@whalent/agent@0.3.366
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package has no install-time lifecycle hook, but its normal CLI entrypoint performs an opaque self-update through npm and permits scripts. This is a dangerous active capability rather than confirmed malware.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the whalent command.
Impact
A future registry release and its allowed scripts can execute in the user's environment without a separate update command.
Mechanism
The entrypoint calls maybeUpdateWrapper, which uses safeSpawnSync to run a global npm install for WRAPPER_PKG_NAME at a resolved version with whalentRuntimeAllowScriptsArg.
AI rationale
The package has no install-time lifecycle hook, but its normal CLI entrypoint performs an opaque self-update through npm and permits scripts. This is a dangerous active capability rather than confirmed malware.
Evidence
dist/index.cjs
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes dist/index.cjs as the executable entrypoint and contains no install lifecycle hook.
- The executable entrypoint automatically calls its wrapper update routine when the CLI runs.
- The update routine invokes a global npm install for the wrapper package and supplies an argument enabling selected package scripts.
- The executable is deliberately obfuscated, preventing transparent inspection of its update and persistence paths.
Evidence against
- No preinstall, install, or postinstall hook is declared in the manifest.
- No concrete credential collection or exfiltration endpoint was established from the inspected entrypoint.
Behavioral surface
DynamicRequireEnvironmentVarsFilesystem
HighEntropyStringsMinifiedPossibleObfuscationTrivial
NoLicense
Source & flagged code
5 flagged · loading sourcedist/index.cjsView file
1#!/usr/bin/env node
L2: 'use strict';(function(_0x188818,_0x210d8f){function _0x36cf37(_0x4c68a0,_0x24d243,_0x4d7926,_0x37dd0d){return a0_0x220c(_0x4c68a0- -0x1c7,_0x4d7926);}function _0x5d928c(_0x5a183a,...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L11#!/usr/bin/env node
L2: 'use strict';(function(_0x188818,_0x210d8f){function _0x36cf37(_0x4c68a0,_0x24d243,_0x4d7926,_0x37dd0d){return a0_0x220c(_0x4c68a0- -0x1c7,_0x4d7926);}function _0x5d928c(_0x5a183a,...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.cjsView on unpkg · L1dist/jupyter_sidecar.pyView file
•path = dist/jupyter_sidecar.py
kind = build_helper
sizeBytes = 18590
magicHex = [redacted]
Medium
Ships Build Helper
Findings
1 High6 Medium5 Low
HighObfuscated Payload Loaderdist/index.cjs
MediumDynamic Requiredist/index.cjs
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to @whalent/agent@0.3.366.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.366 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.