1import{a as Dm,b as ni,g as Pm}from"./chunk-NW4N67TU.js";import{a as jm,b as _m}from"./chunk-AONY6U45.js";import{b as Im}from"./chunk-S22IBRY6.js";import{C as vm,D as xm,E as Sm,G ...
L2: Computer-use helper \u2192 ${nt(i,Dr)}
...
L5: Starts at login \u2192 ${a.file}${c.map(d=>`
L6: Removes duplicate login item \u2192 ${d.file}`).join("")}`),e.dryRun)return;try{It("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are r...
L7: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
CriticalSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/program-OTENO5DS.jsView on unpkg · L1 •matchType = previous_version_dangerous_delta
matchedPackage = agentix-cli@0.148.0
matchedIdentity = npm:YWdlbnRpeC1jbGk:0.148.0
similarity = 0.975
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/program-OTENO5DS.jsView on unpkg 663\u2713 ${o}`)),n&&console.log(te.dim(` Backup: ${n}`)),console.log(te.dim(` Restart the daemon for a channel change to take effect.
L664: `))}catch(o){console.log(te.red(` ${o?.message??o}`)),process.exit(1)}});import{Command as eE}from"commander";import qo from"chalk";import{readdirSync as ql,statSync as By,unlinkS...
L665: query($q: String!, $cursor: String) {
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/program-OTENO5DS.js:
import{a as Dm,b as ni,g as Pm}from"./chunk-NW4N67TU.js";import{a as jm,b as _m}from"./chunk-AONY6U45.js";import{b as Im}from"./chunk-S22IBRY6.js";import{C as vm,D as xm,E as Sm,G ...
The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login service.`)}finally{Fm(g,{recursive:!0,force:!0})}});Jn.c...
`),{path:t,changed:i,events:r,guardInstalled:!1}}function Ms(e=Ps()){if(!li(e))return!1;try{return!!JSON.parse(di(e,"utf-8"))?.hooks?.Stop?.some?.(o=>ci(o,dc))}catch{return!1}}var ...
`:"")+r.subarray(0,i).toString("utf8")}finally{await t.close()}aw
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/program-OTENO5DS.jsView on unpkg •Runtime or CLI code links a write operation to an explicit external AI-agent control path:
r next login").action(async()=>{ri(),await ac(ii().keep),console.log("desktop assistant stopped.")});jn.command("status").description("show the desktop login service status").action(()=>{ri();let{keep:e}=ii();try{console.log(it("launchctl",["print",ds(e)],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}))}catch{console.log(cc(e.file)?"installed, but not running. run agentx desktop start.":"not installed. run agentx desktop install.")}});import{command as h$}from"commander";import{open as z$}from"fs/promises";import{existssync as li,mkdirsync as u$,readfilesync as di,writefilesync as bm}from"fs";import{homedir as w$}from"os";import{dirname as b$,resolve as lc}from"path";var dc="/attach/",jm="/guard/ch
HighExternal Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/program-OTENO5DS.jsView on unpkg 1Cross-file remote execution chain: dist/program-OTENO5DS.js spawns dist/board-dashboard-VPDXHHWC.js; helper contains network access plus dynamic code execution.
L1: import{a as Dm,b as ni,g as Pm}from"./chunk-NW4N67TU.js";import{a as jm,b as _m}from"./chunk-AONY6U45.js";import{b as Im}from"./chunk-S22IBRY6.js";import{C as vm,D as xm,E as Sm,G ...
L2: Computer-use helper \u2192 ${nt(i,Dr)}
...
L5: Starts at login \u2192 ${a.file}${c.map(d=>`
L6: Removes duplicate login item \u2192 ${d.file}`).join("")}`),e.dryRun)return;try{It("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are r...
L7: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L8: The AgentX daemon and a speech transcription backend must als
HighCross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/program-OTENO5DS.jsView on unpkg · L1 1Trigger-reachable persistence chain: manifest.bin -> dist/cli.js -> dist/program-OTENO5DS.js
L1: import{a as Dm,b as ni,g as Pm}from"./chunk-NW4N67TU.js";import{a as jm,b as _m}from"./chunk-AONY6U45.js";import{b as Im}from"./chunk-S22IBRY6.js";import{C as vm,D as xm,E as Sm,G ...
L2: Computer-use helper \u2192 ${nt(i,Dr)}
...
L5: Starts at login \u2192 ${a.file}${c.map(d=>`
L6: Removes duplicate login item \u2192 ${d.file}`).join("")}`),e.dryRun)return;try{It("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are r...
L7: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L8: The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login servi
HighTrigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/program-OTENO5DS.jsView on unpkg · L1 1import{a as Dm,b as ni,g as Pm}from"./chunk-NW4N67TU.js";import{a as jm,b as _m}from"./chunk-AONY6U45.js";import{b as Im}from"./chunk-S22IBRY6.js";import{C as vm,D as xm,E as Sm,G ...
L2: Computer-use helper \u2192 ${nt(i,Dr)}
...
L5: Starts at login \u2192 ${a.file}${c.map(d=>`
L6: Removes duplicate login item \u2192 ${d.file}`).join("")}`),e.dryRun)return;try{It("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are r...
L7: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L8: The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login service.`)}finally{Fm(g,{recursive:!0,force:!0})}});Jn.c...
L9: `)),{path:o,changed:l,events:a,gua
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/program-OTENO5DS.jsView on unpkg · L1