registry / @yeaft/webchat-agent / 1.0.126

@yeaft/webchat-agent@1.0.126

⚠ Under review

Remote worker agent for Yeaft Web Code Agent — connects the native Yeaft engine, CLI providers, and workbench tools

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 230 file(s), 2.61 MB of source, external domains: api.anthropic.com, api.deepseek.com, api.github.com, api.githubcopilot.com, api.openai.com, api.tavily.com, duckduckgo.com, generativelanguage.googleapis.com, github.com, html.duckduckgo.com, models.dev, nodejs.org, registry.npmjs.org, tavily.com, www.apple.com, www.bing.com

Source & flagged code

7 flagged

connection/upgrade.jsView file

Lines 1-48javascript

1import { execFile, execFileSync, spawn } from 'child_process';

2import { writeFileSync, mkdirSync, existsSync, cpSync } from 'fs';

High

Child Process

Package source references child process execution.

connection/upgrade.jsView on unpkg · L1

3import { join, dirname } from 'path';

4import { fileURLToPath } from 'url';

5import { platform, homedir } from 'os';

6import ctx from '../context.js';

7import { getConfigDir, getServiceName, getPm2AppName, getLaunchdPlistPath, DEFAULT_INSTANCE_ID } from '../service.js';

8import { sendToServer } from './buffer.js';

9import { stopAgentHeartbeat } from './heartbeat.js';

11/**

12 * Resolve the local service instance id for this running agent. Each agent

13 * process is pinned to one instance (set in index.js from

14 * YEAFT_AGENT_INSTANCE / config), so the upgrade flow must target THAT

15 * instance's service unit — not the bare `yeaft-agent` default. Without this,

16 * a named instance (e.g. `server-e7a9eb`) installs the new package but its

17 * systemd unit `yeaft-agent@server-e7a9eb` is never restarted, leaving the

18 * agent permanently offline after a UI-triggered upgrade.

19 */

20export function resolveInstanceId() {

21 return ctx.CONFIG?.instanceId || process.env.YEAFT_AGENT_INSTANCE || DEFAULT_INSTANCE_ID;

22}

24// Derive absolute paths for npm/pm2 from current node executable.

25// In launchd/systemd environments, PATH may not include nvm/node dirs,

26// but process.execPath always points to the running node binary.

27const nodeBinDir = dirname(process.execPath);

28const isWin = platform() === 'win32';

29// Windows: use bare 'npm'/'pm2' + shell:true — cmd.exe finds them via PATH.

30// This was the working pattern before ce58bbc. Absolute paths break when

High

Shell

Package source references shell execution.

connection/upgrade.jsView on unpkg · L28

31// the path contains spaces (e.g., "C:\Program Files\nodejs\npm.cmd").

32// macOS/Linux: use absolute path — launchd/systemd have minimal PATH.

33const npmPath = isWin ? 'npm' : join(nodeBinDir, 'npm');

34const pm2Path = isWin ? 'pm2' : join(nodeBinDir, 'pm2');

35const shellOpt = isWin ? { shell: true, windowsHide: true } : {};

37// Ensure PATH includes nodeBinDir so that `#!/usr/bin/env node` shebangs

38// can locate node in launchd/systemd environments with minimal PATH.

39const currentPath = process.env.PATH || '/usr/bin:/bin:/usr/sbin:/sbin';

40const safePath = currentPath.includes(nodeBinDir) ? currentPath : `${nodeBinDir}:${currentPath}`;

41const safeEnv = { ...process.env, PATH: safePath };

42export const PUBLIC_NPM_REGISTRY = 'https://registry.npmjs.org/';

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

connection/upgrade.jsView on unpkg · L1

44/**

45 * Build an npm metadata query that bypasses stale local metadata and registry

46 * mirrors. Upgrade decisions must use the package actually published to the

47 * public registry, not a cached `latest` value from a previous release.

48 */

•matchType = previous_version_dangerous_delta matchedPackage = @yeaft/webchat-agent@1.0.118 matchedIdentity = npm:QHllYWZ0L3dlYmNoYXQtYWdlbnQ:1.0.118 similarity = 0.933 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

connection/upgrade.jsView on unpkg

connection/upgrade-worker-template.jsView file

Lines 1-21javascript

1'use strict';

2const fs = require('fs');

3const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

connection/upgrade-worker-template.jsView on unpkg · L1

4const zlib

yeaft/tools/js-repl.jsView file

Lines 1-21javascript

1/**

2 * js-repl.js — JavaScript REPL for evaluating expressions.

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

yeaft/tools/js-repl.jsView on unpkg · L1

3 *

4 * Runs JavaScript code in a persistent VM context, allowing

5 * state to be maintained across calls.

6 *

7 * task-333b: merged the former `JsReplReset` tool into this one as a

8 * `reset: true` parameter. A single tool with a reset flag eliminates a

9 * duplicate schema entry in the function-call catalogue. The old

cli.jsView file

Lines 456-496javascript

456 }

457}

458

459function upgrade() {

460 console.log(`Current version: ${pkg.version}`);

461 console.log('Checking for updates...');

462

463 try {

464

Source & flagged code

7 flagged · loading source

connection/upgrade.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

connection/upgrade.jsView on unpkg

1import { execFile, execFileSync, spawn } from 'child_process'; L2: import { writeFileSync, mkdirSync, existsSync, cpSync } from 'fs';

High

Child Process

Package source references child process execution.

connection/upgrade.jsView on unpkg · L1

28const isWin = platform() === 'win32'; L29: // Windows: use bare 'npm'/'pm2' + shell:true — cmd.exe finds them via PATH. L30: // This was the working pattern before ce58bbc. Absolute paths break when

High

Shell

Package source references shell execution.

connection/upgrade.jsView on unpkg · L28

1import { execFile, execFileSync, spawn } from 'child_process'; L2: import { writeFileSync, mkdirSync, existsSync, cpSync } from 'fs'; ... L20: export function resolveInstanceId() { L21: return ctx.CONFIG?.instanceId || process.env.YEAFT_AGENT_INSTANCE || DEFAULT_INSTANCE_ID; L22: } ... L28: const isWin = platform() === 'win32'; L29: // Windows: use bare 'npm'/'pm2' + shell:true — cmd.exe finds them via PATH. L30: // This was the working pattern before ce58bbc. Absolute paths break when ... L41: const safeEnv = { ...process.env, PATH: safePath }; L42: export const PUBLIC_NPM_REGISTRY = 'https://registry.npmjs.org/'; L43: ... L74: // Shared cleanup logic for restart/upgrade

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

connection/upgrade.jsView on unpkg · L1

connection/upgrade-worker-template.jsView file

1'use strict'; L2: const fs = require('fs'); L3: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

connection/upgrade-worker-template.jsView on unpkg · L1

yeaft/tools/js-repl.jsView file

1/** L2: * js-repl.js — JavaScript REPL for evaluating expressions.

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

yeaft/tools/js-repl.jsView on unpkg · L1

cli.jsView file

476} else { L477: execSync(`npm install -g ${pkg.name}@latest`, { stdio: 'inherit' }); L478: console.log(`Successfully upgraded to ${latest}`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

cli.jsView on unpkg · L476

Findings

1 Critical3 High6 Medium4 Low

CriticalPrevious Version Dangerous Deltaconnection/upgrade.js

HighChild Processconnection/upgrade.js

HighShellconnection/upgrade.js

HighRuntime Package Installcli.js

MediumDynamic Requireconnection/upgrade-worker-template.js

MediumUnsafe Vm Contextyeaft/tools/js-repl.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistenceconnection/upgrade.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

connection/upgrade.jsView file

Lines 1-48javascript

1import { execFile, execFileSync, spawn } from 'child_process';

2import { writeFileSync, mkdirSync, existsSync, cpSync } from 'fs';

High

Child Process

Package source references child process execution.

connection/upgrade.jsView on unpkg · L1

3import { join, dirname } from 'path';

4import { fileURLToPath } from 'url';

5import { platform, homedir } from 'os';

6import ctx from '../context.js';

7import { getConfigDir, getServiceName, getPm2AppName, getLaunchdPlistPath, DEFAULT_INSTANCE_ID } from '../service.js';

8import { sendToServer } from './buffer.js';

9import { stopAgentHeartbeat } from './heartbeat.js';

11/**

12 * Resolve the local service instance id for this running agent. Each agent

13 * process is pinned to one instance (set in index.js from

14 * YEAFT_AGENT_INSTANCE / config), so the upgrade flow must target THAT

15 * instance's service unit — not the bare `yeaft-agent` default. Without this,

16 * a named instance (e.g. `server-e7a9eb`) installs the new package but its

17 * systemd unit `yeaft-agent@server-e7a9eb` is never restarted, leaving the

18 * agent permanently offline after a UI-triggered upgrade.

19 */

20export function resolveInstanceId() {

21 return ctx.CONFIG?.instanceId || process.env.YEAFT_AGENT_INSTANCE || DEFAULT_INSTANCE_ID;

22}

24// Derive absolute paths for npm/pm2 from current node executable.

25// In launchd/systemd environments, PATH may not include nvm/node dirs,

26// but process.execPath always points to the running node binary.

27const nodeBinDir = dirname(process.execPath);

28const isWin = platform() === 'win32';

29// Windows: use bare 'npm'/'pm2' + shell:true — cmd.exe finds them via PATH.

30// This was the working pattern before ce58bbc. Absolute paths break when

High

Shell

Package source references shell execution.

connection/upgrade.jsView on unpkg · L28

31// the path contains spaces (e.g., "C:\Program Files\nodejs\npm.cmd").

32// macOS/Linux: use absolute path — launchd/systemd have minimal PATH.

33const npmPath = isWin ? 'npm' : join(nodeBinDir, 'npm');

34const pm2Path = isWin ? 'pm2' : join(nodeBinDir, 'pm2');

35const shellOpt = isWin ? { shell: true, windowsHide: true } : {};

37// Ensure PATH includes nodeBinDir so that `#!/usr/bin/env node` shebangs

38// can locate node in launchd/systemd environments with minimal PATH.

39const currentPath = process.env.PATH || '/usr/bin:/bin:/usr/sbin:/sbin';

40const safePath = currentPath.includes(nodeBinDir) ? currentPath : `${nodeBinDir}:${currentPath}`;

41const safeEnv = { ...process.env, PATH: safePath };

42export const PUBLIC_NPM_REGISTRY = 'https://registry.npmjs.org/';

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

connection/upgrade.jsView on unpkg · L1

44/**

45 * Build an npm metadata query that bypasses stale local metadata and registry

46 * mirrors. Upgrade decisions must use the package actually published to the

47 * public registry, not a cached `latest` value from a previous release.

48 */

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

connection/upgrade.jsView on unpkg

connection/upgrade-worker-template.jsView file

Lines 1-21javascript

1'use strict';

2const fs = require('fs');

3const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

connection/upgrade-worker-template.jsView on unpkg · L1

4const zlib

yeaft/tools/js-repl.jsView file

Lines 1-21javascript

1/**

2 * js-repl.js — JavaScript REPL for evaluating expressions.

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

yeaft/tools/js-repl.jsView on unpkg · L1

3 *

4 * Runs JavaScript code in a persistent VM context, allowing

5 * state to be maintained across calls.

6 *

7 * task-333b: merged the former `JsReplReset` tool into this one as a

8 * `reset: true` parameter. A single tool with a reset flag eliminates a

9 * duplicate schema entry in the function-call catalogue. The old

cli.jsView file

Lines 456-496javascript

456 }

457}

458

459function upgrade() {

460 console.log(`Current version: ${pkg.version}`);

461 console.log('Checking for updates...');

462

463 try {

464