registry / @whalent/agent / 0.3.501
@whalent/agent@0.3.501
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 12d ago · by lpm-firewall-aiObfuscation in the shipped executable and MCP bundle prevents reliable tracing of their behavior, leaving a real unresolved runtime risk. The inspected source does not establish a concrete attack or a malicious lifecycle chain, so this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.
Trigger
Running or importing the published CLI entrypoint.
Impact
Unknown; the inspected evidence does not establish harmful effects.
Mechanism
The entrypoint starts with a large obfuscated wrapper, which prevents dependable static behavior tracing from the inspected bytes.
AI rationale
Obfuscation in the shipped executable and MCP bundle prevents reliable tracing of their behavior, leaving a real unresolved runtime risk. The inspected source does not establish a concrete attack or a malicious lifecycle chain, so this warrants a warning rather than a block.
Evidence
dist/index.cjsdist/mcp.cjspackage.json
Network endpoints1
memory.whalent.com
Decision evidence
public snapshotAI called this Suspicious at 73.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The CLI entrypoint is heavily obfuscated, preventing reliable static tracing of its behavior.
- The MCP bundle is also obfuscated; a visible CLI configuration uses Whalent’s platform host and accepts a token argument.
- The manifest identifies a build script that can disable obfuscation, but the published entrypoint remains obfuscated.
Evidence against
- The manifest has no preinstall, install, or postinstall hook; its only publish lifecycle hook is prepublishOnly.
- The visible MCP CLI configuration points to the package’s Whalent platform host.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
7 flagged · loading sourcedist/mcp.cjsView file
1#!/usr/bin/env node
L2: 'use strict';var a0_0xeb5671=a0_0xf006;(function(_0x55bcfb,_0x323dcf){var _0x168c1e=a0_0xf006,_0x1d4775=_0x55bcfb();while(!![]){try{var _0x14ff66=parseInt(_0x168c1e(0x2e3))/0x1+par...
L3: || (${_0x4b8e48} == "string" && ${_0x1ea01c} && ${_0x1ea01c} == +${_0x1ea01c})`)[_0x26e8ee(0x1e6f)](_0x4bf79d,(0x0,_0x3dcaa5['_'])`+${_0x1ea01c}`);return;case _0x26e8ee(0x23cb):_0x...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/mcp.cjsView on unpkg4|| (${_0x4b8e48} === "string" && ${_0x1ea01c} && ${_0x1ea01c} == +${_0x1ea01c} && !(${_0x1ea01c} % 1))`)[_0x26e8ee(0x1e6f)](_0x4bf79d,(0x0,_0x3dcaa5['_'])`+${_0x1ea01c}`);return;ca...
L5: || ${_0x4b8e48} === "boolean" || ${_0x1ea01c} === null`)[_0x26e8ee(0x1e6f)](_0x4bf79d,(0x0,_0x3dcaa5['_'])`[${_0x1ea01c}]`);}}}function _0x2bfc3c({gen:_0x27845a,parentData:_0x3154a...
L6: missingProperty: ${_0x11aabc},
Medium
Findings
3 High7 Medium7 Low
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @whalent/agent@0.3.501.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.501 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.