registry / @whalent/agent / 0.3.323

@whalent/agent@0.3.323

Stable wrapper for Whalent Agent core runtime

AI Security Review

scanned 16d ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs the whalent CLI/daemon with a token.

Impact

A trusted gateway or release channel can control agent behavior and cause code/helper updates on the host.

Mechanism

Obfuscated remote-managed agent daemon with self-update and process-spawn capability.

Rationale

Not proven malicious: there is no install hook or confirmed exfiltration chain. The obfuscated, remotely managed self-updating daemon is nevertheless an unresolved high-risk capability.

Evidence

package.jsondist/index.cjsdist/core.cjsdist/jupyter_sidecar.pyREADME.md

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Unknown with low false-positive risk.

Evidence for warning

dist/index.cjs is deliberately obfuscated.
CLI launches and supervises dist/core.cjs via child_process.

@whalent/agent@0.3.323

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code