@whalent/agent@0.3.440
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 1mo ago · by lpm-firewall-aiAutomatic global self-updating from an obfuscated CLI is a concrete persistence risk. The absence of a registry install hook prevents classifying the observed behavior as malicious install-hook abuse.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the whalent CLI in supervised mode.
Impact
A CLI invocation can replace the globally installed wrapper with a newer release, creating an unreviewed persistence and supply-chain update surface.
Mechanism
The wrapper checks npm for a newer version and uses npm with a global-install argument before restarting the wrapper.
AI rationale
Automatic global self-updating from an obfuscated CLI is a concrete persistence risk. The absence of a registry install hook prevents classifying the observed behavior as malicious install-hook abuse.
Evidence
dist/index.cjs
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The package exposes the obfuscated wrapper as both its main module and CLI.
- The CLI automatically checks for a newer wrapper release when it runs.
- The updater invokes npm globally to install the selected wrapper version.
- No npm preinstall, install, or postinstall hook is declared.
Evidence against
- The inspected metadata has no automatic registry-install lifecycle hook.
- The inspected updater uses a named package version rather than an arbitrary shell command.
Behavioral surface
DynamicRequireEnvironmentVarsFilesystem
HighEntropyStringsMinifiedPossibleObfuscationTrivial
NoLicense
Oversized source lightweight scan
dist/core.cjs15.7 MB file, sampled 256 KB
Source & flagged code
5 flagged · loading sourcedist/index.cjsView file
1#!/usr/bin/env node
L2: 'use strict';(function(_0x38d8bf,_0x32b117){function _0x1baf9a(_0x5f01ab,_0x35f2f4,_0xd9240d,_0x461f44){return a0_0x4140(_0x461f44-0x217,_0xd9240d);}function _0x57b138(_0x4d816a,_0...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L11#!/usr/bin/env node
L2: 'use strict';(function(_0x38d8bf,_0x32b117){function _0x1baf9a(_0x5f01ab,_0x35f2f4,_0xd9240d,_0x461f44){return a0_0x4140(_0x461f44-0x217,_0xd9240d);}function _0x57b138(_0x4d816a,_0...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.cjsView on unpkg · L1dist/jupyter_sidecar.pyView file
•path = dist/jupyter_sidecar.py
kind = build_helper
sizeBytes = 18590
magicHex = [redacted]
Medium
Ships Build Helper
Findings
1 High6 Medium5 Low
HighObfuscated Payload Loaderdist/index.cjs
MediumDynamic Requiredist/index.cjs
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to @whalent/agent@0.3.440.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.440 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.