registry / @whalent/agent / 0.3.486
@whalent/agent@0.3.486
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 21d ago · by lpm-firewall-aiThe active, heavily obfuscated runtime leaves a real unresolved execution risk, supporting a warning rather than a clean verdict. No concrete malicious chain was established, and the inspected MCP compilation does not substantiate the scanner's payload-loader claim.
Static reason
One or more suspicious static signals were detected.
Trigger
Running or importing dist/index.cjs invokes its main function and core execution path.
Impact
The runtime receives the caller's environment and execution privileges; malicious use of that access was not established.
Mechanism
The wrapper selects a core script and launches it through child_process while forwarding process.env.
AI rationale
The active, heavily obfuscated runtime leaves a real unresolved execution risk, supporting a warning rather than a clean verdict. No concrete malicious chain was established, and the inspected MCP compilation does not substantiate the scanner's payload-loader claim.
Evidence
dist/index.cjsdist/core.cjs
Decision evidence
public snapshotAI called this Suspicious at 65.0% confidence as Unknown with high false-positive risk.
Evidence for warning
- The active wrapper launches a selected core script through child_process and forwards the process environment; extensive string obfuscation obscures this execution path.
- dist/core.cjs contains extensive obfuscation and exceeds the inspection tool's source limit, leaving the launched runtime's behavior unresolved.
- package.json has no registry-install lifecycle hooks or runtime self-dependency.
- The inspected dynamic compilation in dist/mcp.cjs builds schema validation code, which does not establish a hidden payload loader.
Evidence against
- No concrete exfiltration, destructive action, or unconsented agent configuration mutation was established.
- Child processes and authenticated platform requests are consistent with an agent CLI.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinified
Source & flagged code
8 flagged · loading sourcedist/mcp.cjsView file
4|| (${_0x22026b} === "string" && ${_0x55402d} && ${_0x55402d} == +${_0x55402d} && !(${_0x55402d} % 1))`)[_0x36871f(0x56c)](_0x1a8822,(0x0,_0x2fe766['_'])`+${_0x55402d}`);return;cas...
L5: || ${_0x22026b} === "boolean" || ${_0x55402d} === null`)[_0x36871f(0x56c)](_0x1a8822,(0x0,_0x2fe766['_'])`[${_0x55402d}]`);}}}function _0x5367da({gen:_0xef4935,parentData:_0x449d16...
L6: missingProperty: ${_0x1a0abf},
L7: depsCount: ${_0x5dc5e8},
L8: deps: ${_0x5ccb54}}`};var _0x144850={'keyword':'dependencies','type':'object','schemaType':'object','error':_0xb9d694['error'],'code'(_0x57ae2c){const [_0x11611b,_0x151de9]=_0x1461...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/mcp.cjsView on unpkg · L41#!/usr/bin/env node
L2: 'use strict';var a0_0x560b57=a0_0x2bf4;(function(_0x20792f,_0x4730da){var _0x2f8cab=a0_0x2bf4,_0x2d1ba5=_0x20792f();while(!![]){try{var _0x4107de=parseInt(_0x2f8cab(0x1d47))/0x1*(-...
L3: || (${_0x22026b} == "string" && ${_0x55402d} && ${_0x55402d} == +${_0x55402d})`)[_0x36871f(0x56c)](_0x1a8822,(0x0,_0x2fe766['_'])`+${_0x55402d}`);return;case'integer':_0xd7400a['el...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•
Findings
4 High7 Medium7 Low
HighSame File Env Network Executiondist/mcp.cjs
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/mcp.cjs
LowFilesystem
Affected versions and remediation
This report applies to @whalent/agent@0.3.486.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.486 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.