registry / @whalent/agent / 0.3.514
@whalent/agent@0.3.514
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package exposes heavily obfuscated runtime bundles, and static inspection did not resolve their behavior well enough to establish a concrete attack. The manifest shows only a build-time prepublishOnly hook and declares an obfuscation tool, so the evidence supports a warning rather than a publish block.
Static reason
One or more suspicious static signals were detected.
Trigger
Launching a packaged CLI command or loading the package entry point.
Impact
No harmful effect was confirmed; the obfuscation prevents a reliable assessment of the shipped behavior.
Mechanism
Opaque string-table decoding and computed names obscure runtime code paths.
AI rationale
The package exposes heavily obfuscated runtime bundles, and static inspection did not resolve their behavior well enough to establish a concrete attack. The manifest shows only a build-time prepublishOnly hook and declares an obfuscation tool, so the evidence supports a warning rather than a publish block.
Evidence
package.jsondist/index.cjsdist/mcp.cjs
Decision evidence
public snapshotAI called this Suspicious at 74.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package exposes dist/index.cjs as its main entry point and three CLI commands.
- The shipped entry point and MCP bundle begin with opaque string-table decoder code, which limits review of their runtime behavior.
- The manifest lists a JavaScript obfuscation tool as a development dependency, so the obfuscation may be intentional.
- The only manifest lifecycle hook is prepublishOnly, which runs the build script.
Evidence against
- The manifest does not show a preinstall, install, or postinstall hook; its prepublishOnly hook runs a build command.
- The manifest’s obfuscation dependency offers a benign explanation for the opaque output, but does not resolve what the shipped code does.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
Source & flagged code
7 flagged · loading sourcedist/mcp.cjsView file
1#!/usr/bin/env node
L2: 'use strict';var a0_0x384162=a0_0x2739;(function(_0x42b6ac,_0x239cb5){var _0x129e16=a0_0x2739,_0x239b2a=_0x42b6ac();while(!![]){try{var _0x2d8ae6=parseInt(_0x129e16(0xf10))/0x1+-pa...
L3: || (${_0x4ce89a} == "string" && ${_0x7c555b} && ${_0x7c555b} == +${_0x7c555b})`)[_0x4f3b76(0xe1a)](_0x1b3d3a,(0x0,_0x3a3d42['_'])`+${_0x7c555b}`);return;case _0x4f3b76(0x119f):_0x4...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/mcp.cjsView on unpkg4|| (${_0x4ce89a} === "string" && ${_0x7c555b} && ${_0x7c555b} == +${_0x7c555b} && !(${_0x7c555b} % 1))`)[_0x4f3b76(0xe1a)](_0x1b3d3a,(0x0,_0x3a3d42['_'])`+${_0x7c555b}`);return;cas...
L5: || ${_0x4ce89a} === "boolean" || ${_0x7c555b} === null`)[_0x4f3b76(0xe1a)](_0x1b3d3a,(0x0,_0x3a3d42['_'])`[${_0x7c555b}]`);}}}function _0x145285({gen:_0x4758b6,parentData:_0xde9263...
L6: missingProperty: ${_0xc95379},
Medium
Findings
3 High7 Medium7 Low
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @whalent/agent@0.3.514.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.514 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.