registry / @venos-inc/venos / 0.1.15

@venos-inc/venos@0.1.15

Self-service CLI for venos — wire your AI client to the venos security gateway in one command.

AI Security Review

scanned 8d ago · by lpm-firewall-ai

No install-time attack is confirmed, but the CLI has high-risk agent-control and persistence behavior after explicit init. It rewrites multiple AI client configs and installs a recurring heartbeat that uploads inventory to the configured Venos gateway.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `venos init` or later `venos heartbeat`/scheduled heartbeat.

Impact

Routes agent tool calls through Venos controls, persists a heartbeat, uploads host/agent/MCP/skill/document inventory, and may auto-update from orchestrator policy.

Mechanism

user-invoked AI client wiring plus persistent telemetry service

Attack narrative

The package is not activated at npm install. When a user runs `venos init`, it stores Venos config, rewrites several AI-agent control surfaces to call Venos hooks/MCP servers, adds rule-file directives, and installs an OS-level heartbeat service. That service reports health and inventory to the configured gateway and includes an orchestrator-controlled auto-update path. This is powerful and potentially risky, but source inspection shows it is package-aligned and user-invoked rather than a hidden lifecycle hijack.

Rationale

Because the broad agent-control writes and persistence are explicit CLI behavior with required init flags and no npm install-time execution, this does not meet the block threshold for malicious lifecycle hijack. The persistent telemetry and orchestrator-driven update capability warrant a warning.

Evidence

package.jsonREADME.mddist/index.jsetc/mcp-server/client.jsetc/mcp-server/tools.jsetc/session-waste/session-scanner.js~/.venos/config.json~/.venos/service.json~/.venos/heartbeat.last~/.venos/update-check.json~/.claude/settings.json~/.codex/config.toml~/.codex/hooks.json~/.cursor/mcp.json~/.codeium/windsurf/mcp_config.json~/.aider.conf.yml~/Library/LaunchAgents/ai.venos.agent.plist~/.config/systemd/user/venos-heartbeat.service~/.config/systemd/user/venos-heartbeat.timer

Network endpoints8

127.0.0.1:4000/v1localhost:8788/v1/inventory/heartbeat/v1/inventory/mcp/v1/inventory/skills/v1/inventory/agents/v1/inventory/documents/api/cli/policy

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

dist/index.js wires Claude/Codex/Cursor/Windsurf/Cline/Zed/JetBrains/Aider configs and hooks on `venos init`.
dist/index.js installs persistent heartbeat via LaunchAgent, systemd user timer, or Windows scheduled task.
Heartbeat uploads host/inventory data and can run scan-mcp, scan-skills, scan-agents, scan-documents to configured orchestrator.
dist/index.js has server-policy auto-update path that can run npm install -g @venos-inc/venos@version.
CLI writes policy directives into .cursorrules/.windsurfrules/.clinerules and MCP/hook configs.

Evidence against

package.json has no install/postinstall/preinstall lifecycle hook; only prepublishOnly.
Activation requires explicit `venos init --orchestrator ... --org ...` with required flags.
README describes the product as wiring AI clients to a Venos security gateway and preserving existing content.
MCP server and hooks appear package-aligned for policy classification rather than credential theft.
No hardcoded attacker endpoint; network target is user-supplied orchestrator or localhost default.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 18 file(s), 207 KB of source, external domains: 127.0.0.1, aquasecurity.github.io, www.apple.com

Source & flagged code

5 flagged

dist/index.jsView file

Lines 1-65javascript

1#!/usr/bin/env node

2import{readFileSync as tc}from"node:fs";import{homedir as U}from"node:os";import{chmodSync as rr,existsSync as sr,mkdirSync as Ci,readFileSync as Oi,rmSync as xi,writeFileSync as bi}from"node:fs";import{dirname as Pi,join as Ei}from"node:path";import{randomBytes as Ri}from"node:crypto";import{existsSync as Jr,readFileSync as Kr}from"node:fs";import{join as Br}from"node:path";import{copyFileSync as Fr,existsSync as it,mkdirSync as Wr,renameSync as Lr,writeFileSync as Dr}from"node:fs";import{dirname as Hr}from"node:path";var at=".venos-backup";function g(e,t){Wr(Hr(e),{recursive:!0}),it(e)&&!it( ...

3`}var H="http://127.0.0.1:4000/v1";var Gr="venos",Yr="venos hook",zr="venos usage-sync",Xr="venos usage-sync --throttle";function lt(e,t){return(e??[]).some(n=>n.hooks.some(r=>typeof r.command=="string"&&t(r.command)))}function Oe(e){return lt(e,t=>t.includes(Yr))}function ut(e){return lt(e,t=>t.includes(zr))}function ct(e,t){let n=e??[];return Oe(n)?n:[...n,{matcher:"*",hooks:[{type:"command",command:t}]}]}function Zr(e,t){let n=e??[];return ut(n)?n:[...n,{matcher:"*",hooks:[{type:"command",command:t}]}]}function Ce(e){return(e??[]).map(t=>({...t,hooks:t.hooks.filter(n=>typeof n.command!="str ...

4`,i===t&&(o+=" ".repeat(s+n+2),o+=`^

5`))}return o}var f=class extends Error{line;column;codeblock;constructor(t,n){let[r,o]=to(n.toml,n.ptr),s=no(n.toml,r,o);super(`Invalid TOML document: ${t}

7${s}`,n),this.line=r,this.column=o,this.codeblock=s}};function ro(e,t){let n=0;for(;e[t-++n]==="\\";);return--n&&n%2}function re(e,t

8`,t);return e[r-1]==="\r"&&r--,r<=n?r:-1}function $(e,t){for(let n=t;n<e.length;n++){let r=e[n];if(r===`

9`)return n;if(r==="\r"&&e[n+1]===`

10`)return n+1;if(r<" "&&r!==" "||r==="\x7F")throw new f("control characters are not allowed in comments",{toml:e,ptr:t})}return e.length}function O(e,t,n,r){let o;for(;;){for

11`||o==="\r"&&e[t+1]===`

12`);)t++;if(r||o!=="#")break;t=$(e,t)}return t}function gt(e,t,n,r,o=!1){if(!r)return t=re(e,t),t<0?e.length:t;for(

13`||i==="\r"&&e[s+1]===`

14`))return s}}throw new f("cannot find end of structure",{toml:e,ptr:t})}function oe(e,t){let n=e[t],r=n===e[t+1]&&e[t+1]===e[t+2]?e.slice(t,t+3):n;t+=

15`,f:"\f",r:"\r",e:"\x1B",'"':'"',"\\":"\\"};function se(e,t=0,n=e.length){let r=e[t]==="'",o=e[t++]===e[t]&&e[t]===e[t+1];o&&(n-=2,e[t+=2]==="\r"&&t++,e[t]===`

16`&&t++);let s=0,i,a="",c=t;for(;t<n-1;){let l=e[t++];if(l===`

17`||l==="\r"&&e[t]===`

18`){if(!o)throw new f("newlines are not allowed in strings",{toml:e,ptr:t-1})}else if(l<" "&&l!==" "||l==="\x7F")throw new f("control characters are not allowed in strings",{toml:e,ptr:t-1});if(i){if(i=!1,l==="x"||l==="u"||l==="U"){let u=e.slice(t,t+=l==="x"?2:l==="u"?4:8);if(!co.test(u))throw new f("invalid unicode escape",{toml:e,ptr:s});try{a+=String.fromCodePoint(parseInt(u,16))}catch{throw new f("invalid unicode escape",{toml:e,ptr:s})}}else if(o&&(l===`

19`||l===" "||l===" "||l==="\r")){if(t=O(e,t-1,!0),e[t]!==`

20`&&e[t]!=="\r")throw new f("invalid escape: only line-ending whitespace may be escaped",{toml:e,ptr:s});t=O(e,t)}else if(l in ht)a+=ht[l];else throw new f("unrecognized escape sequence",{toml:e,ptr:s});c=t}else!r&&l==="\\"&&(s=t-1,i=!0,a+=e.slice(c,s))}return a+e.slice(c,n-1)}function yt(e,t,n,r){if(e==="true")return!0;if(e==="false")return!1;if(e==="-inf")return-1/0;if(e==="inf"||e==="+inf")return 1/0;if(e==="nan"||e==="+nan"||e==="-nan")return NaN;if(e==="-0")return r?0n:0;let o=so.test(e);if(o||io.test(e)){if(ao.test(e))throw new f("leading zeroes are not allowed",{toml:t,ptr:n});e=e.replac ...

21`&&e[i]!=="\r")throw new f("unexpected character encountered",{toml:e,ptr:i});i+=+(e[i]===",")}return[c,i]}i=gt(e,t,",",n);let a=lo(e,t,i-+(e[i-1]===","));if(!a[0])throw new f("incomplete key-value declaration: no value specified",{toml:e,ptr:t});return n&&a[

22`&&i!=="\r"){let a,c=o,l=!1,[u,d]=ie(e,t-1);for(let m=0;m<u.length;m++){if(m&&(c=l?c[a]:c[a]={}),a=u[m],(l=Object.hasOwn(c,a))&&(typeof c[a]!="object"||s.has(c[a])))throw new f("trying to redefine an already defined value",{toml:e,ptr:t});!l&&a==="__proto__"&&Object.defineProperty(c,a,{enumerable:!0,configurable:!0,writable:!0})}if(l)throw new f("trying to redefine an already defined value",{toml:e,ptr:t});let[p,y]=G(e,d,"}",n-1,r);s.add(p),c[a]=p,t=y}}if(!i)throw new f("unfinished table encountered",{toml:e,ptr:t});return[o,t]}function St(e,t,n,r){let o=[],s;for(t++;(s=e[t++])!=="]"&&s;){if(s ...

25`}[[${t}]]

26`,o+=Ie(0,e[s],t,n,r);return o}function Ie(e,t,n,r,o){if(r===0)throw new Error("Could not stringify the object: maximum object depth exceeded");let s="",i="",a=Object.keys(t);for(let

27`)+go(t[l],n?`${n}.${d}`:d,r-1,o);else if(u==="object"){let p=n?`${n}.${d}`:d;i+=(i&&`

28`)+Ie(p,t[l],p,r-1,o)}else s+=d,s+=" = ",s+=_e(t[l],u,r,o),s+=`

29`}}return e&&(s||!i)&&(s=s?`[${e}]

30${s}`:`[${e}]`),s&&i?`${s}

31${i}`:s||i}function Te(e,{maxDepth:t=1e3,numbersAsFloat:n=!1}={}){if(Y(e)!=="object")throw new TypeError("stringify can only be called with an object");let r=Ie(0,e,"",t,n);

32`?r+`

33`:r}function Ot(e){let t=e.mcp_servers?.venos;if(!t||t.command!=="node")return!1;let n=t.args?.[0];return!n||n.includes("/A2A/")||t.env?.VENOS_SOURCE!=="codex"||t.env?.VENOS_URL||t.env?.VENOS_ORG_ID

34`)}};import{existsSync as bt,readFileSync as yo}from"node:fs";import{join as Pt}from"node:path";var vo="venos",Et="venos hook";function So(e){let t=e.trim();return t.includes(Et)&&/(?:^|\s)--source(?:=|\s+)codex(?:\s|$)/.test(t)?!0:/\bVENOS_(?:HOOK_)?SOURCE=codex\b/.test(t)&&(t.includes(Et)||t.includes("venos-hook.sh"))}function ae(e){return(e??[]).some(t=>t.hooks.some(n=>typeof n.command=="string"&&So(n.command)))}function Ne(e,t){let n=e??[];return ae(n)?n:[...n,{matcher:"*",hooks:[{type:"command",command:t}]}]}function Ue(e){return(e??[]).map(t=>({...t,hooks:t.hooks.filter(n=>typeof n.comma ...

35`).some(r=>r.trim()===Ht()),raw:t}},isWired(e){return e.wired},inject(e){return e.wired?e:{...e,wired:!0}},remove(e){return{...e,wired:!1}},write(e,t){let

36`);n.length>0&&n[n.length-1]===""&&n.pop();let r=n.filter(s=>!To(s)),o=t.wired?[...r,Ht()]:r;if(o.length===0){Dt(e)&&Eo(e,{force:!0});

37`)+`

38`)}};import{accessSync as Ao,constants as No,existsSync as Bt,readFileSync as Uo}from"node:fs";import{delimiter as $o}from"node:path";import{join as Gt}from"node:path";var Mo="obsidian-cli",jo="obsidian-cli.json";function Vo(e){try{return Ao(e,No.X_OK

39 VENOS_MCP_SERVER_PATH=${e??"(unset)"}

40 bundled: ${t}

41 sibling: ${n}

42If you are developing locally, run: pnpm --filter @venos/mcp-server build`)}import{existsSync as Do}from"node:fs";function Ho(e,t,n){let r=e.configPath(t);if(!e.isInstalled(t))return{client:e.name,transport:e.transport,status:"skipped-not-installed"};try{let o=e.load(r);if(e.isWired(o,n))return{client:e.name,transport:e.transport,status:"already-wired",path:r};let s=e.inject(o,n);return e.write(r,s),{client:e.name,transport:e.transport,status:"wired",path:r}}catch(o){return{client:e.name,transport:e.transport,status:"error",path:r,error:o instanceof Error?o.message:String(o)}}}function Zt(e,t, ...

44${Le}

45`:`${Le}

46`;return g(n,o),{status:"wired",path:n}}import{execFileSync as ms}from"node:child_process";import{existsSync as sn,mkdirSync as ns,rmSync as rs,writeFileSync as os}from"node:fs";import{dirname as ss,join as is}from"node:path";var De="ai.venos.agent";import{existsSync as on,mkdirSync as Xo,rmSync as Zo,writeFileSync as qo}from"node:fs";import{dirname as Qo,join as es}from"node:path";function He(e){return es(e,".venos","service.json")}function j(e,t){let n=He(e);Xo(Qo(n),{recursive:!0}),qo(n,JSON.stringify(t,null,2)+`

47`,"utf8")}function V(e){let t=He(e);return on(t)?(Zo(t,{force:!0}),!0):!1}function F(e){return on(He(e))}function an(e){return is(e,"Library","LaunchAgents",`${De}.plist`)}function as(e,t){return`<?xml version="1.0" encoding="UTF-8"?>

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L2

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L45

48<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

49<plist version="1.0">

50<dict>

51 <key>Label</key>

52 <string>${De}</string>

53 <key>ProgramArguments</key>

54 <array>

55 <string>${e}</string>

56 <string>${t}</string>

57 <string>heartbeat</string>

58 </array>

59 <key>RunAtLoad</key>

60 <true/>

61 <key>StartInterval</key>

62 <integer>${3600}</integer>

63 <key>KeepAlive</key>

64 <dict>

65 <key>SuccessfulExit</key>

Long lines were clipped for display.

Lines 73-113javascript

73 <string>/dev/null</string>

74</dict>

75</plist>

76`}var cn={platform:"darwin",install(e){let t=an(e.home);try{let n=sn(t);ns(ss(t),{recursive:!0}),os(t,as(e.nodePath,e.cliEntry),"utf8");try{e.run("launchctl",["unload",t])}catch{}return e.run("launchctl",["load","-w",t]),j(e.home,{kind:"launchd",path:t}),{platform:"darwin",status:n?"already-installed":"installed",path:t}}catch(n){return{platform:"darwin",status:"error",path:t,error:cs(n)}}},remove(e,t){let n=an(e),r=sn(n);try{t("launchctl",["unload",n])}catch{}r&&rs(n,{force:!0});let o=V(e);return{platform:"darwin",status:r||o?"removed":"already-removed",path:n}}};function cs(e){return e insta ...

77Description=venos endpoint heartbeat

79[Service]

80Type=oneshot

81ExecStart=${e} ${t

•matchType = previous_version_dangerous_delta matchedPackage = @venos-inc/venos@0.1.13 matchedIdentity = npm:QHZlbm9zLWluYy92ZW5vcw:0.1.13 similarity = 0.444 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist/index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

45`:`${Le} L46: `;return g(n,o),{status:"wired",path:n}}import{execFileSync as ms}from"node:child_process";import{existsSync as sn,mkdirSync as ns,rmSync as rs,writeFileSync as os}from"node:fs";im... L47: `,"utf8")}function V(e){let t=He(e);return on(t)?(Zo(t,{force:!0}),!0):!1}function F(e){return on(He(e))}function an(e){return is(e,"Library","LaunchAgents",`${De}.plist`)}function...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L45

93WantedBy=timers.target L94: `}var fn={platform:"linux",install(e){let t=pn(e.home),n=X(t,ue);try{let r=le(n);return ls(t,{recursive:!0}),un(X(t,dn),us(e.nodePath,e.cliEntry),"utf8"),un(n,ds(),"utf8"),e.run("s... L95: `,"utf8")}catch{}}function ti(e){let t;try{t=JSON.parse(e)}catch{return e}if(typeof t!="object"||t===null||Array.isArray(t))return e;let n=t,r=n.transcript_path;if(typeof r!="strin... L96: `,"utf8"),n}catch{return""}}function li(e,t,n){if(t===""&&n==="")return e;let r;try{r=JSON.parse(e)}catch{return e}if(typeof r!="object"||r===null||Array.isArray(r))return e;let o=... L97: `),process.exit(1))}function Dn(e,t,n,r){let o=mi(e,t,n,r);o.stdout!==""&&process.stdout.write(o.stdout),o.stderr!==""&&process.stderr.write(o.stderr),o.exitCode!==void 0&&process....

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L93

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L93

2import{readFileSync as tc}from"node:fs";import{homedir as U}from"node:os";import{chmodSync as rr,existsSync as sr,mkdirSync as Ci,readFileSync as Oi,rmSync as xi,writeFileSync as b... L3: `}var H="http://127.0.0.1:4000/v1";var Gr="venos",Yr="venos hook",zr="venos usage-sync",Xr="venos usage-sync --throttle";function lt(e,t){return(e??[]).some(n=>n.hooks.some(r=>type... L4: `,i===t&&(o+=" ".repeat(s+n+2),o+=`^ ... L41: sibling: ${n} L42: If you are developing locally, run: pnpm --filter @venos/mcp-server build`)}import{existsSync as Do}from"node:fs";function Ho(e,t,n){let r=e.configPath(t);if(!e.isInstalled(t))retu... L43: ... L45: `:`${Le} L46: `;return g(n,o),{status:"wired",path:n}}import{execFileSync as ms}from"node:child_process";import{existsSync as sn,mkdirSync as ns,rmSync as rs,writeFileSync as os}from"node:fs";im... L47: `,"utf8")}function V(e){let t=He(e);return on(t)?(Zo(t,{force:!0}),!0):!1}function F(e){return on(He(e))}function an(e){return is(e,"Library","LaunchAgents",`${De}.plist`)}function... ... L75: </plist> L76: `}var cn={platform:"darwin",install(e){let t=an(e.home);try{let n=sn(t);ns(ss(t),{recursive:!0}),os(t,as(e.nodePath,e.cliEntry),"utf8");try{e.run(

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L2

Findings

1 Critical4 High3 Medium6 Low

CriticalPrevious Version Dangerous Deltadist/index.js

HighChild Processdist/index.js

HighShell

HighSame File Env Network Executiondist/index.js

HighCommand Output Exfiltrationdist/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/index.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

5 flagged

dist/index.jsView file

Lines 1-65javascript

1#!/usr/bin/env node

2import{readFileSync as tc}from"node:fs";import{homedir as U}from"node:os";import{chmodSync as rr,existsSync as sr,mkdirSync as Ci,readFileSync as Oi,rmSync as xi,writeFileSync as bi}from"node:fs";import{dirname as Pi,join as Ei}from"node:path";import{randomBytes as Ri}from"node:crypto";import{existsSync as Jr,readFileSync as Kr}from"node:fs";import{join as Br}from"node:path";import{copyFileSync as Fr,existsSync as it,mkdirSync as Wr,renameSync as Lr,writeFileSync as Dr}from"node:fs";import{dirname as Hr}from"node:path";var at=".venos-backup";function g(e,t){Wr(Hr(e),{recursive:!0}),it(e)&&!it( ...

4`,i===t&&(o+=" ".repeat(s+n+2),o+=`^

5`))}return o}var f=class extends Error{line;column;codeblock;constructor(t,n){let[r,o]=to(n.toml,n.ptr),s=no(n.toml,r,o);super(`Invalid TOML document: ${t}

7${s}`,n),this.line=r,this.column=o,this.codeblock=s}};function ro(e,t){let n=0;for(;e[t-++n]==="\\";);return--n&&n%2}function re(e,t

8`,t);return e[r-1]==="\r"&&r--,r<=n?r:-1}function $(e,t){for(let n=t;n<e.length;n++){let r=e[n];if(r===`

9`)return n;if(r==="\r"&&e[n+1]===`

10`)return n+1;if(r<" "&&r!==" "||r==="\x7F")throw new f("control characters are not allowed in comments",{toml:e,ptr:t})}return e.length}function O(e,t,n,r){let o;for(;;){for

11`||o==="\r"&&e[t+1]===`

12`);)t++;if(r||o!=="#")break;t=$(e,t)}return t}function gt(e,t,n,r,o=!1){if(!r)return t=re(e,t),t<0?e.length:t;for(

13`||i==="\r"&&e[s+1]===`

14`))return s}}throw new f("cannot find end of structure",{toml:e,ptr:t})}function oe(e,t){let n=e[t],r=n===e[t+1]&&e[t+1]===e[t+2]?e.slice(t,t+3):n;t+=

15`,f:"\f",r:"\r",e:"\x1B",'"':'"',"\\":"\\"};function se(e,t=0,n=e.length){let r=e[t]==="'",o=e[t++]===e[t]&&e[t]===e[t+1];o&&(n-=2,e[t+=2]==="\r"&&t++,e[t]===`

16`&&t++);let s=0,i,a="",c=t;for(;t<n-1;){let l=e[t++];if(l===`

17`||l==="\r"&&e[t]===`

19`||l===" "||l===" "||l==="\r")){if(t=O(e,t-1,!0),e[t]!==`

25`}[[${t}]]

26`,o+=Ie(0,e[s],t,n,r);return o}function Ie(e,t,n,r,o){if(r===0)throw new Error("Could not stringify the object: maximum object depth exceeded");let s="",i="",a=Object.keys(t);for(let

27`)+go(t[l],n?`${n}.${d}`:d,r-1,o);else if(u==="object"){let p=n?`${n}.${d}`:d;i+=(i&&`

28`)+Ie(p,t[l],p,r-1,o)}else s+=d,s+=" = ",s+=_e(t[l],u,r,o),s+=`

29`}}return e&&(s||!i)&&(s=s?`[${e}]

30${s}`:`[${e}]`),s&&i?`${s}

31${i}`:s||i}function Te(e,{maxDepth:t=1e3,numbersAsFloat:n=!1}={}){if(Y(e)!=="object")throw new TypeError("stringify can only be called with an object");let r=Ie(0,e,"",t,n);

32`?r+`

35`).some(r=>r.trim()===Ht()),raw:t}},isWired(e){return e.wired},inject(e){return e.wired?e:{...e,wired:!0}},remove(e){return{...e,wired:!1}},write(e,t){let

36`);n.length>0&&n[n.length-1]===""&&n.pop();let r=n.filter(s=>!To(s)),o=t.wired?[...r,Ht()]:r;if(o.length===0){Dt(e)&&Eo(e,{force:!0});

37`)+`

39 VENOS_MCP_SERVER_PATH=${e??"(unset)"}

40 bundled: ${t}

41 sibling: ${n}

44${Le}

45`:`${Le}

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L2

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L45

48<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

49<plist version="1.0">

50<dict>

51 <key>Label</key>

52 <string>${De}</string>

53 <key>ProgramArguments</key>

54 <array>

55 <string>${e}</string>

56 <string>${t}</string>

57 <string>heartbeat</string>

58 </array>

59 <key>RunAtLoad</key>

60 <true/>

61 <key>StartInterval</key>

62 <integer>${3600}</integer>

63 <key>KeepAlive</key>

64 <dict>

65 <key>SuccessfulExit</key>

Long lines were clipped for display.

Lines 73-113javascript

73 <string>/dev/null</string>

74</dict>

75</plist>

77Description=venos endpoint heartbeat

79[Service]

80Type=oneshot

81ExecStart=${e} ${t

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg