Loading npm security reports…

@wayai/cli@0.3.109: Suspicious npm security report (Warn) | LPM Firewall

registry / @wayai/cli / 0.3.109

@wayai/cli@0.3.109

WayAI CLI — sync hub configuration between local files and the platform

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 942 KB of source, external domains: 127.0.0.1, api.github.com, api.wayai.pro, github.com, raw.githubusercontent.com, rekor.pro, sprightly-comic-51.authkit.app, www.wayai.pro

Source & flagged code

6 flagged

dist/index.jsView file

9006}); L9007: import { execFileSync } from "child_process"; L9008: import * as fs2 from "fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L9006

22991return new Promise((resolve6) => { L22992: exec("npm view @wayai/cli version", { timeout: REFRESH_TIMEOUT_MS }, (err, stdout) => { L22993: if (!err) { ... L23001: } L23002: resolve6(); L23003: }); ... L23006: async function refreshSkillCache() { L23007: const url = process.env.WAYAI_SKILL_RAW_URL || DEFAULT_SKILL_RAW_URL; L23008: const controller = new AbortController();

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L22991

51while (cursor < text.length) { L52: while (cursor < text.length && !isBase64UrlChar(text[cursor])) cursor++; L53: const headerStart = cursor; ... L236: "use strict"; L237: CREDENTIAL_KEY_RE = /token|secret|credential|password|passwd|api[_-]?key|authorization|private[_-]?key|session[_-]?id|cookie|jwt/i; L238: NUMERIC_CREDENTIAL_KEY_RE = /(?:password|passwd|pin|token|secret|credential|api[_-]?key|authorization|private[_-]?key|session[_-]?id|cookie|jwt)$/i; ... L249: [/\bway_[A-Za-z0-9_-]{8,}/g, "way_[REDACTED]"], L250: // wst_ single-use WebSocket tickets (same opaque base64url format). L251: [/\bwst_[A-Za-z0-9_-]{8,}/g, "wst_[REDACTED]"], ... L360: try { L361: const __dirname2 = dirname(fileURLToPath(import.meta.url)); L362: const pkg2 = JSON.parse(readFileSync(join(__dirname2, "..", "..", "package.json"), "utf-8"));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L51

9847package = @wayai/cli; repositoryIdentity = platform; dependency = @napi-rs/keyring L9847: try { L9848: const mod = await import("@napi-rs/keyring"); L9849: const Entry = mod.Entry;

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L9847

22933console.log(`Updating ${pkg2.version} \u2192 ${latest}...`); L22934: execSync("npm install -g @wayai/cli@latest", { L22935: timeout: 6e4,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L22933

16014if (c.states_deleted > 0) parts.push(`${c.states_deleted} state(s) deleted`); L16015: if (c.evals_created > 0) parts.push(`${c.evals_created} eval(s) created`); L16016: if (c.evals_updated > 0) parts.push(`${c.evals_updated} eval(s) updated`);

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L16014

Source & flagged code

6 flagged · loading source

dist/index.jsView file

9006}); L9007: import { execFileSync } from "child_process"; L9008: import * as fs2 from "fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L9006

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L22991

Findings

6 High3 Medium5 Low

HighChild Processdist/index.js

HighShell

HighSame File Env Network Executiondist/index.js

HighSandbox Evasion Gated Capabilitydist/index.js

HighCopied Package Dependency Bridgedist/index.js

HighRuntime Package Installdist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/index.jsView file

9006}); L9007: import { execFileSync } from "child_process"; L9008: import * as fs2 from "fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L9006

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L22991

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L51

9847package = @wayai/cli; repositoryIdentity = platform; dependency = @napi-rs/keyring L9847: try { L9848: const mod = await import("@napi-rs/keyring"); L9849: const Entry = mod.Entry;

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L9847

22933console.log(`Updating ${pkg2.version} \u2192 ${latest}...`); L22934: execSync("npm install -g @wayai/cli@latest", { L22935: timeout: 6e4,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L22933

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L16014