registry / amalgm / 0.1.135

amalgm@0.1.135

Amalgm local computer runtime: login, MCP, chat, events, previews, and tunnels.

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 14 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 271 file(s), 2.04 MB of source, external domains: 127.0.0.1, access.stripe.com, ai-gateway.vercel.sh, amalgm-api-proxy-v2.fly.dev, amalgm-desktop-releases.fly.dev, amalgm.ai, amalgm.example, another-chats-page.test, api.anthropic.com, api.dashboard.plaid.com, api.figma.com, api.githubcopilot.com, api.openai.com, api.supabase.com, app.amalgm.test, app.example.com, app.planetscale.com, atlassian.com, auth.planetscale.com, cdn.example, cf.mcp.atlassian.com, cloudflare.com, dashboard.plaid.com, datadoghq.com, desktop-release.example, developer.squareup.com, developers.cloudflare.com, developers.egnyte.com, developers.figma.com, developers.hubspot.com, developers.intercom.com, developers.notion.com, developers.webflow.com, dhygzobemt712.cloudfront.net, docs.exa.ai, docs.gitlab.com, docs.paypal.ai, docs.sentry.io, docs.slack.dev, docs.stripe.com, egnyte.com, exa.ai, example.com, example.supabase.co, example.test, excalidraw.com, explicit.example, figma.com, from-file.example, github.com

Source & flagged code

6 flagged

runtime/scripts/amalgm-mcp/workspace/rest.jsView file

Lines 1-27javascript

1/**

2 * /workspace/* REST routes for the Next.js API to call.

3 * Not part of the MCP tool surface — used by the internal UI.

4 */

6const fs = require('fs');

7const path = require('path');

8const { execFile } = require('child_process');

9const { promisify } = require('util');

High

Child Process

Package source references child process execution.

runtime/scripts/amalgm-mcp/workspace/rest.jsView on unpkg · L7

10const { AMALGM_DIR, DEFAULT_CWD } = require('../config');

11const {

12 listWorkspaces,

13 removeWorkspace,

14 renameWorkspace,

15 upsertWorkspace,

16} = require('./store');

18const execFileAsync = promisify(execFile);

19const MAX_BUFFER = 10 * 1024 * 1024;

20const WORKTREE_SUFFIX_RE = /-amalgm-wt-[a-z0-9]+$/;

22function isWithin(root, target) {

23 const relative = path.relative(root, target);

24 return relative === '' || (!!relative && !relative.startsWith('..') && !path.isAbsolute(relative));

25}

27function sanitizeProjectName(value) {

runtime/scripts/amalgm-mcp/tests/browser-capture.test.jsView file

Lines 43-83javascript

43 // with on-screen geometry must win or a live surface reads as "hidden".

44 assert.match(script, /r\.width && r\.height/);

45 assert.match(script, /embedderVisibility/);

46});

48test('rectScript prefers the on-screen copy over a stale 0x0 duplicate', async () => {

bin/amalgm.jsView file

Lines 4-33javascript

4function takeFlag(argv, names) {

5 for (let i = 2; i < argv.length; i += 1) {

6 const arg = argv[i];

7 if (!arg

runtime/scripts/amalgm-mcp/workflows/runner.jsView file

Lines 1-24javascript

1'use strict';

3const crypto = require('crypto');

4const fs = require('fs');

5const { spawn } = require('child_process');

lib/service.jsView file

Lines 1-25javascript

1'use strict';

3const fs = require('fs');

4const os = require('os');

5const path = require('path');

6const

runtime/scripts/port-monitor.jsView file

Lines 1-29javascript

1/**

2 * Port Monitor - Standalone SSE server for port change events.

3 *

4 * Polls `ss -tlnp` every 2s and pushes

5 * port_opened / port_closed events over SSE.

6 *

7 * Runs alongside chat-server on the port-monitor runtime port.

8 */

10const http = require('http');

Source & flagged code

6 flagged · loading source

runtime/scripts/amalgm-mcp/workspace/rest.jsView file

7const path = require('path'); L8: const { execFile } = require('child_process'); L9: const { promisify } = require('util');

High

Child Process

Package source references child process execution.

runtime/scripts/amalgm-mcp/workspace/rest.jsView on unpkg · L7

runtime/scripts/amalgm-mcp/tests/browser-capture.test.jsView file

63]; L64: const result = new Function('document', 'window', `return (${script})`)( L65: { querySelectorAll: () => fakeViews, visibilityState: 'visible' },

Low

Eval

Package source references a known benign dynamic code generation pattern.

runtime/scripts/amalgm-mcp/tests/browser-capture.test.jsView on unpkg · L63

bin/amalgm.jsView file

24L25: require('../lib/cli').main(process.argv).catch((error) => { L26: const message = error && error.message ? error.message : String(error);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/amalgm.jsView on unpkg · L24

runtime/scripts/amalgm-mcp/workflows/runner.jsView file

4const fs = require('fs'); L5: const { spawn } = require('child_process'); L6: const vm = require('vm'); ... L88: const key = String(name || '').trim(); L89: if (key && process.env[key] != null) secrets[key] = process.env[key]; L90: } ... L116: URL, L117: URLSearchParams, L118: TextDecoder, L119: TextEncoder, ... L201: L202: let stdout = Buffer.alloc(0);

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

runtime/scripts/amalgm-mcp/workflows/runner.jsView on unpkg · L4

lib/service.jsView file

5const path = require('path'); L6: const { spawn, spawnSync } = require('child_process'); L7: ... L29: L30: const PACKAGE_VERSION = require('../package.json').version; L31: const SERVICE_LABEL_SCOPE = `${AMALGM_RUNTIME_USER_SCOPE}.${AMALGM_RUNTIME_LABEL}` L32: .replace(/[^A-Za-z0-9_.-]/g, '_'); L33: const SERVICE_LABEL = process.env.AMALGM_SERVICE_LABEL || `ai.amalgm.runtime.${SERVICE_LABEL_SCOPE}`; L34: const SERVICE_SCRIPT_FILE = path.join(SERVICE_DIR, 'amalgm-watchdog.sh'); ... L92: try { L93: return JSON.parse(fs.readFileSync(file, 'utf8')); L94: } catch {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

lib/service.jsView on unpkg · L5

runtime/scripts/port-monitor.jsView file

9L10: const http = require('http'); L11: const fs = require('fs'); L12: const { execSync } = require('child_process'); L13: const { authorizeRuntimeHttp } = require('./runtime-auth'); ... L16: const PORT = runtimePort('port-monitor'); L17: const BIND_HOST = process.env.AMALGM_BIND_HOST || '0.0.0.0'; L18: const RUNTIME_INSTANCE_ID = process.env.AMALGM_RUNTIME_INSTANCE_ID || '';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

runtime/scripts/port-monitor.jsView on unpkg · L9

Findings

3 High5 Medium6 Low

HighChild Processruntime/scripts/amalgm-mcp/workspace/rest.js

HighShell

HighSame File Env Network Executionruntime/scripts/port-monitor.js

MediumDynamic Requirebin/amalgm.js

MediumUnsafe Vm Contextruntime/scripts/amalgm-mcp/workflows/runner.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencelib/service.js

LowScripts Present

LowEvalruntime/scripts/amalgm-mcp/tests/browser-capture.test.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

6 flagged

runtime/scripts/amalgm-mcp/workspace/rest.jsView file

Lines 1-27javascript

1/**

2 * /workspace/* REST routes for the Next.js API to call.

3 * Not part of the MCP tool surface — used by the internal UI.

4 */

6const fs = require('fs');

7const path = require('path');

8const { execFile } = require('child_process');

9const { promisify } = require('util');

High

Child Process

Package source references child process execution.

runtime/scripts/amalgm-mcp/workspace/rest.jsView on unpkg · L7

10const { AMALGM_DIR, DEFAULT_CWD } = require('../config');

11const {

12 listWorkspaces,

13 removeWorkspace,

14 renameWorkspace,

15 upsertWorkspace,

16} = require('./store');

18const execFileAsync = promisify(execFile);

19const MAX_BUFFER = 10 * 1024 * 1024;

20const WORKTREE_SUFFIX_RE = /-amalgm-wt-[a-z0-9]+$/;

22function isWithin(root, target) {

23 const relative = path.relative(root, target);

24 return relative === '' || (!!relative && !relative.startsWith('..') && !path.isAbsolute(relative));

25}

27function sanitizeProjectName(value) {

runtime/scripts/amalgm-mcp/tests/browser-capture.test.jsView file

Lines 43-83javascript

43 // with on-screen geometry must win or a live surface reads as "hidden".

44 assert.match(script, /r\.width && r\.height/);

45 assert.match(script, /embedderVisibility/);

46});

48test('rectScript prefers the on-screen copy over a stale 0x0 duplicate', async () => {

bin/amalgm.jsView file

Lines 4-33javascript

4function takeFlag(argv, names) {

5 for (let i = 2; i < argv.length; i += 1) {

6 const arg = argv[i];

7 if (!arg

runtime/scripts/amalgm-mcp/workflows/runner.jsView file

Lines 1-24javascript

1'use strict';

3const crypto = require('crypto');

4const fs = require('fs');

5const { spawn } = require('child_process');

lib/service.jsView file

Lines 1-25javascript

1'use strict';

3const fs = require('fs');

4const os = require('os');

5const path = require('path');

6const

runtime/scripts/port-monitor.jsView file

Lines 1-29javascript

1/**

2 * Port Monitor - Standalone SSE server for port change events.

3 *

4 * Polls `ss -tlnp` every 2s and pushes

5 * port_opened / port_closed events over SSE.

6 *

7 * Runs alongside chat-server on the port-monitor runtime port.

8 */

10const http = require('http');