@whalent/agent@0.3.369
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo malicious install-time behavior was found, but the obfuscated runtime combines remote command handling, persistent worker startup, and downloaded helper activation. This is a meaningful high-privilege agent capability that warrants a warning.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the whalent CLI or daemon with platform connectivity.
Impact
A compromised or malicious platform response could control managed workers or introduce executable helper code.
Mechanism
Remote configuration, worker management, and helper-download activation.
AI rationale
No malicious install-time behavior was found, but the obfuscated runtime combines remote command handling, persistent worker startup, and downloaded helper activation. This is a meaningful high-privilege agent capability that warrants a warning.
Evidence
package.jsondist/index.cjsdist/core.cjsREADME.md~/.whalent-agent/helpers/sqlite
Network endpoints1
memory.whalent.com
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The shipped CLI and core bundles are heavily obfuscated, limiting auditability.
- The documented daemon downloads and activates helper releases periodically.
- The daemon fetches agent configuration, starts auto-restart workers, and accepts gateway upgrade and restart commands.
Evidence against
- The manifest has no preinstall, install, or postinstall hook.
- The documented behavior is activated by running the CLI or daemon, not package installation.
- The reviewed text describes a Whalent-owned agent service; no direct credential theft or destructive action was confirmed.
Behavioral surface
DynamicRequireEnvironmentVarsFilesystem
HighEntropyStringsMinifiedPossibleObfuscationTrivial
NoLicense
Oversized source lightweight scan
Source & flagged code
5 flagged · loading sourcedist/index.cjsView file
1#!/usr/bin/env node
L2: 'use strict';(function(_0x96b9e0,_0x6ff8e){const _0x2e172d=_0x96b9e0();function _0x3604db(_0x1653c5,_0x194646,_0x2e337e,_0x15f095){return a0_0x28fe(_0x1653c5-0x15e,_0x2e337e);}func...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L11#!/usr/bin/env node
L2: 'use strict';(function(_0x96b9e0,_0x6ff8e){const _0x2e172d=_0x96b9e0();function _0x3604db(_0x1653c5,_0x194646,_0x2e337e,_0x15f095){return a0_0x28fe(_0x1653c5-0x15e,_0x2e337e);}func...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.cjsView on unpkg · L1dist/jupyter_sidecar.pyView file
•path = dist/jupyter_sidecar.py
kind = build_helper
sizeBytes = 18590
magicHex = [redacted]
Medium
Ships Build Helper
Findings
1 High6 Medium5 Low
HighObfuscated Payload Loaderdist/index.cjs
MediumDynamic Requiredist/index.cjs
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to @whalent/agent@0.3.369.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.369 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.