@vanexalabs-ai/vanexa-agent@1.3.77: Suspicious npm security | LPM Firewall

Loading npm security reports…

@vanexalabs-ai/vanexa-agent@1.3.77: Suspicious npm security | LPM Firewall

Source & flagged code

6 flagged · loading source

bin/vanexa-agent.jsView file

13L14: const require = createRequire(import.meta.url); L15: const __filename = fileURLToPath(import.meta.url);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/vanexa-agent.jsView on unpkg · L13

89function loadAgentBrain() { try { // Execute the protected proprietary brain require(bytecodePath);

Medium

Ai Review Evidence

Launcher executes opaque 3.8 MB V8 bytecode.

bin/vanexa-agent.jsView on unpkg · L89

dist/bundle.jscView file

•path = dist/bundle.jsc kind = node_bytecode sizeBytes = 3838928 magicHex = [redacted]

High

Ships Node Bytecode

Package ships compiled Node/V8 bytecode artifacts.

dist/bundle.jscView on unpkg

package.jsonView file

10"files": [ "bin/", "dist/bundle.jsc", "dist/.v8-version", "socket.json", "socket.yml", "README.md", "LICENSE"

Medium

Ai Review Evidence

Launcher executes opaque 3.8 MB V8 bytecode.

package.jsonView on unpkg · L10

README.mdView file

136- **4-Layer Sandbox**: Tool availability checks → Path scoping → Command risk classification → SSRF protection - **3 Autonomy Modes**: Passive (ask everything) → Supervised (auto-safe, ask-dangerous) → Autonomous (full auto) - **Self-Preservation**: The agent cannot read, modify, or delete its own source code - **Workspace Scoping**: The phone app controls exactly which directories the agent can access - **Proprietary Source**: Distributed as compiled V8 Bytecode (`.jsc`), not readable JavaScript

Medium

Ai Review Evidence

Opaque payload prevents source-level verification of safeguards or data handling.

README.mdView on unpkg · L136

82| Domain | Capabilities | |--------|-------------| | **Terminal** | Execute commands, run background processes, maintain persistent shell sessions (stateful REPL) | | **File System** | Read, write, edit (surgical search/replace), multi-edit, search (regex grep), find (glob), list, move, delete | | **Code Intelligence** | Syntax verification, symbol listing, AST search, Ripgrep-powered code search, semantic codebase search | | **Git** | Full git operations with risk-mapped approval gates | | **Web** | Fetch URLs (with SSRF protection), DuckDuckGo + Google web search | | **Desktop Automation** |

Medium

Ai Review Evidence

Bytecode strings expose relay, shell, file, and dynamic-tool capabilities.

README.mdView on unpkg · L82

Source & flagged code

6 flagged

bin/vanexa-agent.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2/**

3 * VANEXA AGENT - Sovereign Digital Brain

4 * V8 Bytecode Launcher with Runtime Version Guard

5 */

6import path from 'path';

7import fs from 'fs';

8import { fileURLToPath } from 'url';

9import v8 from 'v8';

10import bytenode from 'bytenode';

11import { createRequire } from 'module';

12import { UI } from '../src/utils/cli_ui.js';

13

14const require = createRequire(import.meta.url);

15const __filename = fileURLToPath(import.meta.url);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/vanexa-agent.jsView on unpkg · L13

16const __dirname = path.dirname(__filename);

17

18// ── V8 Version Guard ──

19// V8 bytecode is NOT portable across V8 engine versions.

20// The .jsc file MUST be loaded by the same V8 major version that compiled it.

21const REQUIRED_NODE_MAJOR = 24;

22const userNodeMajor = parseInt(process.versions.node.split('.')[0], 10);

23

24if (userNodeMajor < REQUIRED_NODE_MAJOR) {

25 UI.printFatalBox('FATAL: Node.js Version Mismatch', [

26 `Your Node.js: v${process.versions.node} (V8 ${process.versions.v8})`,

27 `Required: v${REQUIRED_NODE_MAJOR}.x LTS or higher`,

28 ``,

29 `Vanexa Agent uses V8 bytecode compiled for Node.js v24 LTS.`,

30 `The bytecode is incompatible with older Node.js versions.`,

31 ``,

32 `➤ Fix: Install Node.js v24 LTS from https://nodejs.org`,

33 ``,

Lines 69-109javascript

69 } catch (e) {

70 console.error('⚠ Auto-compile warning:', e.message);

71 return false;

72 }

73 }

74 return false;

75}

76

dist/bundle.jscView file

•path = dist/bundle.jsc kind = node_bytecode sizeBytes = 3838928 magicHex = [redacted]

High

Ships Node Bytecode

Package ships compiled Node/V8 bytecode artifacts.

dist/bundle.jscView on unpkg

package.jsonView file

Lines 1-30json

1{

2 "name": "@vanexalabs-ai/vanexa-agent",

3 "version": "1.3.77",

4 "description": "Sovereign AI Agent Desktop Daemon",

5 "main": "bin/vanexa-agent.js",

6

README.mdView file

Lines 62-102markdown

62│ • Live Monitoring │ │ • 64+ Tools (Hands) │

63│ • Config Sync │ ┌──────────────┐ │ • 4-Layer Sandbox │

64│ • Kill Switch │ │ ☁️ Signaling │ │ • Cortex Memory │

65│ • Approval UI │ │ (5 sec only) │ │ • 10 LLM Providers │

66└──────────────────────┘ └──────────────┘ └───────────────────────┘

67```

68

691. **You type** a task on your phone (e.g., "Build me a portfolio website")

702. **A 5-second handshake** establishes a direct encrypted tunnel between your phone and computer — then the signaling server disconnects. **No middleman.**

71

Lines 116-156markdown

116| Provider | Available Models | Vision |

117|----------|-----------------|:------:|

118| DeepSeek | `deepseek-v4-flash`, `deepseek-v4-pro` | ❌ |

119| OpenAI | `gpt-5.6-sol`, `gpt-5.6-terra`, `gpt-5.6-luna`, `gpt-5.4-mini` | ✅ |

120| Anthropic | `claude-fable-5`, `claude-opus-4.8`, `claude-sonnet-5`, `claude-haiku-4.5` | ✅ |

121| Gemini | `gemini-3.5-flash`, `gemini-3.1-pro`, `gemini-3.1-flash-lite` | ✅ |

122| Qwen | `qwen3.7-max`, `qwen3.7-plus`, `qwen3.6-flash` | ❌ |

123| Moonshot (Kimi) | `kimi-k3`, `kimi-k2.7-code`, `kimi-k2.6` | ❌ |

124| xAI (Grok) | `grok-4.5`, `grok-latest` | ❌ |

125| Alibaba (DashScope) | `qwen3.7-max`, `qwen3.7-plus`, `deepseek-v4-flash`, `kimi-k2.7-code`, and more | ❌ |

126| Ollama | Any locally installed model | ❌ |

127

128> Models listed are the **code defaults**. The companion app lets you select from a curated list of available models per provider, which may include newer models not listed here.

129

130Configure your key in the Vanexa phone app under **Agent → Settings → API Configuration**.

131

132---

133

134## 🛡️ Security

135

136- **4-Layer Sandbox**: Tool availability checks → Path scoping → Command risk classification → SSRF protection

137- **3 Autonomy Modes**: Passive (ask everything) → Supervised (auto-safe, ask-dangerous) → Autonomous (full auto)

138- **Self-Preservation**: The agent cannot read, modify, or delete its own source code

139- **Workspace Scoping**: The phone app controls exactly which directories the agent can access

140- **Proprietary Source**: Distributed as compiled V8 Bytecode (`.jsc`), not readable JavaScript

Medium

Ai Review Evidence

Opaque payload prevents source-level verification of safeguards or data handling.

README.mdView on unpkg · L136

141

142---

143

144## 🖥️ CLI Commands

145

146```bash

147vanexa-agent pair # Pair with your phone

148vanexa-agent start # Start the daemon (listens for phone commands)

149vanexa-agent stop # Stop the daemon

150vanexa-agent restart # Restart the daemon

151vanexa-agent status # Check if daemon is running

152vanexa-agent config # Configure API provider interactively

153vanexa-agent chat # Start interactive chat mode (no phone needed)

154vanexa-agent run <task> # Run a single task from CLI

155vanexa-agent exec <cmd> # Quick execute a terminal command

156vanexa-agent update # Update to the latest version