1import{a as Ic,b as Gn,g as Cc}from"./chunk-DTEQNXK3.js";import{a as kc,c as vc}from"./chunk-N5KD3TVN.js";import{a as ro,b as yc,f as wc,g as bc,h as $c,i as Hn,j as xc,k as Sc,l a...
L2: Computer-use helper \u2192 ${Le(r,Pn)}
...
L4: Daemon \u2192 ${s}
L5: Starts at login \u2192 ${bt()}`),e.dryRun)return;try{ao("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are required. Run xcode-select -...
L6: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
CriticalSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/chunk-BCXKRD5L.jsView on unpkg · L1 1import{a as Ic,b as Gn,g as Cc}from"./chunk-DTEQNXK3.js";import{a as kc,c as vc}from"./chunk-N5KD3TVN.js";import{a as ro,b as yc,f as wc,g as bc,h as $c,i as Hn,j as xc,k as Sc,l a...
L2: Computer-use helper \u2192 ${Le(r,Pn)}
...
L8: `)),{path:t,changed:l,events:a,guardInstalled:c}}function Wc(e={}){let o=e.path??nn();if(!Xn(o))return{path:o,changed:!1,events:[],guardInstalled:!1};let t;try{t=JSON.parse(Qn(o,"u...
L9: `),{path:o,changed:r,events:i,guardInstalled:!1}}function sn(e=nn()){if(!Xn(e))return!1;try{return!!JSON.parse(Qn(e,"utf-8"))?.hooks?.Stop?.some?.(t=>Kn(t,di))}catch{return!1}}var ...
L10: `:"")+i.subarray(0,r).toString("utf8")}finally{await o.close()}await Jc(e.url,"ended",la.parse({sessionId:e.session,runId:e.run,transcript:t})),console.log("Run queued for review."...
CriticalCommand Output Exfiltration
Source executes local commands and sends command output to an external endpoint.
dist/chunk-BCXKRD5L.jsView on unpkg · L1 •matchType = previous_version_dangerous_delta
matchedPackage = agentix-cli@0.60.0
matchedIdentity = npm:YWdlbnRpeC1jbGk:0.60.0
similarity = 0.975
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/chunk-BCXKRD5L.jsView on unpkg •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/chunk-BCXKRD5L.js:
import{a as Ic,b as Gn,g as Cc}from"./chunk-DTEQNXK3.js";import{a as kc,c as vc}from"./chunk-N5KD3TVN.js";import{a as ro,b as yc,f as wc,g as bc,h as $c,i as Hn,j as xc,k as Sc,l a...
The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login service.`)}finally{Wg(c,{recursive:!0,force:!0})}});$t.c...
`),{path:o,changed:r,events:i,guardInstalled:!1}}function sn(e=nn()){if(!Xn(e))return!1;try{return!!JSON.parse(Qn(e,"utf-8"))?.hooks?.Stop?.some?.(t=>Kn(t,di))}catch{return!1}}var ...
`:"")+i.subarray(0,r).toString("utf8")}finally{await o.close()}awai
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/chunk-BCXKRD5L.jsView on unpkg 1import{a as Ic,b as Gn,g as Cc}from"./chunk-DTEQNXK3.js";import{a as kc,c as vc}from"./chunk-N5KD3TVN.js";import{a as ro,b as yc,f as wc,g as bc,h as $c,i as Hn,j as xc,k as Sc,l a...
L2: Computer-use helper \u2192 ${Le(r,Pn)}
...
L4: Daemon \u2192 ${s}
L5: Starts at login \u2192 ${bt()}`),e.dryRun)return;try{ao("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are required. Run xcode-select -...
L6: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L7: The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login service.`)}finally{Wg(c,{recursive:!0,force:!0})}});$t.c...
L8: `)),{path:t,changed:l,events:a,guardInstalled:c}}function Wc
HighSandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/chunk-BCXKRD5L.jsView on unpkg · L1 •Runtime or CLI code links a write operation to an explicit external AI-agent control path:
sistant until started again or next login").action(async()=>{yn(),await pc(),console.log("desktop assistant stopped.")});$t.command("status").description("show the desktop login service status").action(()=>{yn();try{console.log(ao("launchctl",["print",tn()],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}))}catch{console.log(ci(bt())?"installed, but not running. run agentx desktop start.":"not installed. run agentx desktop install.")}});import{command as qg}from"commander";import{open as zg}from"fs/promises";import{existssync as xn,mkdirsync as zg,readfilesync as qn,writefilesync as lc}from"fs";import{homedir as yg}from"os";import{dirname as vg,resolve as li}from"path";var di="/attach/",fc="/guard/ch
HighExternal Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/chunk-BCXKRD5L.jsView on unpkg 1Cross-file remote execution chain: dist/chunk-BCXKRD5L.js spawns dist/board-dashboard-C6AZHDHU.js; helper contains network access plus dynamic code execution.
L1: import{a as Ic,b as Gn,g as Cc}from"./chunk-DTEQNXK3.js";import{a as kc,c as vc}from"./chunk-N5KD3TVN.js";import{a as ro,b as yc,f as wc,g as bc,h as $c,i as Hn,j as xc,k as Sc,l a...
L2: Computer-use helper \u2192 ${Le(r,Pn)}
...
L4: Daemon \u2192 ${s}
L5: Starts at login \u2192 ${bt()}`),e.dryRun)return;try{ao("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are required. Run xcode-select -...
L6: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L7: The AgentX daemon and a speech transcription backend must also be available. Run agentx d
HighCross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/chunk-BCXKRD5L.jsView on unpkg · L1 1Trigger-reachable persistence chain: manifest.bin -> dist/cli.js -> dist/chunk-BCXKRD5L.js
L1: import{a as Ic,b as Gn,g as Cc}from"./chunk-DTEQNXK3.js";import{a as kc,c as vc}from"./chunk-N5KD3TVN.js";import{a as ro,b as yc,f as wc,g as bc,h as $c,i as Hn,j as xc,k as Sc,l a...
L2: Computer-use helper \u2192 ${Le(r,Pn)}
...
L4: Daemon \u2192 ${s}
L5: Starts at login \u2192 ${bt()}`),e.dryRun)return;try{ao("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are required. Run xcode-select -...
L6: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L7: The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login service.`)}finally{Wg(c,{recursiv
HighTrigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/chunk-BCXKRD5L.jsView on unpkg · L1 9`),{path:o,changed:r,events:i,guardInstalled:!1}}function sn(e=nn()){if(!Xn(e))return!1;try{return!!JSON.parse(Qn(e,"utf-8"))?.hooks?.Stop?.some?.(t=>Kn(t,di))}catch{return!1}}var ...
L10: `:"")+i.subarray(0,r).toString("utf8")}finally{await o.close()}await Jc(e.url,"ended",la.parse({sessionId:e.session,runId:e.run,transcript:t})),console.log("Run queued for review."...
L11: `)){let n=t.trim();if(!n||n.startsWith("#"))continue;let s=n.indexOf("=");if(s<0)continue;let i=n.slice(0,s).trim();if(!i||process.env[i]!==void 0)continue;let r=n.slice(s+1).trim(...
MediumDynamic Require
Package source references dynamic require/import behavior.
dist/chunk-BCXKRD5L.jsView on unpkg · L9 1import{a as Ic,b as Gn,g as Cc}from"./chunk-DTEQNXK3.js";import{a as kc,c as vc}from"./chunk-N5KD3TVN.js";import{a as ro,b as yc,f as wc,g as bc,h as $c,i as Hn,j as xc,k as Sc,l a...
L2: Computer-use helper \u2192 ${Le(r,Pn)}
...
L4: Daemon \u2192 ${s}
L5: Starts at login \u2192 ${bt()}`),e.dryRun)return;try{ao("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are required. Run xcode-select -...
L6: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L7: The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login service.`)}finally{Wg(c,{recursive:!0,force:!0})}});$t.c...
L8: `)),{path:t,changed:l,events:a,guardInstalled:c}}function Wc
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/chunk-BCXKRD5L.jsView on unpkg · L1