1import{a as or,b as Vt,g as tr}from"./chunk-VTE7L6LO.js";import{a as Vo,b as Ki,f as Kt,j as er}from"./chunk-UFAGYX73.js";import{a as Qi,c as Xi,d as Zi}from"./chunk-UCQ2N3KO.js";i...
L2: `)),{path:t,changed:l,events:a,guardInstalled:c}}function ar(e={}){let o=e.path??$t();if(!Zt(o))return{path:o,changed:!1,events:[],guardInstalled:!1};let t;try{t=JSON.parse(en(o,"u...
L3: `),{path:o,changed:r,events:i,guardInstalled:!1}}function on(e=$t()){if(!Zt(e))return!1;try{return!!JSON.parse(en(e,"utf-8"))?.hooks?.Stop?.some?.(t=>Xt(t,Vn))}catch{return!1}}var ...
L4: `:"")+i.subarray(0,r).toString("utf8")}finally{await o.close()}await lr(e.url,"ended",Ii.parse({sessionId:e.session,runId:e.run,transcript:t})),console.log("Run queued for review."...
L5: `)){let n=t.trim();if(!n||n.startsWith("#"))
CriticalSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/chunk-LNRB5MCU.jsView on unpkg · L1 •matchType = previous_version_dangerous_delta
matchedPackage = agentix-cli@0.26.0
matchedIdentity = npm:YWdlbnRpeC1jbGk:0.26.0
similarity = 0.567
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/chunk-LNRB5MCU.jsView on unpkg •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/chunk-LNRB5MCU.js:
import{a as or,b as Vt,g as tr}from"./chunk-VTE7L6LO.js";import{a as Vo,b as Ki,f as Kt,j as er}from"./chunk-UFAGYX73.js";import{a as Qi,c as Xi,d as Zi}from"./chunk-UCQ2N3KO.js";i...
`),{path:o,changed:r,events:i,guardInstalled:!1}}function on(e=$t()){if(!Zt(e))return!1;try{return!!JSON.parse(en(e,"utf-8"))?.hooks?.Stop?.some?.(t=>Xt(t,Vn))}catch{return!1}}var ...
`:"")+i.subarray(0,r).toString("utf8")}finally{await o.close()}await lr(e.url,"ended",Ii.parse({sessionId:e.session,runId:e.run,transcript:t})),console.log("Run queued for review."...
(${(g.duration/1e3).toFixed(1)}s)`)))}catch(s){console.log(I.red(`
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/chunk-LNRB5MCU.jsView on unpkg 1import{a as or,b as Vt,g as tr}from"./chunk-VTE7L6LO.js";import{a as Vo,b as Ki,f as Kt,j as er}from"./chunk-UFAGYX73.js";import{a as Qi,c as Xi,d as Zi}from"./chunk-UCQ2N3KO.js";i...
L2: `)),{path:t,changed:l,events:a,guardInstalled:c}}function ar(e={}){let o=e.path??$t();if(!Zt(o))return{path:o,changed:!1,events:[],guardInstalled:!1};let t;try{t=JSON.parse(en(o,"u...
L3: `),{path:o,changed:r,events:i,guardInstalled:!1}}function on(e=$t()){if(!Zt(e))return!1;try{return!!JSON.parse(en(e,"utf-8"))?.hooks?.Stop?.some?.(t=>Xt(t,Vn))}catch{return!1}}var ...
L4: `:"")+i.subarray(0,r).toString("utf8")}finally{await o.close()}await lr(e.url,"ended",Ii.parse({sessionId:e.session,runId:e.run,transcript:t})),console.log("Run queued for review."...
L5: `)){let n=t.trim();if(!n||n.startsWith("#"))
HighSandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/chunk-LNRB5MCU.jsView on unpkg · L1 •Runtime or CLI code links a write operation to an explicit external AI-agent control path:
t,e as zs,f as si,g as fc,h as ii,i as hc,m as jo,n as ai,o as ci,s as li,v as ge,w as yt}from"./chunk-ax2pwsrt.js";import{a as ri,b as yc}from"./chunk-ajonzwlt.js";import{a as to,b as bo,e as oi,f as ht}from"./chunk-f4hztzhw.js";import{a as oo,b as mc}from"./chunk-l2wspy6s.js";import{f as ei,g as h,h as jt,j as te}from"./chunk-cjqqirpd.js";import{g as ti,k as ni,l as uc}from"./chunk-bh3gtcz6.js";import{a as gc}from"./chunk-fiob3mex.js";import{command as xc}from"commander";import{open as sc}from"fs/promises";import{existssync as zt,mkdirsync as wc,readfilesync as en,writefilesync as nr}from"fs";import{homedir as bc}from"os";import{dirname as $c,resolve as kn}from"path";var vn="/attach/",sr="/guard/ch
HighExternal Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/chunk-LNRB5MCU.jsView on unpkg