registry / @whalent/agent / 0.3.513
@whalent/agent@0.3.513
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe executable entrypoint and bundled module are substantially obfuscated, and the entrypoint references child_process through a dynamically assembled import. The inspected excerpts do not establish an attack chain, so this remains an unresolved risk rather than a confirmed malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
Running a package command that invokes dist/index.cjs.
Impact
Potential behavior cannot be determined from the inspected excerpts, so a concrete impact is unconfirmed.
Mechanism
The entrypoint uses obfuscated code and a dynamically assembled child_process import; the available excerpts do not establish what commands or data flows follow.
AI rationale
The executable entrypoint and bundled module are substantially obfuscated, and the entrypoint references child_process through a dynamically assembled import. The inspected excerpts do not establish an attack chain, so this remains an unresolved risk rather than a confirmed malicious behavior.
Evidence
dist/index.cjsdist/mcp.cjs
Decision evidence
public snapshotAI called this Suspicious at 77.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The manifest exposes dist/index.cjs as the package entrypoint and three executable commands.
- The entrypoint uses heavily obfuscated identifiers and dynamically constructs a child_process module name.
- The bundled dist/mcp.cjs also begins with an obfuscated wrapper; its large size and obfuscation prevent resolving the flagged loader behavior from bounded excerpts.
- The visible new Function call in dist/mcp.cjs is in bundled schema-validation code, but that does not resolve the separate obfuscated behavior.
Evidence against
- The only manifest lifecycle script is prepublishOnly, which runs a build; no install hook is declared.
- The visible dynamic code generation excerpt is consistent with bundled schema validation and does not itself establish an attack.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinified
Source & flagged code
7 flagged · loading sourcedist/mcp.cjsView file
1#!/usr/bin/env node
L2: 'use strict';var a0_0x2b4cbb=a0_0x42ab;(function(_0x5ea45e,_0x3381cb){var _0x54e331=a0_0x42ab,_0x284b84=_0x5ea45e();while(!![]){try{var _0x1ff530=parseInt(_0x54e331(0x11da))/0x1+pa...
L3: || (${_0x446a39} == "string" && ${_0x5ad522} && ${_0x5ad522} == +${_0x5ad522})`)['assign'](_0x4d39a9,(0x0,_0x297100['_'])`+${_0x5ad522}`);return;case'integer':_0x522ff2['elseIf']((...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/mcp.cjsView on unpkg4|| (${_0x446a39} === "string" && ${_0x5ad522} && ${_0x5ad522} == +${_0x5ad522} && !(${_0x5ad522} % 1))`)['assign'](_0x4d39a9,(0x0,_0x297100['_'])`+${_0x5ad522}`);return;case'boolea...
L5: || ${_0x446a39} === "boolean" || ${_0x5ad522} === null`)[_0x52324d(0x18a0)](_0x4d39a9,(0x0,_0x297100['_'])`[${_0x5ad522}]`);}}}function _0x40b5bf({gen:_0x4e3c1b,parentData:_0x54d81...
L6: missingProperty: ${_0x37f2e5},
Medium
Findings
3 High7 Medium7 Low
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @whalent/agent@0.3.513.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.513 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.