52After pairing, the token is persisted and subsequent starts auto-reconnect; on token invalidation
L53: (app unbind/delete) the local token is cleared and the agent exits.`,pairingCode:"[AgentHubAgent] pairing code: {{code}}",pairingExpires:"[AgentHubAgent] expires at {{time}}, waiti...
L54: `),g=d.slice(0,-1);this.buffers.set(e,d.at(-1)??"");let p=null,b=null,w=null,x=0;for(let h of g){let S=h.trim();if(S){x++;try{let _=JSON.parse(S),ct=this.classifyLine(_,e);ct&&(p=c...
HighChild Process
Package source references child process execution.
dist-publish/main.jsView on unpkg · L52 52After pairing, the token is persisted and subsequent starts auto-reconnect; on token invalidation
L53: (app unbind/delete) the local token is cleared and the agent exits.`,pairingCode:"[AgentHubAgent] pairing code: {{code}}",pairingExpires:"[AgentHubAgent] expires at {{time}}, waiti...
L54: `),g=d.slice(0,-1);this.buffers.set(e,d.at(-1)??"");let p=null,b=null,w=null,x=0;for(let h of g){let S=h.trim();if(S){x++;try{let _=JSON.parse(S),ct=this.classifyLine(_,e);ct&&(p=c...
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist-publish/main.jsView on unpkg · L52 52After pairing, the token is persisted and subsequent starts auto-reconnect; on token invalidation
L53: (app unbind/delete) the local token is cleared and the agent exits.`,pairingCode:"[AgentHubAgent] pairing code: {{code}}",pairingExpires:"[AgentHubAgent] expires at {{time}}, waiti...
L54: `),g=d.slice(0,-1);this.buffers.set(e,d.at(-1)??"");let p=null,b=null,w=null,x=0;for(let h of g){let S=h.trim();if(S){x++;try{let _=JSON.parse(S),ct=this.classifyLine(_,e);ct&&(p=c...
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist-publish/main.jsView on unpkg · L52 52Trigger-reachable command-output exfiltration chain: manifest.main -> dist-publish/main.js
L52: After pairing, the token is persisted and subsequent starts auto-reconnect; on token invalidation
L53: (app unbind/delete) the local token is cleared and the agent exits.`,pairingCode:"[AgentHubAgent] pairing code: {{code}}",pairingExpires:"[AgentHubAgent] expires at {{time}}, waiti...
L54: `),g=d.slice(0,-1);this.buffers.set(e,d.at(-1)??"");let p=null,b=null,w=null,x=0;for(let h of g){let S=h.trim();if(S){x++;try{let _=JSON.parse(S),ct=this.classifyLine(_,e);ct&&(p=c...
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist-publish/main.jsView on unpkg · L52 1Trigger-reachable persistence chain: manifest.main -> dist-publish/main.js
L1: #!/usr/bin/env node
L2: var Ps=Object.defineProperty;var I=(s,e,t)=>()=>{if(t)throw t[0];try{return s&&(e=s(s=0)),e}catch(r){throw t=[r],r}};var ut=(s,e)=>{for(var t in e)Ps(s,t,{get:e[t],enumerable:!0})}...
L3:
...
L52: After pairing, the token is persisted and subsequent starts auto-reconnect; on token invalidation
L53: (app unbind/delete) the local token is cleared and the agent exits.`,pairingCode:"[AgentHubAgent] pairing code: {{code}}",pairingExpires:"[AgentHubAgent] expires at {{time}}, waiti...
L54: `),g=d.slice(0,-1);this.buffers.set(e,d.at(-1)??"");let p=null,b=null,w=null,x=0;for(let h of g){let S=h.trim();if(S){x++;try{let _=JSON.parse(S),ct=this.classifyLine(_,e);ct&&(p=c...
L55: `);i>0&&c.shift();
HighTrigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist-publish/main.jsView on unpkg · L1 •stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist-publish/main.jsView on unpkg 1#!/usr/bin/env node
L2: var Ps=Object.defineProperty;var I=(s,e,t)=>()=>{if(t)throw t[0];try{return s&&(e=s(s=0)),e}catch(r){throw t=[r],r}};var ut=(s,e)=>{for(var t in e)Ps(s,t,{get:e[t],enumerable:!0})}...
L3:
...
L52: After pairing, the token is persisted and subsequent starts auto-reconnect; on token invalidation
L53: (app unbind/delete) the local token is cleared and the agent exits.`,pairingCode:"[AgentHubAgent] pairing code: {{code}}",pairingExpires:"[AgentHubAgent] expires at {{time}}, waiti...
L54: `),g=d.slice(0,-1);this.buffers.set(e,d.at(-1)??"");let p=null,b=null,w=null,x=0;for(let h of g){let S=h.trim();if(S){x++;try{let _=JSON.parse(S),ct=this.classifyLine(_,e);ct&&(p=c...
L55: `);i>0&&c.shift();for(let d=c.length-1;d>=0;d--){let g=c[d];if(!g)continue;let p=g.match(/"cw
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
dist-publish/main.jsView on unpkg · L1