registry / @whalent/agent-core / 0.3.528
@whalent/agent-core@0.3.528
⚠ Under reviewCore runtime for Whalent Agent
AI Security Review
scanned 12h ago · by lpm-firewall-aiThe manifest has no install-time hooks, and the inspected MCP operations appear to be explicitly invoked tools. The 16 MiB obfuscated CLI bundle remains unresolved, so the evidence does not support either a clean or malicious verdict.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the installed command-line entrypoint or directly starting the MCP server.
Impact
The inspected source does not establish an attack, but the unresolved CLI behavior prevents a clean determination.
Mechanism
The MCP bundle dispatches platform tools, including profile and goal updates; the primary CLI bundle could not be fully assessed.
AI rationale
The manifest has no install-time hooks, and the inspected MCP operations appear to be explicitly invoked tools. The 16 MiB obfuscated CLI bundle remains unresolved, so the evidence does not support either a clean or malicious verdict.
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package exposes a command-line entrypoint through dist/index.cjs.
- The MCP bundle contains platform actions that update profiles and goals, and it can start a daemon MCP server when run directly.
- The primary CLI bundle is heavily obfuscated and exceeds the citation verifier’s size limit, so its behavior could not be resolved from the inspected excerpts.
Evidence against
- package.json declares no lifecycle scripts, so installation does not automatically run the CLI or MCP server.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
7 flagged · loading sourcedist/mcp.cjsView file
1#!/usr/bin/env node
L2: 'use strict';var a0_0x278c75=a0_0x2f0a;(function(_0xbc12d8,_0x38fbd8){var _0x41d3d5=a0_0x2f0a,_0x33c28a=_0xbc12d8();while(!![]){try{var _0x322bb9=parseInt(_0x41d3d5(0xb72))/0x1*(pa...
L3: || (${_0x5c8f9d} == "string" && ${_0x25072d} && ${_0x25072d} == +${_0x25072d})`)['assign'](_0x50e634,(0x0,_0x219279['_'])`+${_0x25072d}`);return;case _0x2070ee(0x1e68):_0xae90d3[_0...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/mcp.cjsView on unpkg4|| (${_0x5c8f9d} === "string" && ${_0x25072d} && ${_0x25072d} == +${_0x25072d} && !(${_0x25072d} % 1))`)[_0x2070ee(0x1fbe)](_0x50e634,(0x0,_0x219279['_'])`+${_0x25072d}`);return;ca...
L5: || ${_0x5c8f9d} === "boolean" || ${_0x25072d} === null`)['assign'](_0x50e634,(0x0,_0x219279['_'])`[${_0x25072d}]`);}}}function _0x1bfdf2({gen:_0x5728f9,parentData:_0x2c51fc,parentD...
L6: missingProperty: ${_0x261110},
Medium
Findings
3 High7 Medium5 Low
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @whalent/agent-core@0.3.528.
See all versions of @whalent/agent-core for other recorded verdicts.
- Review the evidence and your use of @whalent/agent-core@0.3.528 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.