registry / @whalent/agent / 0.3.421
@whalent/agent@0.3.421
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThis is not proven malware, but the obfuscated executable runtime and code-execution capability leave a material unresolved risk. The absence of install hooks and a concrete attack chain supports warning rather than blocking publication.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the whalent CLI or sends an execute request to the Jupyter sidecar.
Impact
The opaque runtime and code-execution interface warrant caution, but static inspection found no confirmed exfiltration or install-time compromise.
Mechanism
Opaque agent runtime with local Jupyter code execution capability.
AI rationale
This is not proven malware, but the obfuscated executable runtime and code-execution capability leave a material unresolved risk. The absence of install hooks and a concrete attack chain supports warning rather than blocking publication.
Evidence
dist/index.cjsdist/core.cjsdist/jupyter_sidecar.py
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The published CLI is deliberately obfuscated; its build configuration includes an unobfuscated fast mode and a JavaScript obfuscator.
- The package exposes an executable entry point whose opaque bundled runtime cannot be meaningfully audited.
- Its Jupyter sidecar accepts supplied code and forwards it to a kernel for execution.
Evidence against
- The manifest has no preinstall, install, or postinstall lifecycle hook; prepublishOnly is not run when consumers install the package.
- It does not declare a runtime dependency on its own package name.
- No concrete credential theft, destructive action, or hard-coded network endpoint was established from the inspected files.
Behavioral surface
DynamicRequireEnvironmentVarsFilesystem
MinifiedPossibleObfuscationTrivial
NoLicense
Source & flagged code
6 flagged · loading sourcedist/index.cjsView file
1#!/usr/bin/env node
L2: 'use strict';(function(_0x57c2da,_0xdc43a4){function _0x528b6a(_0x3e4ea9,_0x6f6688,_0x52777a,_0x27e728){return a0_0x4e8e(_0x27e728-0x328,_0x6f6688);}function _0x2e84a5(_0x3a17f2,_0...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L11#!/usr/bin/env node
L2: 'use strict';(function(_0x57c2da,_0xdc43a4){function _0x528b6a(_0x3e4ea9,_0x6f6688,_0x52777a,_0x27e728){return a0_0x4e8e(_0x27e728-0x328,_0x6f6688);}function _0x2e84a5(_0x3a17f2,_0...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.cjsView on unpkg · L1dist/jupyter_sidecar.pyView file
•path = dist/jupyter_sidecar.py
kind = build_helper
sizeBytes = 18590
magicHex = [redacted]
Medium
Ships Build Helper
Findings
1 High7 Medium4 Low
HighObfuscated Payload Loaderdist/index.cjs
MediumDynamic Requiredist/index.cjs
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
MediumAi Review Evidencepackage.json
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowNo License
Affected versions and remediation
This report applies to @whalent/agent@0.3.421.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.421 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.