478sendAttempt,
L479: setExitCode,
L480: settingsFor,
...
L806: while (pos < strLength) {
L807: let value2 = str.charCodeAt(pos++);
L808: if ((value2 & 4294967168) === 0) {
...
L3100: import { dirname, join } from "node:path";
L3101: var providerLogPathFor = /* @__PURE__ */ __name((app, profile, env = process.env) => join(resolvePaths({ appName: app.appName, prefix: app.envPrefix, env }).state, "provider-log", ...
L3102: var PROVIDER_LOG_BYTES = 1024 * 1024;
...
L3332: const data = /* @__PURE__ */ __name((chunk) => {
L3333: buffered += typeof chunk === "string" ? chunk : decoder.write(chunk);
L3334: if (take())
CriticalRemote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/bundle/program-TEIM6RFW.jsView on unpkg · L478 •Trigger-reachable chain: manifest.bin -> dist/bin/max.js -> dist/bundle/max.js -> dist/bundle/program-TEIM6RFW.js
Reachable file contains a blocking source-risk pattern.
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/bundle/program-TEIM6RFW.jsView on unpkg •matchType = previous_version_dangerous_delta
matchedPackage = @wirecat/max-cli@0.97.0
matchedIdentity = npm:QHdpcmVjYXQvbWF4LWNsaQ:0.97.0
similarity = 0.992
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/bundle/program-TEIM6RFW.jsView on unpkg 30913// dist/session/browser.js
L30914: import { spawn as spawn6 } from "node:child_process";
L30915: import { existsSync as existsSync20, mkdtempSync, realpathSync as realpathSync5, rmSync as rmSync7 } from "node:fs";
...
L30921: };
L30922: var WEB_MAX = "https://web.max.ru/";
L30923: var AUTH_KEY = "__oneme_auth";
L30924: var findChromium = /* @__PURE__ */ __name(() => {
L30925: const named2 = process.env.MAX_BROWSER;
L30926: if (named2)
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/bundle/program-TEIM6RFW.jsView on unpkg · L30913 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/bundle/program-TEIM6RFW.js:
writeFileAtomic
import { copyFileSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync2, rmSync, writeFileSync } from "node:fs";
writeFileSync(output, Buffer.concat(agent ? out : [...out, ...err]), { mode: 384 });
writeFileSync(errors, Buffer.concat(err), { mode: 384 });
import { lstatSync, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "node:fs";
writeFileSync2(path, withVersion(readFileSync3(skill, "utf8"), app.version));
var providerIdentity = /* @__PURE__ */ __name((target) => `${target.provider}:${target.baseUrl.replace(/\/+$/, ""
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/bundle/program-TEIM6RFW.jsView on unpkg 478sendAttempt,
L479: setExitCode,
L480: settingsFor,
...
L806: while (pos < strLength) {
L807: let value2 = str.charCodeAt(pos++);
L808: if ((value2 & 4294967168) === 0) {
...
L3100: import { dirname, join } from "node:path";
L3101: var providerLogPathFor = /* @__PURE__ */ __name((app, profile, env = process.env) => join(resolvePaths({ appName: app.appName, prefix: app.envPrefix, env }).state, "provider-log", ...
L3102: var PROVIDER_LOG_BYTES = 1024 * 1024;
...
L3332: const data = /* @__PURE__ */ __name((chunk) => {
L3333: buffered += typeof chunk === "string" ? chunk : decoder.write(chunk);
L3334: if (take())
HighSandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/bundle/program-TEIM6RFW.jsView on unpkg · L478 478Cross-file remote execution chain: dist/bundle/program-TEIM6RFW.js spawns dist/bundle/chunk-2PB6RO4B.js; helper contains network access plus dynamic code execution.
L478: sendAttempt,
L479: setExitCode,
L480: settingsFor,
...
L806: while (pos < strLength) {
L807: let value2 = str.charCodeAt(pos++);
L808: if ((value2 & 4294967168) === 0) {
...
L3100: import { dirname, join } from "node:path";
L3101: var providerLogPathFor = /* @__PURE__ */ __name((app, profile, env = process.env) => join(resolvePaths({ appName: app.appName, prefix: app.envPrefix, env }).state, "provider-log", ...
L3102: var PROVIDER_LOG_BYTES = 1024 * 1024;
...
L3332: const data = /* @__PURE__ */ __name((chunk) => {
L3333: buffered += typeof chunk === "string" ? chunk : decoder.write(chunk);
L3334: if (take())
HighCross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/bundle/program-TEIM6RFW.jsView on unpkg · L478 478Trigger-reachable persistence chain: manifest.bin -> dist/bin/max.js -> dist/bundle/max.js -> dist/bundle/program-TEIM6RFW.js
L478: sendAttempt,
L479: setExitCode,
L480: settingsFor,
...
L806: while (pos < strLength) {
L807: let value2 = str.charCodeAt(pos++);
L808: if ((value2 & 4294967168) === 0) {
...
L3100: import { dirname, join } from "node:path";
L3101: var providerLogPathFor = /* @__PURE__ */ __name((app, profile, env = process.env) => join(resolvePaths({ appName: app.appName, prefix: app.envPrefix, env }).state, "provider-log", ...
L3102: var PROVIDER_LOG_BYTES = 1024 * 1024;
...
L3332: const data = /* @__PURE__ */ __name((chunk) => {
L3333: buffered += typeof chunk === "string" ? chunk : decoder.write(chunk);
L3334: if (take())
HighTrigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/bundle/program-TEIM6RFW.jsView on unpkg · L478 478sendAttempt,
L479: setExitCode,
L480: settingsFor,
...
L806: while (pos < strLength) {
L807: let value2 = str.charCodeAt(pos++);
L808: if ((value2 & 4294967168) === 0) {
...
L3100: import { dirname, join } from "node:path";
L3101: var providerLogPathFor = /* @__PURE__ */ __name((app, profile, env = process.env) => join(resolvePaths({ appName: app.appName, prefix: app.envPrefix, env }).state, "provider-log", ...
L3102: var PROVIDER_LOG_BYTES = 1024 * 1024;
...
L3332: const data = /* @__PURE__ */ __name((chunk) => {
L3333: buffered += typeof chunk === "string" ? chunk : decoder.write(chunk);
L3334: if (take())
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/bundle/program-TEIM6RFW.jsView on unpkg · L478