registry / ajaxspeaks / 1.0.4

ajaxspeaks@1.0.4

96% token compression for AI tools. Distills your project into .mem files — works with Claude, Cline, Cursor, Copilot, Continue.

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 12 file(s), 64.4 KB of source, external domains: github.com, open.spotify.com

Source & flagged code

1 flagged

src/_AJAXBEATS.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * _AJAXBEATS — Open the AjaxBeats Spotify playlist.

4 *

5 * AjaxBeats is a curated coding/music playlist on Spotify.

6 *

7 * Usage:

8 * _AJAXBEATS Open playlist in default browser

9 * _AJAXBEATS --url Just print the URL

10 * _AJAXBEATS --copy Copy URL to clipboard

11 */

13import { execSync } from 'child_process';

15const C = {

16 reset: '\x1b[0m', bold: '\x1b[1m', green: '\x1b[32m',

17 cyan: '\x1b[36m', dim: '\x1b[2m',

18};

20const PLAYLIST_URL = 'https://open.spotify.com/playlist/7GyDdZ05PQG8lf5nOZOWbI?si=26b565e3ab72411c';

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/_AJAXBEATS.jsView on unpkg · L12

22function usage() {

23 console.log(`\n_AJAXBEATS — Open AjaxBeats Spotify playlist\n`);

24 console.log(` _AJAXBEATS Open playlist in browser`);

25 console.log(` _AJAXBEATS --url Print URL`);

26 console.log(` _AJAXBEATS --copy Copy URL to clipboard\n`);

27}

29function main() {

30 const args = process.argv.slice(2);

31 if (args.includes('--help') || args.includes('-h')) { usage(); process.exit(0); }

Source & flagged code

1 flagged · loading source

src/_AJAXBEATS.jsView file

12L13: import { execSync } from 'child_process'; L14: ... L19: L20: const PLAYLIST_URL = 'https://open.spotify.[redacted]?si=26b565e3ab72411c'; L21: ... L43: try { L44: execSync(`echo "${PLAYLIST_URL}" | pbcopy`, { stdio: 'pipe' }); L45: console.log(` ${C.green}✓ URL copied to clipboard${C.reset}`); ... L54: // Default: open in browser L55: const platform = process.platform; L56: try {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/_AJAXBEATS.jsView on unpkg · L12

Findings

1 High2 Medium3 Low

HighSandbox Evasion Gated Capabilitysrc/_AJAXBEATS.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

src/_AJAXBEATS.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * _AJAXBEATS — Open the AjaxBeats Spotify playlist.

4 *

5 * AjaxBeats is a curated coding/music playlist on Spotify.

6 *

7 * Usage:

8 * _AJAXBEATS Open playlist in default browser

9 * _AJAXBEATS --url Just print the URL

10 * _AJAXBEATS --copy Copy URL to clipboard

11 */

13import { execSync } from 'child_process';

15const C = {

16 reset: '\x1b[0m', bold: '\x1b[1m', green: '\x1b[32m',

17 cyan: '\x1b[36m', dim: '\x1b[2m',

18};

20const PLAYLIST_URL = 'https://open.spotify.com/playlist/7GyDdZ05PQG8lf5nOZOWbI?si=26b565e3ab72411c';

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/_AJAXBEATS.jsView on unpkg · L12

22function usage() {

23 console.log(`\n_AJAXBEATS — Open AjaxBeats Spotify playlist\n`);

24 console.log(` _AJAXBEATS Open playlist in browser`);

25 console.log(` _AJAXBEATS --url Print URL`);

26 console.log(` _AJAXBEATS --copy Copy URL to clipboard\n`);

27}

29function main() {

30 const args = process.argv.slice(2);

31 if (args.includes('--help') || args.includes('-h')) { usage(); process.exit(0); }