@whalent/agent@0.3.418
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package is too deliberately obfuscated to establish a clean verdict, and its runtime update and remote-command features create real risk. It does not meet the policy threshold for malicious install-hook abuse because installation has no automatic lifecycle trigger.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the whalent command, especially daemon mode.
Impact
A running daemon can execute remotely directed upgrades or restarts, but static inspection found no install-hook attack or confirmed secret exfiltration.
Mechanism
Obfuscated CLI wrapper with process spawning and runtime self-update logic.
AI rationale
The package is too deliberately obfuscated to establish a clean verdict, and its runtime update and remote-command features create real risk. It does not meet the policy threshold for malicious install-hook abuse because installation has no automatic lifecycle trigger.
Evidence
dist/index.cjsdist/core.cjs
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The executable bundles are deliberately obfuscated, preventing meaningful audit of their runtime network, file, and command behavior.
- The CLI contains code for spawning processes and automatically installing or updating its runtime when the user runs it.
- The README describes a daemon that accepts remote upgrade and restart commands, creating a remotely directed capability.
Evidence against
- The manifest has no npm preinstall, install, or postinstall hook.
- There is no runtime dependency on the package's own name; the optional core package has a different name.
- The Python sidecar is a local Jupyter-kernel NDJSON bridge and does not itself make network requests.
Behavioral surface
DynamicRequireEnvironmentVarsFilesystem
HighEntropyStringsMinifiedPossibleObfuscationTrivial
NoLicense
Source & flagged code
5 flagged · loading sourcedist/index.cjsView file
1#!/usr/bin/env node
L2: 'use strict';(function(_0x3ee864,_0x1040ab){const _0x498682=_0x3ee864();function _0x55136f(_0x19ce9a,_0x2748e3,_0x31d783,_0x25a043){return a0_0x2a83(_0x2748e3-0x2e1,_0x19ce9a);}fun...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L11#!/usr/bin/env node
L2: 'use strict';(function(_0x3ee864,_0x1040ab){const _0x498682=_0x3ee864();function _0x55136f(_0x19ce9a,_0x2748e3,_0x31d783,_0x25a043){return a0_0x2a83(_0x2748e3-0x2e1,_0x19ce9a);}fun...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.cjsView on unpkg · L1dist/jupyter_sidecar.pyView file
•path = dist/jupyter_sidecar.py
kind = build_helper
sizeBytes = 18590
magicHex = [redacted]
Medium
Ships Build Helper
Findings
1 High6 Medium5 Low
HighObfuscated Payload Loaderdist/index.cjs
MediumDynamic Requiredist/index.cjs
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to @whalent/agent@0.3.418.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.418 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.