registry / @whalent/agent / 0.3.442
@whalent/agent@0.3.442
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe automatic global self-update is an unresolved dangerous capability hidden in an obfuscated CLI bundle. It is not sufficient evidence to classify the package as malicious because it is runtime-triggered and no concrete malicious payload was established.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the whalent CLI entrypoint without the update-check opt-out environment variables.
Impact
A CLI invocation can mutate the user's global package installation and execute a future selected release; the inspected release does not itself run this during npm installation.
Mechanism
Obfuscated runtime code checks for a newer wrapper version and spawns a global package-manager installation of that version.
AI rationale
The automatic global self-update is an unresolved dangerous capability hidden in an obfuscated CLI bundle. It is not sufficient evidence to classify the package as malicious because it is runtime-triggered and no concrete malicious payload was established.
Evidence
dist/index.cjs
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes dist/index.cjs as its CLI entrypoint.
- The CLI invokes an automatic wrapper-update routine unless an environment opt-out is set.
- The update routine installs a selected newer version of the same wrapper globally through a spawned package-manager command.
- The published CLI bundle is substantially obfuscated, limiting transparent review of this mutating runtime path.
Evidence against
- package.json declares no preinstall, install, or postinstall lifecycle hook.
- The observed update path is triggered by running the CLI, not by package installation.
Behavioral surface
DynamicRequireEnvironmentVarsFilesystem
HighEntropyStringsMinifiedPossibleObfuscationTrivial
NoLicense
Oversized source lightweight scan
Source & flagged code
5 flagged · loading sourcedist/index.cjsView file
1#!/usr/bin/env node
L2: 'use strict';(function(_0x445a84,_0x28f08a){function _0x2b8d9(_0x287ffa,_0x1aa0a8,_0x8e3e7,_0x473a41){return a0_0x54d0(_0x473a41-0x17c,_0x287ffa);}function _0x17bff0(_0x50db9e,_0x4...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L11#!/usr/bin/env node
L2: 'use strict';(function(_0x445a84,_0x28f08a){function _0x2b8d9(_0x287ffa,_0x1aa0a8,_0x8e3e7,_0x473a41){return a0_0x54d0(_0x473a41-0x17c,_0x287ffa);}function _0x17bff0(_0x50db9e,_0x4...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.cjsView on unpkg · L1dist/jupyter_sidecar.pyView file
•path = dist/jupyter_sidecar.py
kind = build_helper
sizeBytes = 18590
magicHex = [redacted]
Medium
Ships Build Helper
Findings
1 High6 Medium5 Low
HighObfuscated Payload Loaderdist/index.cjs
MediumDynamic Requiredist/index.cjs
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to @whalent/agent@0.3.442.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.442 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.