registry / @yeaft/webchat-agent / 1.0.467
@yeaft/webchat-agent@1.0.467
Remote worker agent for Yeaft Web Code Agent — connects the native Yeaft engine, CLI providers, and workbench tools
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis completed at 97.0% confidence. No malicious behavior was detected; 22 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationProtestwareUrlStrings
Oversized source lightweight scan
local-runtime/web/mermaid.min.js2.75 MB file, sampled 256 KB
ChildProcessHighEntropyStringsMinifiedUrlStringsen.wikipedia.orgengelschall.comgithub.comjquery.orglodash.comopenjsf.orgopensource.orgtldrlegal.comunderscorejs.orgwww.w3.org
Source & flagged code
14 flagged · loading sourcewindows-upgrade-runner.jsView file
1import { appendFileSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
L2: import { spawn } from 'node:child_process';
L3: import { dirname } from 'node:path';
High
Child Process
Package source references child process execution.
windows-upgrade-runner.jsView on unpkg · L1connection/upgrade.jsView file
42const isWin = platform() === 'win32';
L43: // Windows: use bare 'npm'/'pm2' + shell:true — cmd.exe finds them via PATH.
L44: // This was the working pattern before ce58bbc. Absolute paths break when
High
1Trigger-reachable persistence chain: scripts.start -> index.js -> connection.js -> connection/index.js -> connection/upgrade.js
L1: import { execFile, execFileSync, spawn } from 'child_process';
L2: import { writeFileSync, mkdirSync, existsSync } from 'fs';
...
L34: export function resolveInstanceId() {
L35: return ctx.CONFIG?.instanceId || process.env.YEAFT_AGENT_INSTANCE || DEFAULT_INSTANCE_ID;
L36: }
...
L42: const isWin = platform() === 'win32';
L43: // Windows: use bare 'npm'/'pm2' + shell:true — cmd.exe finds them via PATH.
L44: // This was the working pattern before ce58bbc. Absolute paths break when
...
L65: // Shared cleanup logic for restart/upgrade
L66: function cleanupAndExit(exitCode) {
L67: setTimeout(async () => {
...
L421: const serviceName = getServiceName(instanceId);
High
Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
connection/upgrade.jsView on unpkg · L11import { execFile, execFileSync, spawn } from 'child_process';
L2: import { writeFileSync, mkdirSync, existsSync } from 'fs';
...
L34: export function resolveInstanceId() {
L35: return ctx.CONFIG?.instanceId || process.env.YEAFT_AGENT_INSTANCE || DEFAULT_INSTANCE_ID;
L36: }
...
L42: const isWin = platform() === 'win32';
L43: // Windows: use bare 'npm'/'pm2' + shell:true — cmd.exe finds them via PATH.
L44: // This was the working pattern before ce58bbc. Absolute paths break when
...
L65: // Shared cleanup logic for restart/upgrade
L66: function cleanupAndExit(exitCode) {
L67: setTimeout(async () => {
...
L421: const serviceName = getServiceName(instanceId);
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
connection/upgrade.jsView on unpkg · L1local-runtime/web/jszip.min.jsView file
12L13: !function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?...
Low
Eval
Package source references a known benign dynamic code generation pattern.
local-runtime/web/jszip.min.jsView on unpkg · L12local-runtime/web/docx-preview.min.jsView file
1!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("jszip")):"function"==typeof define&&define.amd?define(["exports","jszip"],t):t((e="undefined"...
L2: //# sourceMappingURL=docx-preview.min.js.map
Medium
Dynamic Require
Package source references dynamic require/import behavior.
local-runtime/web/docx-preview.min.jsView on unpkg · L1yeaft/tools/js-repl.jsView file
1/**
L2: * js-repl.js — JavaScript REPL for evaluating expressions.
Medium
Unsafe Vm Context
Package source executes code through a VM context API.
yeaft/tools/js-repl.jsView on unpkg · L1local-runtime/server/browser-runtime-routes.jsView file
23function scopeUsername({ ownerUserId, agentId, browserSessionId, peerId, connectionGeneration, endpointRole, expiresAt }) {
L24: const scope = Buffer.from(JSON.stringify({
L25: ownerUserId,
Low
Weak Crypto
Package source references weak cryptographic algorithms.
local-runtime/server/browser-runtime-routes.jsView on unpkg · L23local-run.jsView file
1import { spawn } from 'child_process';
L2: import { existsSync } from 'fs';
L3: import { homedir } from 'os';
L4: import { createServer } from 'net';
L5: import { dirname, join } from 'path';
...
L12:
L13: export function parseLocalArgs(args, env = process.env) {
L14: const options = {
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
local-run.jsView on unpkg · L1browser-runtime/windows-version-job.ps1View file
•path = browser-runtime/windows-version-job.ps1
kind = build_helper
sizeBytes = 8589
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
browser-runtime/windows-version-job.ps1View on unpkglocal-runtime/web/xlsx.min.js.gzView file
•path = local-runtime/web/xlsx.min.js.gz
kind = high_entropy_blob
sizeBytes = 335014
magicHex = [redacted]
High
Ships High Entropy Blob
Package ships high-entropy non-source blobs.
local-runtime/web/xlsx.min.js.gzView on unpkg•path = local-runtime/web/xlsx.min.js.gz
kind = compressed_blob
sizeBytes = 335014
magicHex = [redacted]
Medium
Ships Compressed Blob
Package ships compressed or archive-like blobs.
local-runtime/web/xlsx.min.js.gzView on unpkgcontainer-cli.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
container-cli.js#virtual:normalized:round1View on unpkglocal-runtime/web/mermaid.min.jsView file
•matchType = normalized_sha256
matchedPackage = bmad-speckit-sdd-flow@2.1.12
matchedPath = _bmad/skills/requirements-contract-[redacted].min.js
matchedIdentity = npm:Ym1hZC1zcGVja2l0LXNkZC1mbG93:2.1.12
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
local-runtime/web/mermaid.min.jsView on unpkgFindings
7 High9 Medium6 Low
HighChild Processwindows-upgrade-runner.js
HighShellconnection/upgrade.js
HighSame File Env Network Executionlocal-run.js
HighTrigger Reachable Persistenceconnection/upgrade.js
HighShips High Entropy Bloblocal-runtime/web/xlsx.min.js.gz
HighSemantic Analysis Limitedcontainer-cli.js#virtual:normalized:round1
HighKnown Malware Source Similaritylocal-runtime/web/mermaid.min.js
MediumDynamic Requirelocal-runtime/web/docx-preview.min.js
MediumUnsafe Vm Contextyeaft/tools/js-repl.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceconnection/upgrade.js
MediumProtestware
MediumShips Build Helperbrowser-runtime/windows-version-job.ps1
MediumShips Compressed Bloblocal-runtime/web/xlsx.min.js.gz
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvallocal-runtime/web/jszip.min.js
LowWeak Cryptolocal-runtime/server/browser-runtime-routes.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @yeaft/webchat-agent@1.0.467.
See all versions of @yeaft/webchat-agent for other recorded verdicts.
- Review the evidence and your use of @yeaft/webchat-agent@1.0.467 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.