registry  /  @whalent/agent  /  0.3.227

@whalent/agent@0.3.227

⚠ Under review

Stable wrapper for Whalent Agent core runtime

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 17 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireEnvironmentVarsFilesystem
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
Manifest
NoLicense
scanned 2 file(s), 303 KB of source, external domains: registry.npm, registry.npmjs.org
Oversized source lightweight scan
dist/core.cjs4.53 MB file, sampled 256 KB
EnvironmentVarsDynamicRequireObfuscatedHighEntropyStringsMinified

Source & flagged code

8 flagged · loading source
package.jsonView file
•scripts.preinstall = node scripts/preinstall-check.cjs
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
dist/index.cjsView file
•matchType = previous_version_dangerous_delta matchedPackage = @whalent/agent@0.3.201 matchedIdentity = npm:QHdoYWxlbnQvYWdlbnQ:0.3.201 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.cjsView on unpkg
1#!/usr/bin/env node L2: 'use strict';const a0_0x8d52fd=a0_0x3e9d;(function(_0x2eda80,_0x4f7a93){const _0x482fdb=a0_0x3e9d,_0xb5b207=_0x2eda80();while(!![]){try{const _0x3e7dd9=parseInt(_0x482fdb(0x254))/0...
High
Child Process

Package source references child process execution.

dist/index.cjsView on unpkg · L1
1#!/usr/bin/env node L2: 'use strict';const a0_0x8d52fd=a0_0x3e9d;(function(_0x2eda80,_0x4f7a93){const _0x482fdb=a0_0x3e9d,_0xb5b207=_0x2eda80();while(!![]){try{const _0x3e7dd9=parseInt(_0x482fdb(0x254))/0...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.cjsView on unpkg · L1
1#!/usr/bin/env node L2: 'use strict';const a0_0x8d52fd=a0_0x3e9d;(function(_0x2eda80,_0x4f7a93){const _0x482fdb=a0_0x3e9d,_0xb5b207=_0x2eda80();while(!![]){try{const _0x3e7dd9=parseInt(_0x482fdb(0x254))/0...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/index.cjsView on unpkg · L1
dist/index.cjs#virtual:normalized:round1View file
1#!/usr/bin/env node L2: 'use strict';const a0_0x8d52fd=a0_0x3e9d;(function(_0x2eda80,_0x4f7a93){const _0x482fdb=a0_0x3e9d,_0xb5b207=_0x2eda80();while(!![]){try{const _0x3e7dd9=parseInt(_0x482fdb(0x254))/0...
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.cjs#virtual:normalized:round1View on unpkg · L1
dist/core.cjsView file
•path = dist/core.cjs kind = oversized_source_file sizeBytes = 4754909 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/core.cjsView on unpkg
•path = dist/core.cjs kind = oversized_cli_entrypoint sizeBytes = 4754909 magicHex = [redacted]
Medium
Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/core.cjsView on unpkg

Findings

1 Critical6 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.cjs
HighSame File Env Network Executiondist/index.cjs#virtual:normalized:round1
HighObfuscated Payload Loaderdist/index.cjs
HighObfuscated
HighOversized Source Filedist/core.cjs
MediumDynamic Requiredist/index.cjs
MediumEnvironment Vars
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License