1Source sends the broad process environment to a literal external destination.
L1: #!/usr/bin/env node
L2: var $R="http://localhost:8787",ja="anyray-placeholder",Ee=e=>{let t=e?.trim();return!!(t&&/^ark_[A-Za-z0-9_-]{20,512}$/.test(t))},Ht=e=>{let t=e.trim().replace(/\/+$/,"");return t=...
L3: `;if(a||n.tombstoneAbsent!==!1)try{await pg(r,s)}catch(i){if(i.code!=="EEXIST")throw i}}let o=`${e}.anyray-tmp-${process.pid}-${gg()}`;try{await pg(o,`${JSON.stringify(t,null,2)}
...
L5: `,{mode:384})}catch(s){throw await Io(t,{recursive:!0,force:!0}).catch(()=>{}),s}return async()=>{try{JSON.parse(await Ya(n,"utf-8")).nonce===o&&await Io(t,{recursive:!0,force:!0})...
L6: `,{mode:384}),await _u(r,384);try{await he(r,n)}catch(o){throw await Io(r,{force:!0}).catch(()=>{}),o}},ae=async e=>{if(Ou.getStore
CriticalHardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg · L1 1#!/usr/bin/env node
L2: var $R="http://localhost:8787",ja="anyray-placeholder",Ee=e=>{let t=e?.trim();return!!(t&&/^ark_[A-Za-z0-9_-]{20,512}$/.test(t))},Ht=e=>{let t=e.trim().replace(/\/+$/,"");return t=...
L3: `;if(a||n.tombstoneAbsent!==!1)try{await pg(r,s)}catch(i){if(i.code!=="EEXIST")throw i}}let o=`${e}.anyray-tmp-${process.pid}-${gg()}`;try{await pg(o,`${JSON.stringify(t,null,2)}
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L1 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
var $R="http://localhost:8787",ja="anyray-placeholder",Ee=e=>{let t=e?.trim();return!!(t&&/^ark_[A-Za-z0-9_-]{20,512}$/.test(t))},Ht=e=>{let t=e.trim().replace(/\/+$/,"");return t=...
`),await he(o,e),await GR(e,384),await ZR(e)}finally{await Gt(o,{force:!0}).catch(()=>{})}},bg=1,fg=3e4,YR=5e3,JR=/^[a-f0-9]{64}$/,Ag=e=>`${e}.pending`,XR=e=>`${e}.lock`,vu=e=>{if(...
`)},tn=(e,t={})=>{let n=e.byoUpstream,r=!n&&ee(e,"anthropic"),o=ue({...e.metadata,tool:e.metadata.tool??"claude-code"}),a=t.includeClientKey!==!1,s=t.includeAuthToken!==!1,{context...
`)){let u=d.indexOf(":");if(u>0&&d.slice(0,u).trim().toLowerCase()===l)retur
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkg 100`;)r+=1;r-=1;continue}if(o==="/"&&e[r+1]==="*"){let a=e.indexOf("*/",r+2);r=a===-1?e.length:a+1,t+=" ";continue}t+=o}return t},DP=e=>{let t="",n=!1;for(let r=0;r<e.length;r+=1){let...
L101: `,r=n.trim()?wt(n):{};if(!zc(r))throw new Error(`${e} is not a JSON object`);return{data:r,raw:n,existed:t}},Fb=(e,t,n=[])=>{if(zc(e)&&zc(t)){let r=[];for(let o of new Set([...Obje...
L102: `);let a={insertSpaces:!0,tabSize:2,eol:t.raw.includes(`\r
...
L110: `:`
L111: ${a}${s},`,d=`${i}${l}${c}`;try{let u=wt(d);if(!Wb(u))return{ok:!1,reason:"unsupported"};for(let[p,f]of Object.entries(r))if(JSON.stringify(u[p])!==JSON.stringify(f))return{ok:!1,r...
L112: `,{mode:384}),await he(a,o)}catch{}finally{await aA(a,{force:!0})}},CD=async(e,t)=>{await el(Qp(e,t)).catch(()=>{})},fA=async(e,t,n,r={},o={mode:
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L100 100Trigger-reachable command-output exfiltration chain: scripts.start -> dist/index.js
L100: `;)r+=1;r-=1;continue}if(o==="/"&&e[r+1]==="*"){let a=e.indexOf("*/",r+2);r=a===-1?e.length:a+1,t+=" ";continue}t+=o}return t},DP=e=>{let t="",n=!1;for(let r=0;r<e.length;r+=1){let...
L101: `,r=n.trim()?wt(n):{};if(!zc(r))throw new Error(`${e} is not a JSON object`);return{data:r,raw:n,existed:t}},Fb=(e,t,n=[])=>{if(zc(e)&&zc(t)){let r=[];for(let o of new Set([...Obje...
L102: `);let a={insertSpaces:!0,tabSize:2,eol:t.raw.includes(`\r
...
L110: `:`
L111: ${a}${s},`,d=`${i}${l}${c}`;try{let u=wt(d);if(!Wb(u))return{ok:!1,reason:"unsupported"};for(let[p,f]of Object.entries(r))if(JSON.stringify(u[p])!==JSON.stringify(f))return{ok:!1,r...
L112: `,{mode:384}),await he(a,o)}catch{}finally{await aA(a,{force:
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.jsView on unpkg · L100 1#!/usr/bin/env node
L2: var $R="http://localhost:8787",ja="anyray-placeholder",Ee=e=>{let t=e?.trim();return!!(t&&/^ark_[A-Za-z0-9_-]{20,512}$/.test(t))},Ht=e=>{let t=e.trim().replace(/\/+$/,"");return t=...
L3: `;if(a||n.tombstoneAbsent!==!1)try{await pg(r,s)}catch(i){if(i.code!=="EEXIST")throw i}}let o=`${e}.anyray-tmp-${process.pid}-${gg()}`;try{await pg(o,`${JSON.stringify(t,null,2)}
...
L5: `,{mode:384})}catch(s){throw await Io(t,{recursive:!0,force:!0}).catch(()=>{}),s}return async()=>{try{JSON.parse(await Ya(n,"utf-8")).nonce===o&&await Io(t,{recursive:!0,force:!0})...
L6: `,{mode:384}),await _u(r,384);try{await he(r,n)}catch(o){throw await Io(r,{force:!0}).catch(()=>{}),o}},ae=async e=>{if(Ou.getStore()===!0){await Sg(e);return}let t=await Og();try{...
L7: `)},tn=(e,t={})=>{let
HighBase64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.jsView on unpkg · L1