1var D_=Object.defineProperty;var s=(e,t)=>D_(e,"name",{value:t,configurable:!0});var Br,zo,Pr,Nr,jr,zr,qr,Ur,Lr,Zr,Vr,uo,Gr,Hr,Wr,Jr,qo,Uo,Lo,Kr,Zo,Yr,Vo,Go,Ho,Xr,Wo,Jo,Ko,Yo,Qr,Xo...
L2: `).map(t=>Qn(t))),"getLongestLineWidth"),t0=be(e=>{const t=[];for(const n of e){const{length:o}=n,a=o-t.length;for(let i=0;i<a;i+=1)t.push(0);for(let i=0;i<o;i+=1){const r=dd(n[i])...
HighChild Process
Package source references child process execution.
dist/cli-CWErfZ1I.mjsView on unpkg · L1 21`);if("type"in t&&this[t.type]){const n=this[t.type];if(typeof n=="function")return n.call(this,t.data)}throw new Error(`Invalid node type: ${JSON.stringify(t)}`)}},s(Br,"_z"),Br);...
L22: `),o(),process.exit(1);e[c]=l}}s(Ns,"v"),Ke(Ns,"mapParametersToArguments");function Bd(e){return e===void 0||e!==!1}s(Bd,"G$2"),Ke(Bd,"helpEnabled");function Qi(e,t,n,o){const a={....
L23: `:10,n=typeof e=="string"?"\r":13;return e[e.length-1]===t&&(e=e.slice(0,-1)),e[e.length-1]===n&&(e=e.slice(0,-1)),e}s(tb,"stripFinalNewline");function Xd(e={}){const{env:t=process...
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli-CWErfZ1I.mjsView on unpkg · L21 11`))}return n.join(`
L12: `)},"renderRow"),h0=be((e,t)=>{if(!e||e.length===0)return"";const n=t0(e),o=n.length;if(o===0)return"";const{stdoutColumns:a,columns:i}=K_(t);if(i.length>o)throw new Error(`${i.len...
L13: `)},"terminalColumns"),g0=["<",">","=",">=","<="],v0=be(e=>{if(!g0.includes(e))throw new TypeError(`Invalid breakpoint operator: ${e}`)},"assertOperator"),D0=be(e=>{const t=Object....
L14: `}}s(Td,"k$2"),Ke(Td,"getNameAndVersion");function Sd(e){const{help:t}=e;if(!(!t||!t.description))return{id:"description",type:"text",data:`${t.description}
...
L21: `);if("type"in t&&this[t.type]){const n=this[t.type];if(typeof n=="function")return n.call(this,t.data)}throw new Error(`Invalid node type: ${JSON.stringify(t)}`)}},s(Br,"_z"),Br);...
L22: `),o(),process.exit(1);e[c]=l}}s(Ns,"
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/cli-CWErfZ1I.mjsView on unpkg · L11 1var D_=Object.defineProperty;var s=(e,t)=>D_(e,"name",{value:t,configurable:!0});var Br,zo,Pr,Nr,jr,zr,qr,Ur,Lr,Zr,Vr,uo,Gr,Hr,Wr,Jr,qo,Uo,Lo,Kr,Zo,Yr,Vo,Go,Ho,Xr,Wo,Jo,Ko,Yo,Qr,Xo...
L2: `).map(t=>Qn(t))),"getLongestLineWidth"),t0=be(e=>{const t=[];for(const n of e){const{length:o}=n,a=o-t.length;for(let i=0;i<a;i+=1)t.push(0);for(let i=0;i<o;i+=1){const r=dd(n[i])...
...
L12: `)},"renderRow"),h0=be((e,t)=>{if(!e||e.length===0)return"";const n=t0(e),o=n.length;if(o===0)return"";const{stdoutColumns:a,columns:i}=K_(t);if(i.length>o)throw new Error(`${i.len...
L13: `)},"terminalColumns"),g0=["<",">","=",">=","<="],v0=be(e=>{if(!g0.includes(e))throw new TypeError(`Invalid breakpoint operator: ${e}`)},"assertOperator"),D0=be(e=>{const t=Object....
L14: `}}s(Td,"k$2"),Ke(Td,"getNameAndVersi
HighCloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
dist/cli-CWErfZ1I.mjsView on unpkg · L1 11Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/cli.mjs -> dist/cli-CWErfZ1I.mjs
L11: `))}return n.join(`
L12: `)},"renderRow"),h0=be((e,t)=>{if(!e||e.length===0)return"";const n=t0(e),o=n.length;if(o===0)return"";const{stdoutColumns:a,columns:i}=K_(t);if(i.length>o)throw new Error(`${i.len...
L13: `)},"terminalColumns"),g0=["<",">","=",">=","<="],v0=be(e=>{if(!g0.includes(e))throw new TypeError(`Invalid breakpoint operator: ${e}`)},"assertOperator"),D0=be(e=>{const t=Object....
L14: `}}s(Td,"k$2"),Ke(Td,"getNameAndVersion");function Sd(e){const{help:t}=e;if(!(!t||!t.description))return{id:"description",type:"text",data:`${t.description}
...
L21: `);if("type"in t&&this[t.type]){const n=this[t.type];if(typeof n=="function")return n.call(this,t.data)}throw new Error
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/cli-CWErfZ1I.mjsView on unpkg · L11 176`,{prompt:o,stopSequences:[`
L177: ${t}:`]}}s(C3,"[redacted]");function Rg({id:e,model:t,created:n}){return{id:e??void 0,modelId:t??void 0,timestamp:n!=null?new Date(n*1e3):void 0}}s(R...
L178: ${C.message}`),_?new l.VercelOidcTokenError(_):C}return h}s(d,"getVercelOidcToken");function f(){const m=(0,c.getContext)().headers?.["x-vercel-oidc-token"]??process.env.VERCEL_OID...
MediumDynamic Require
Package source references dynamic require/import behavior.
dist/cli-CWErfZ1I.mjsView on unpkg · L176