registry  /  @tencent-ai/codebuddy-code  /  2.117.1

@tencent-ai/codebuddy-code@2.117.1

Use CodeBuddy, Tencent's AI assistant, right from your terminal. CodeBuddy can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
Manifest
NoLicense
scanned 10 file(s), 1.14 MB of source, external domains: api.qrserver.com, bit.ly, github.com, reactjs.org, www.w3.org
Oversized source lightweight scan
dist/codebuddy-headless.js15.6 MB file, sampled 256 KB
EnvironmentVarsObfuscatedMinified
dist/codebuddy.js21.0 MB file, sampled 256 KB
EnvironmentVarsObfuscatedMinified
dist/web-ui/assets/index-C4Mks62X.js2.13 MB file, sampled 256 KB
NetworkObfuscatedHighEntropyStringsUrlStringsapi.qrserver.comwww.w3.org

Source & flagged code

5 flagged · loading source
vendor/genie-trash/linux-arm64View file
•path = vendor/genie-trash/linux-arm64 kind = native_binary sizeBytes = 1052784 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

vendor/genie-trash/linux-arm64View on unpkg
dist/wasm/tree-sitter.wasmView file
•path = dist/wasm/tree-sitter.wasm kind = wasm_module sizeBytes = 190779 magicHex = [redacted]
Medium
Ships Wasm Module

Package ships WebAssembly modules.

dist/wasm/tree-sitter.wasmView on unpkg
vendor/shim/sitecustomize.pyView file
•path = vendor/shim/sitecustomize.py kind = build_helper sizeBytes = 25078 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/shim/sitecustomize.pyView on unpkg
dist/web-ui/assets/mfixx-CpAhKOZz.woff2View file
•path = dist/web-ui/assets/mfixx-CpAhKOZz.woff2 kind = high_entropy_blob sizeBytes = 24412 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/web-ui/assets/mfixx-CpAhKOZz.woff2View on unpkg
dist/web-ui/assets/index-C4Mks62X.jsView file
•path = dist/web-ui/assets/index-C4Mks62X.js kind = oversized_source_file sizeBytes = 2230858 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/web-ui/assets/index-C4Mks62X.jsView on unpkg

Findings

3 High6 Medium4 Low
HighObfuscated
HighShips High Entropy Blobdist/web-ui/assets/mfixx-CpAhKOZz.woff2
HighOversized Source Filedist/web-ui/assets/index-C4Mks62X.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binaryvendor/genie-trash/linux-arm64
MediumShips Wasm Moduledist/wasm/tree-sitter.wasm
MediumShips Build Helpervendor/shim/sitecustomize.py
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License