registry / @whalent/agent-core / 0.3.488
@whalent/agent-core@0.3.488
Core runtime for Whalent Agent
AI Security Review
scanned 20d ago · by lpm-firewall-aiSource inspection supports a warning for unresolved executable behavior in heavily obfuscated bundles, with the main entrypoint exceeding the inspection tool's size limit. The inspected functionality and manifest do not establish a block-eligible attack.
Static reason
One or more suspicious static signals were detected.
Trigger
Launching the CLI or loading its runtime entrypoint.
Impact
Potential runtime effects remain uncertain; no concrete malicious impact was demonstrated.
Mechanism
Encoded string lookup and obscured process calls prevent confidently tracing the executable bundle's behavior.
AI rationale
Source inspection supports a warning for unresolved executable behavior in heavily obfuscated bundles, with the main entrypoint exceeding the inspection tool's size limit. The inspected functionality and manifest do not establish a block-eligible attack.
Evidence
dist/index.cjsdist/mcp.cjs
Decision evidence
public snapshotAI called this Suspicious at 70.0% confidence as Unknown with high false-positive risk.
Evidence for warning
- The executable bundles obscure identifiers and strings, leaving runtime behavior unresolved after bounded inspection.
- dist/index.cjs contains obfuscated child-process calls; its size exceeds the source tool's inspection and citation verification limit.
Evidence against
- package.json has no lifecycle scripts or runtime self-dependency.
- The inspected dynamic function construction belongs to bundled schema compilation, not a demonstrated hidden payload loader.
- The MCP startup accepts command-line configuration and a token; no covert credential export was established.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
7 flagged · loading sourcedist/mcp.cjsView file
1#!/usr/bin/env node
L2: 'use strict';var a0_0xf1e81f=a0_0x14d2;(function(_0x5e7a06,_0x184ff3){var _0x5c8bcb=a0_0x14d2,_0x61c78d=_0x5e7a06();while(!![]){try{var _0xf5b93b=-parseInt(_0x5c8bcb(0x292))/0x1*(-...
L3: || (${_0x42da20} == "string" && ${_0x54f47b} && ${_0x54f47b} == +${_0x54f47b})`)['assign'](_0x6b022a,(0x0,_0x34dcb0['_'])`+${_0x54f47b}`);return;case _0x47fce6(0x1d1b):_0x56aa09['e...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/mcp.cjsView on unpkg4|| (${_0x42da20} === "string" && ${_0x54f47b} && ${_0x54f47b} == +${_0x54f47b} && !(${_0x54f47b} % 1))`)['assign'](_0x6b022a,(0x0,_0x34dcb0['_'])`+${_0x54f47b}`);return;case _0x47f...
L5: || ${_0x42da20} === "boolean" || ${_0x54f47b} === null`)[_0x47fce6(0x3b0)](_0x6b022a,(0x0,_0x34dcb0['_'])`[${_0x54f47b}]`);}}}function _0x3c98d9({gen:_0x8a65ea,parentData:_0x185611...
L6: missingProperty: ${_0x23a2b2},
Medium
Findings
3 High7 Medium5 Low
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @whalent/agent-core@0.3.488.
See all versions of @whalent/agent-core for other recorded verdicts.
- Review the evidence and your use of @whalent/agent-core@0.3.488 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.