registry / @whalent/agent / 0.3.509
@whalent/agent@0.3.509
⚠ Under reviewStable wrapper for Whalent Agent core runtime
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe manifest shows no install-time execution hook, but obfuscated runtime and agent-integration paths prevent resolving behavior and consent. Manual review is warranted without a confirmed attack.
Static reason
One or more suspicious static signals were detected.
Trigger
Unknown; no npm install lifecycle trigger was found.
Impact
Potential runtime effects could not be determined from the inspected source.
Mechanism
The CLI and MCP bundles obscure behavior and activation paths, including a skill-file writer helper.
AI rationale
The manifest shows no install-time execution hook, but obfuscated runtime and agent-integration paths prevent resolving behavior and consent. Manual review is warranted without a confirmed attack.
Evidence
dist/index.cjsdist/mcp.cjs
Decision evidence
public snapshotAI called this Manual Review at 65.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json exposes a CLI and lists `prepublishOnly` as a build command, with no npm install lifecycle hook.
- dist/index.cjs parses command-line arguments, but its obfuscated dispatch does not make the runtime behavior clear.
- dist/mcp.cjs selects agent directories and contains a skill-file writer helper; its caller and consent path remain unresolved.
Evidence against
- The manifest shows no `preinstall`, `install`, or `postinstall` hook.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Oversized source lightweight scan
Source & flagged code
8 flagged · loading sourcedist/mcp.cjsView file
4|| (${_0x36178c} === "string" && ${_0x31b9b2} && ${_0x31b9b2} == +${_0x31b9b2} && !(${_0x31b9b2} % 1))`)[_0x5848fb(0x2202)](_0xf225e,(0x0,_0x2198b1['_'])`+${_0x31b9b2}`);return;cas...
L5: || ${_0x36178c} === "boolean" || ${_0x31b9b2} === null`)['assign'](_0xf225e,(0x0,_0x2198b1['_'])`[${_0x31b9b2}]`);}}}function _0x26873a({gen:_0x2afcf5,parentData:_0xb8e8c9,parentDa...
L6: missingProperty: ${_0x2d820a},
L7: depsCount: ${_0xdbb9c7},
L8: deps: ${_0x13008b}}`};var _0x138f4e={'keyword':_0x5615f6(0x1692),'type':'object','schemaType':_0x5615f6(0x1802),'error':_0x408c60['error'],'code'(_0x30dc2a){const [_0x560ad5,_0x25b...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/mcp.cjsView on unpkg · L41#!/usr/bin/env node
L2: 'use strict';var a0_0x52a1c9=a0_0x485b;(function(_0x47dad5,_0x2384a4){var _0x2321e7=a0_0x485b,_0x3e426c=_0x47dad5();while(!![]){try{var _0x27e21a=parseInt(_0x2321e7(0x213d))/0x1+pa...
L3: || (${_0x36178c} == "string" && ${_0x31b9b2} && ${_0x31b9b2} == +${_0x31b9b2})`)['assign'](_0xf225e,(0x0,_0x2198b1['_'])`+${_0x31b9b2}`);return;case _0x5848fb(0x19ff):_0x3ec4a3[_0x...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•
Findings
4 High7 Medium7 Low
HighSame File Env Network Executiondist/mcp.cjs
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/mcp.cjs
LowFilesystem
Affected versions and remediation
This report applies to @whalent/agent@0.3.509.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.509 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.