkg · L27

30 return parsed;

31}

32function marshalOut(value) {

33 let json;

34 try {

35 json = JSON.stringify(value === undefined ? null : value);

36 }

37 catch (err) {

38 throw new WorkflowScriptError(`value is not JSON-serializable: ${err instanceof Error ? err.message : String(err)}`);

39 }

40 return sterilizingParse(json === undefined ? "null" : json);

41}

42async function runHardened(opts) {

43 const cfg = { ...DEFAULTS, ...opts.limits };

44 const { signal } = opts;

45 if (signal?.aborted)

46 throw new WorkflowScriptError("hardened-vm aborted before start");

47 const sandbox = { __proto__: null };

dist/bench/l8/probes.jsView file

Lines 1-33javascript

1import { shellQuote } from "../../plugins/remote-shell.js";

2export const REAL_ISOLATION_RUNTIME_CLASSES = ["kata-qemu", "kata-fc", "kata"];

3export const PROBE_MATRIX

deploy/sema-up/sema-up.shView file

•path = deploy/sema-up/sema-up.sh kind = build_helper sizeBytes = 50380 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

deploy/sema-up/sema-up.shView on unpkg

dist/plugins/remote-env-host.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @sema-agent/server@1.225.0 matchedIdentity = npm:QHNlbWEtYWdlbnQvc2VydmVy:1.225.0 similarity = 0.983 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/plugins/remote-env-host.jsView on unpkg

Source & flagged code

4 flagged · loading source

dist/orchestration/hardened-vm-runner.js

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code