registry  /  apt-mcp-agent-setup  /  1.3.6

apt-mcp-agent-setup@1.3.6

One-command setup package for Base MCP AI Agent infrastructure

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
Manifest
NoLicense
scanned 16 file(s), 244 KB of source, external domains: agentkit.alphatechs.ai

Source & flagged code

3 flagged · loading source
bin/cli.jsView file
1#!/usr/bin/env node L2: const _0x12b3a3=_0x4bc2;(function(_0x4e5d14,_0x50f6fa){const _0x1782f7=_0x4bc2,_0x4d5fab=_0x4e5d14();while(!![]){try{const _0x3dea67=-parseInt(_0x1782f7(0x1b7))/0x1+parseInt(_0x178...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

bin/cli.jsView on unpkg · L1
1#!/usr/bin/env node L2: const _0x12b3a3=_0x4bc2;(function(_0x4e5d14,_0x50f6fa){const _0x1782f7=_0x4bc2,_0x4d5fab=_0x4e5d14();while(!![]){try{const _0x3dea67=-parseInt(_0x1782f7(0x1b7))/0x1+parseInt(_0x178...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L1
bundle/core.encView file
•path = bundle/core.enc kind = high_entropy_blob sizeBytes = 34935312 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

bundle/core.encView on unpkg

Findings

3 High3 Medium4 Low
HighObfuscated Payload Loaderbin/cli.js
HighObfuscated
HighShips High Entropy Blobbundle/core.enc
MediumDynamic Requirebin/cli.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License