registry / @wrongstack/tools / 0.291.0

@wrongstack/tools@0.291.0

WrongStack built-in tools: read/write/edit, bash/exec, grep/glob, git, fetch, test, lint, and more.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 54 file(s), 4.12 MB of source, external domains: 127.0.0.1, duckduckgo.com, lite.duckduckgo.com, wrongstack.com, www.bing.com, www.google.com

Source & flagged code

1 flagged

dist/pack.jsView file

7067package = @wrongstack/tools; repositoryIdentity = wrongstack; dependency = @playwright/test L7067: try { L7068: const { chromium } = await import("@playwright/test"); L7069: return await chromium.launch({ headless });

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/pack.jsView on unpkg · L7067

Source & flagged code

1 flagged · loading source

dist/pack.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code