registry / @viudes/windsurf-api / 0.1.12

@viudes/windsurf-api@0.1.12

⚠ Under review

Windsurf to OpenAI + Anthropic compatible API proxy. Turns Windsurf's 100+ AI models (Claude, GPT, Gemini, DeepSeek, Grok, Qwen, Kimi, GLM, SWE) into dual-protocol API endpoints. Zero npm deps.

Static Scan Results

scanned 18d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 947 KB of source, external domains: api-us-ca.umodelverse.ai, api.codeium.com, api.modelverse.cn, register.windsurf.com, server.self-serve.windsurf.com, windsurf.com

Source & flagged code

8 flagged

dist/app/index.jsView file

Lines 1-33javascript

1import{createRequire as RV}from"node:module";var MV=Object.defineProperty;var PV=($)=>$;function IV($,Z){this[$]=PV.bind(null,Z)}var T$=($,Z)=>{for(var Q in Z)MV($,Q,{get:Z[Q],enumerable:!0,configurable:!0,set:IV.bind(Z,Q)})};var K0=($,Z)=>()=>($&&(Z=$($=0)),Z);var D$=RV(import.meta.url);import{dirname as E7,resolve as FV}from"node:path";import{fileURLToPath as AV}from"node:url";function KV(){return!!globalThis.__WINDSURF_COMPILED__}function C7(){return KV()?E7(process.execPath):wV}var wV;var S7=K0(()=>{wV=FV(E7(AV(import.meta.url)),"..","..")});import{readFileSync as Z8,existsSync as Q8,mkdir ...

2`)){let J=Q.trim();if(!J||J.startsWith("#"))continue;let X=J.indexOf("=");if(X===-1)continue;let Y=J.slice(0,X).trim(),V=J.slice(X+1).trim();if(V.startsWith('"')&&V.endsWith('"')||V.startsWith("'")&&V.endsWith("'"))V=V.slice(1,-1);else{let z=V.indexOf(" #");if(z!==-1)V=V.slice(0,z).trim()}if(!process.env[Y])process.env[Y]=V}}function CV($=J8(Y8,"config.json")){if(!Q8($))return;let Z;try{Z=JSON.parse(Z8($,"utf-8"))}catch(Q){console.warn(`[WARN] config.json: failed to parse ${$}: ${Q.message}`);return}if(!Z||typeof Z!=="object"||Array.isArray(Z))return;for(let[Q,J]of Object.entries(Z)){if(Q.star ...

3`)}catch(V){try{let z=L3();B3(z,{recursive:!0}),D3(U3(z,`ls-proto-${process.pid}-errors.log`),`${new Date().toISOString()} ${Z||""} ${Q||""}: ${V.message}

4`)}catch{}}}var Lz=0,F8,wz,_z,Ez,Cz,hz,fz;var F3=K0(()=>{F8=new Map([[5,"find"],[8,"run_command"],[13,"search_web"],[10,"view_file"],[19,"list_dir"],[33,"grep_v2"],[37,"read_url_content"]]),wz=new Map([[0,"UNSPECIFIED"],[1,"OPENAI"]]),_z=new Map([[0,"UNSPECIFIED"],[1,"O3"],[2,"GPT_4_1"],[3,"O4_MINI"]]),Ez=new Map([[0,"UNSPECIFIED"],[1,"DISABLED"],[2,"ALLOWLIST"

5`).replace(/\n{3,}/g,`

7`).trim(),Q=Z.match(/<([a-z][-a-z_]*)[^>]*>[\s\S]*?<\/\1>/g);if(Q?.length){let X=Q.map((Y)=>Y.match(/^<([a-z][-a-z_]*)/)?.[1]).filter(Boolean).filter((Y)=>!T3.has(Y));if(X.length)console.error(`[META_TAG_AUDIT] Unknown XML tags in user message: ${[...new Set(X)].join(", ")}`)}return Z}function JW($){let Z=String($||"");Z=Z.replace(/\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:?\d{2})?/g,"<ts>").replace(/\b(Today(?:'s)?\s+(?:date|is)(?:\s+is)?\s*[:\-

8<git-status>

9`),Z=Z.replace(new RegExp(`^([ \\t]*Recent commits\\s*:)[ \\t]*\\n[\\s\\S]*?${J}`,"gim"),`$1

10<recent-commits>

11`),Z=Z.replace(new RegExp(`^([ \\t]*Recent files\\s*:)[ \\t]*\\n[\\s\\S]*?${J}`,"gim"),`$1

12<recent-files>

13`),Z=Z.replace(/(?<![`'"\w])(?=[a-f0-9]*\d)(?=[a-f0-9]*[a-f])[a-f0-9]{7,12}(?![`'"\w])/gi,"<gitsha>"),Z}function _$($){if($===null||typeof $!=="object")return JSON.stringify($);if(Array.isArray($))return"["+$.map(_$).join(",")+"]";return"{"+Object.keys($).sort().map((Q)=>JSON.stringify(Q)+":"+_$($[Q])).join(",")+"}"}function XW($){if(typeof $?.text==="string")return{type:"text",text:E8($.text)};if(typeof $==="string")return{type:"text",text:E8($)};let Z=String($?.type||"").toLowerCase();if(Z==="image_url"||Z==="image"||Z==="input_image"){let Q=$?.image_url?.url||$?.url||"";if(typeof Q==="strin ...

14`).trim(),X=VW($);return{role:"assistant",text:J,tool_calls:X}}return{role:String(Z||"unknown"),content:L6($?.content)}}function v3($){if(process.env.CASCADE_REUSE_HASH_SYSTEM==="0")return"";let Z=$.filter((J)=>J?.role==="system");if(!Z.length)return"";let Q=Z.map((J)=>{let X=S8(J);if(Array.isArray(X.content))X.content=X.content.map((Y)=>{if(Y?.type==="text"&&typeof Y.text==="string")return{...Y,text:JW(Y.text)};return Y});return X});return l1(_$(Q),32)}function x3($={}){if(!$.emulateTools)return"";let Z=(Array.isArray($.tools)?$.tools.map((Q)=>{let J=Q?.function||Q;return{name:J?.name||"",des ...

15`)){let W=z.trim().match(/^(\d+)\s+(\d+)\s+(\d+)$/);if(!W)continue;let G=parseInt(W[1],10),H=parseInt(W[2],10),N=parseInt(W[3],10);if(Y.set(G,N),!X.has(H))X.set(H,[]);X.get(H).push(G)}let V=new Map;for(let z of Z){let W=0,G=0,H=new Set,N=[z];while(N.length){let q=N.pop();if(!Number.isInteger(q)||H.has(q))continue;if(H.add(q),Y.has(q))W+=Y.get(q)||0,G++;for(let D of X.get(q)||[])N.push(D)}if(G>0)V.set(z,{rssKb:W,rssBytes:W*1024,processCount:G})}r$={at:$,pidKey:Q,byRootPid:V}}catch(J){r$={at:$,pidKey:Q,byRootPid:new Map},j.debug(`LS RSS snapshot unavailable: ${J.message}`)}return r$.byRootPid}fu ...

High

Child Process

Package source references child process execution.

dist/app/index.jsView on unpkg · L13

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/app/index.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/app/index.jsView on unpkg · L1

16`);for(let U of M){if(!U)continue;if(/ERROR|error/.test(U))j.error(`[LS:${Z}] ${U}`);else j.debug(`[LS:${Z}] ${U}`)}}),P.stderr.on("data",(O)=>{let M=O.toString().trim().split(/\r?\n/);for(let U of M){if(!U)continue;let A=J5(U);j[A](`[LS:${Z}:stderr] ${U}`)}}),P.on("exit",(O,M)=>{j.warn(`LS instance ${Z} exited: code=${O} signal=${M}`);let U=Q0.get(Z),A=U?.process===P,_=CW(P);if(!_)T0.lastFailure=S4({kind:"process_exit",key:W1(Z),errorType:"ls_process_exit",code:O,signal:M,port:H,pid:P.pid||null});if(O===1)j.error("LS crashed on startup. Common causes:"),j.error(" 1. Binary incompatible with ...

17`)){let V=Y.trim();if(!V)continue;let z=V.match(/^(\d+)\s+(.*)$/);if(!z)continue;let W=parseInt(z[1],10),G=z[2],H=G.split(/\s+/,1)[0],N=!1;for(let q of J)if(q&&H===q){N=!0;break}if(!N)continue;if($++,Q.has(W))continue;if(W===process.pid)continue;try{process.kill(W,"SIGTERM"),Z++,j.info(`Killed orphan LS pid=${W} (${G.slice(0,80)}...)`)}catch(q){if(q.code!=="ESRCH")j.warn(`Could not kill orphan LS pid=${W}: ${q.message}`)}}}catch(X){j.warn(`cleanupOrphanLanguageServers: ${X.message}`)}return{scanned:$,killed:Z}}function $2(){let $=[];for(let[Z,Q]of Q0){A6(Q),E$.set(Z,{at:Date.now(),pid:Q?.proce ...

18`,X);if(Y===-1)break;let V=Y+7,z=$[Y+6]===13?V+1:V,W=$.indexOf(`

19endstream`,z);if(W===-1)break;let G=$.subarray(z,W);if(Q++,Q>FG)throw Error("PDF stream count exceeds safety limit");let H=Math.max(0,Y-500),q=$.subarray(H,Y).toString("latin1").includes("FlateDecode"),D;try{if(q){let P=RG(G,{maxOutputLength:z2});if(P.length>z2)throw Error("PDF decoded content exceeds safety limit");if(J+=P.length,J>q5)throw Error("PDF decoded content exceeds safety limit");D=P.toString("latin1")}else{if(J+=G.length,G.length>z2||J>q5)throw Error("PDF decoded content exceeds safety limit");D=G.toString("latin1")}}catch(P){if(/limit|exceed|maxOutputLength|Buffer larger/i.test(P. ...

21`)}function KG($){let Z=[],Q="",J=$.match(/BT[\s\S]*?ET/g);if(!J)return"";for(let X of J){let Y=X.matchAll(/$([^)]*)$\s*Tj/g);for(let z of Y)Q+=O5(z[1]);let V=X.matchAll(/\[([^\]]*)\]\s*TJ/gi);for(let z of V){let G=z[1].matchAll(/$([^)]*)$|(-?\d+(?:\.\d+)?)/g);for(let H of G)if(H[1]!==void 0)Q+=O5(H[1]);else if(H[2]!==void 0){if(parseFloat(H[2])<-100)Q+=" "}}if(/\d+\s+(?:-?\d+(?:\.\d+)?)\s+T[dD]/g.test(X)){if(Q.trim())Z.push(Q.trim()),Q=""}}if(Q.trim())Z.push(Q.trim());return Z.join(`

22`)}function O5($){return $.replace(/\\([nrtbf()\\]|\d{1,3})/g,(Z,Q)=>{if(Q==="n")return`

23`;if(Q==="r")return"\r";if(Q==="t")return"\t";if(Q==="b")return"\b";if(Q==="f")return"\f";if(Q==="("||Q===")"||Q==="\\")return Q;return String.fromCharCode(parseInt(Q,8))})}function v6($){try{let Z=Buffer.from($,"base64");if(Z.length<5||Z.subarray(0,5).toString()!=="%PDF-")return null;let Q=AG(Z);if(!Q.trim())return j.warn("PDF has no extractable text layer (scanned/image-only PDF)"),{text:"",pageCount:0};let J=(Z.toString("latin1").match(/\/Type\s*\/Page\b/g)||[]).length;return{text:Q,pageCount:J}}catch(Z){if(j.warn(`PDF extraction failed: ${Z.message}`),/exceeds safety limit|maxOutputLength| ...

24[PDF Document — ${V.pageCount} page(s)]

25${V.text}

26`,j.info(`PDF extracted: ${V.pageCount} pages, ${V.text.length} chars`);else Z+=`

27[PDF Document — no extractable text (scanned/image-only PDF)]

28`}}else if(J.type==="image"){let X=J.source||{};if((X.media_type||"").toLowerCase()==="application/pdf"&&X.data){let V=v6(X.data);if(V?.text)Z+=`

29[PDF Document — ${V.pageCount} page(s)]

30${V.text}

31`;continue}try{if((X.type==="base64"||!X.type)&&X.data){if(X.data.length>q2){j.warn("Image base64 exceeds size limit, skipping");continue}Q.push({base64_data:X.data,mime_type:X.media_type||"image/png"})}else if(X.type==="url"&&X.url)Q.push(await j2(X.url))}catch(V){j.warn(`Image extraction failed: ${V.message}`)}}else if(J.type==="image_url"){let X=J.image_url?.url||"";try{if(X.startsWith("data:")){if(X.slice(0,40).toLowerCase().startsWith("data:application/pdf")){let z=M5(X);if(z?.base64_data){let W=v6(z.base64_data);if(W?.text)Z+=`

32[PDF Document — ${W.pageCount} page(s)]

33${W.text}

Long lines were clipped for display.

Lines 88-128javascript

88`)}

90<human>

91${n.text}

92</human>`,r>0)I=`<truncation_note>The conversation above is truncated — ${r} earlier turns were dropped due to length limits. The user's original task and the most recent tool results are preserved. Do NOT ask the user to repeat their task; continue from the latest context.</truncation_note>

94`+I;if

•matchType = previous_version_dangerous_delta matchedPackage = @viudes/windsurf-api@0.1.10 matchedIdentity = npm:QHZpdWRlcy93aW5kc3VyZi1hcGk:0.1.10 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/app/index.jsView on unpkg

install-ls.shView file

•path = install-ls.sh kind = build_helper sizeBytes = 6237 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install-ls.shView on unpkg

dist/app/cli.jsView file

Lines 90-130javascript

90`)}

92<human>

93${n.text}

94</human>`,r>0)I=`<truncation_note>The conversation above is truncated — ${r} earlier turns were dropped due to length limits. The user's original task and the most recent tool results are preserved. Do NOT ask the user to repeat their task; continue from the latest context.</truncation_note>

Source & flagged code

8 flagged · loading source

dist/app/index.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code