registry / @whalent/agent / 0.3.423
@whalent/agent@0.3.423
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 1mo ago · by lpm-firewall-aiNo install-time malicious chain or confirmed exfiltration was found. However, opaque executables combined with a remote-managed worker daemon leave a substantial unresolved runtime-control risk.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs whalent with a token and starts the daemon.
Impact
A compromised or maliciously controlled service account could direct a local agent process; the exact command and data boundaries cannot be verified statically.
Mechanism
Obfuscated remote-managed agent daemon with child-process access.
AI rationale
No install-time malicious chain or confirmed exfiltration was found. However, opaque executables combined with a remote-managed worker daemon leave a substantial unresolved runtime-control risk.
Evidence
dist/index.cjsdist/core.cjs
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The two executable JavaScript artifacts are heavily obfuscated, preventing a reliable source-level audit of their privileged runtime behavior.
- The package describes a token-authenticated daemon that fetches configurations, auto-starts workers, and accepts remote upgrade and restart commands.
- The executable imports filesystem and child-process functionality while its operational strings and control flow are encoded.
Evidence against
- package.json has no preinstall, install, or postinstall hook; its only lifecycle hook is prepublishOnly.
- No fixed network endpoint, credential-exfiltration target, or destructive install action was recoverable from the inspected source.
- The Python sidecar is a Jupyter kernel protocol bridge and contains no network client or filesystem-harvesting logic.
Behavioral surface
DynamicRequireEnvironmentVarsFilesystem
MinifiedPossibleObfuscationTrivial
Source & flagged code
6 flagged · loading sourcedist/index.cjsView file
1#!/usr/bin/env node
L2: 'use strict';(function(_0x57c2da,_0xdc43a4){function _0x528b6a(_0x3e4ea9,_0x6f6688,_0x52777a,_0x27e728){return a0_0x4e8e(_0x27e728-0x328,_0x6f6688);}function _0x2e84a5(_0x3a17f2,_0...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L11#!/usr/bin/env node
L2: 'use strict';(function(_0x57c2da,_0xdc43a4){function _0x528b6a(_0x3e4ea9,_0x6f6688,_0x52777a,_0x27e728){return a0_0x4e8e(_0x27e728-0x328,_0x6f6688);}function _0x2e84a5(_0x3a17f2,_0...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.cjsView on unpkg · L12'use strict';
Medium
Ai Review Evidence
The two executable JavaScript artifacts are heavily obfuscated, preventing a reliable source-level audit of their privileged runtime behavior.
dist/index.cjsView on unpkg · L2Findings
1 High7 Medium4 Low
HighObfuscated Payload Loaderdist/index.cjs
MediumDynamic Requiredist/index.cjs
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/index.cjs
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowNo License
Affected versions and remediation
This report applies to @whalent/agent@0.3.423.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.423 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.