registry / @whalent/agent / 0.3.507
@whalent/agent@0.3.507
⚠ Under reviewStable wrapper for Whalent Agent core runtime
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe manifest has no automatic install hook, and the inspected source does not establish a concrete attack. Obfuscated runtime code and a very large core bundle leave material behavior unresolved, so manual review is appropriate.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the CLI entrypoint.
Impact
Unknown; source inspection did not establish an attack or its effects.
Mechanism
The wrapper launches a separate core script and performs a runtime package-version check; obfuscated code prevents resolving the full behavior.
AI rationale
The manifest has no automatic install hook, and the inspected source does not establish a concrete attack. Obfuscated runtime code and a very large core bundle leave material behavior unresolved, so manual review is appropriate.
Decision evidence
public snapshotAI called this Manual Review at 88.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The CLI entrypoint uses a rotated string table and heavily obfuscated identifiers.
- The wrapper checks for a newer package version during runtime, but the obfuscated implementation leaves the update effects unresolved.
- The CLI launches a separate core script, whose behavior could not be fully resolved from the available source excerpts.
- The MCP bundle also contains obfuscated dynamic function generation; its full behavior remains unresolved.
Evidence against
- The manifest declares only a prepublishOnly build script, with no preinstall, install, or postinstall hook.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
7 flagged · loading sourcedist/mcp.cjsView file
1#!/usr/bin/env node
L2: 'use strict';var a0_0x1a4bd7=a0_0x1d18;(function(_0x2ee73a,_0x55e7a5){var _0x33ccbe=a0_0x1d18,_0x4ea0fe=_0x2ee73a();while(!![]){try{var _0x259bff=-parseInt(_0x33ccbe(0x1d1))/0x1*(p...
L3: || (${_0x40d441} == "string" && ${_0x9ff7c4} && ${_0x9ff7c4} == +${_0x9ff7c4})`)['assign'](_0x211eba,(0x0,_0x114cd5['_'])`+${_0x9ff7c4}`);return;case'integer':_0x21aa75[_0x352123(0...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/mcp.cjsView on unpkg4|| (${_0x40d441} === "string" && ${_0x9ff7c4} && ${_0x9ff7c4} == +${_0x9ff7c4} && !(${_0x9ff7c4} % 1))`)[_0x352123(0x187f)](_0x211eba,(0x0,_0x114cd5['_'])`+${_0x9ff7c4}`);return;ca...
L5: || ${_0x40d441} === "boolean" || ${_0x9ff7c4} === null`)['assign'](_0x211eba,(0x0,_0x114cd5['_'])`[${_0x9ff7c4}]`);}}}function _0x787047({gen:_0x3da823,parentData:_0x6ab910,parentD...
L6: missingProperty: ${_0x433a10},
Medium
Findings
3 High7 Medium7 Low
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @whalent/agent@0.3.507.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.507 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.