registry / @whalent/agent-core / 0.3.508
@whalent/agent-core@0.3.508
Core runtime for Whalent Agent
AI Security Review
scanned 8d ago · by lpm-firewall-aiStatic inspection found an unresolved agent-configuration capability in an obfuscated bundle, but no reachable trigger or concrete attack behavior was confirmed. The result warrants a warning rather than a publish block.
Static reason
One or more suspicious static signals were detected.
Trigger
Unknown; no caller for the configuration writer was established during inspection.
Impact
If activated, the configuration change could cause Claude to load the registered server.
Mechanism
The helper can add a supplied MCP server command and arguments to Claude's configuration.
AI rationale
Static inspection found an unresolved agent-configuration capability in an obfuscated bundle, but no reachable trigger or concrete attack behavior was confirmed. The result warrants a warning rather than a publish block.
Evidence
dist/mcp.cjs.claude.json
Decision evidence
public snapshotAI called this Suspicious at 67.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The manifest exposes dist/index.cjs as the package main and CLI, and includes dist/mcp.cjs in the published files.
- The MCP bundle maps agent platforms to configuration directories, including Claude's .claude directory.
- The bundle contains a helper that adds a supplied server command and arguments to Claude's MCP server configuration; its activating caller was not established.
Evidence against
- The manifest contains no lifecycle scripts, so this review found no automatic install-time trigger.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
7 flagged · loading sourcedist/mcp.cjsView file
1#!/usr/bin/env node
L2: 'use strict';var a0_0x37c31f=a0_0x9005;(function(_0x340e88,_0x1757cf){var _0x1b8492=a0_0x9005,_0x240835=_0x340e88();while(!![]){try{var _0x3d3491=parseInt(_0x1b8492(0x1a2d))/0x1+pa...
L3: || (${_0x5a786b} == "string" && ${_0x56199d} && ${_0x56199d} == +${_0x56199d})`)[_0x2033c5(0x761)](_0x46ac02,(0x0,_0x24a27a['_'])`+${_0x56199d}`);return;case'integer':_0xe3b01b[_0x...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/mcp.cjsView on unpkg4|| (${_0x5a786b} === "string" && ${_0x56199d} && ${_0x56199d} == +${_0x56199d} && !(${_0x56199d} % 1))`)['assign'](_0x46ac02,(0x0,_0x24a27a['_'])`+${_0x56199d}`);return;case'boolea...
L5: || ${_0x5a786b} === "boolean" || ${_0x56199d} === null`)['assign'](_0x46ac02,(0x0,_0x24a27a['_'])`[${_0x56199d}]`);}}}function _0x569239({gen:_0x5cdeb7,parentData:_0x2fa0c6,parentD...
L6: missingProperty: ${_0x41021b},
Medium
Findings
3 High7 Medium5 Low
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @whalent/agent-core@0.3.508.
See all versions of @whalent/agent-core for other recorded verdicts.
- Review the evidence and your use of @whalent/agent-core@0.3.508 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.