@whalent/agent@0.3.453
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe automatic global self-update is a concrete supply-chain capability but does not prove a current malicious payload. The absence of install hooks in this release makes blocking unsupported.
Static reason
One or more suspicious static signals were detected.
Trigger
A normal invocation of dist/index.cjs that reaches the wrapper update path.
Impact
A registry-selected future release may execute in the user's global npm context. The current release has no install hook, so no present install-time compromise is confirmed.
Mechanism
The executable selects a newer wrapper version and starts npm with global-install arguments; the installed future release is not pinned in this snapshot.
AI rationale
The automatic global self-update is a concrete supply-chain capability but does not prove a current malicious payload. The absence of install hooks in this release makes blocking unsupported.
Evidence
dist/index.cjs
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI checks for a newer wrapper release during normal execution.
- The wrapper invokes a global npm installation of the selected wrapper version.
- The published manifest has no install lifecycle hook; its only lifecycle-like script is prepublishOnly.
Evidence against
- The examined update code uses a non-shell child-process call.
- No current package install hook or direct credential-exfiltration sink was identified.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Oversized source lightweight scan
Source & flagged code
7 flagged · loading sourcedist/mcp.cjsView file
1#!/usr/bin/env node
L2: 'use strict';var a0_0x4138e1=a0_0x28ab;(function(_0xf08b,_0x555023){var _0x281480=a0_0x28ab,_0x3883b7=_0xf08b();while(!![]){try{var _0x3e43c2=parseInt(_0x281480(0xc2e))/0x1+-parseI...
L3: || (${_0x23eaa1} == "string" && ${_0x118b7d} && ${_0x118b7d} == +${_0x118b7d})`)['assign'](_0x1c8fd7,(0x0,_0x2d4e05['_'])`+${_0x118b7d}`);return;case _0x4a6fa9(0x2e4):_0x36a619[_0x...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/mcp.cjsView on unpkg4|| (${_0x23eaa1} === "string" && ${_0x118b7d} && ${_0x118b7d} == +${_0x118b7d} && !(${_0x118b7d} % 1))`)[_0x4a6fa9(0x2c0)](_0x1c8fd7,(0x0,_0x2d4e05['_'])`+${_0x118b7d}`);return;cas...
L5: || ${_0x23eaa1} === "boolean" || ${_0x118b7d} === null`)['assign'](_0x1c8fd7,(0x0,_0x2d4e05['_'])`[${_0x118b7d}]`);}}}function _0x146a29({gen:_0x11b4f0,parentData:_0x3b6479,parentD...
L6: missingProperty: ${_0x1df112},
Medium
Findings
3 High7 Medium7 Low
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @whalent/agent@0.3.453.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.453 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.