registry / aura-code / 0.10.3

aura-code@0.10.3

⚠ Under review

Aura Code — model-agnostic AI coding agent. Praktess framework.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 178 file(s), 1.61 MB of source, external domains: 127.0.0.1, accounts.google.com, aistudio.google.com, api.anthropic.com, api.deepseek.com, api.github.com, api.groq.com, api.openai.com, api.telegram.org, api.twilio.com, api.x.ai, api.xiaomimimo.com, api.z.ai, build.nvidia.com, claude.ai, console.anthropic.com, console.groq.com, console.x.ai, d3js.org, fonts.googleapis.com, generativelanguage.googleapis.com, github.com, html.duckduckgo.com, integrate.api.nvidia.com, myaccount.google.com, oauth2.googleapis.com, ollama.com, opencode.ai, openrouter.ai, platform.claude.com, platform.deepseek.com, platform.openai.com, platform.xiaomimimo.com, token-plan-sgp.xiaomimimo.com, www.googleapis.com, www.youtube.com, youtu.be, youtube.com, z.ai

Source & flagged code

3 flagged

dist/tools/dictate_patched.jsView file

Lines 28-68javascript

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

31 __setModuleDefault(result, mod);

32 return result;

33 };

34})();

35var __importDefault = (this && this.__importDefault) || function (mod) {

36 return (mod && mod.__esModule) ? mod : { "default": mod };

37};

38Object.defineProperty(exports, "__esModule", { value: true });

39exports.injectText = injectText;

40exports.listDevices = listDevices;

41exports.getDefaultDevice = getDefaultDevice;

42exports.dictate = dictate;

43exports.toggleDictation = toggleDictation;

44exports.speakText = speakText;

45exports.synthesizeSpeech = synthesizeSpeech;

46exports.transcribeFile = transcribeFile;

47exports.listVoices = listVoices;

48exports.dictationLoop = dictationLoop;

49const child_process_1 = require("child_process");

50const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/tools/dictate_patched.jsView on unpkg · L48

51const path = __importStar(require("path"));

52const os = __importStar(require("os"));

53const chalk_1 = __importDefault(require("chalk"));

54const openai_1 = __importDefault(require("openai"));

55const http = __importStar(require("http"));

56const https = __importStar(require("https"));

57const SAMPLE_RATE = 16000;

58const MIMO_BASE = 'https://api.xiaomimimo.com/v1';

59// Inject system CA certificates at module load time, before any TLS

60// connection is made. Some providers (Xiaomi MiMo Token Plan) use a

61// CA chain that Node's bundled root CAs don't include.

62(function injectSystemCAs() {

63 try {

64 const caPath = '/etc/ssl/certs/ca-certificates.crt';

65 if (!fs.existsSync(caPath))

66 return;

67 const bundle = fs.readFileSync(caPath, 'utf8');

68 const certs = bundle.split(/-----END CERTIFICATE-----/)

dist/research/council.jsView file

Lines 16-56javascript

16 o["default"] = v;

17});

18var __importStar = (this && this.__importStar) || (function () {

19 var ownKeys = function(o) {

20 ownKeys =

dist/tools/telegram-bot.jsView file

Lines 22-62javascript

22var __importStar = (this && this.__importStar) || (function () {

23 var ownKeys = function(o) {

24 ownKeys = Object.getOwnPropertyNames || function (o) {

Source & flagged code

3 flagged · loading source

dist/tools/dictate_patched.jsView file

48exports.dictationLoop = dictationLoop; L49: const child_process_1 = require("child_process"); L50: const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/tools/dictate_patched.jsView on unpkg · L48

dist/research/council.jsView file

36exports.runCouncil = runCouncil; L37: const fs = __importStar(require("fs")); L38: const path = __importStar(require("path"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/research/council.jsView on unpkg · L36

dist/tools/telegram-bot.jsView file

42const os = __importStar(require("os")); L43: const https = __importStar(require("https")); L44: const child_process_1 = require("child_process"); L45: const factory_js_1 = require("../providers/factory.js"); ... L52: function loadConfig() { L53: const configPath = path.join(os.homedir(), '.aura', 'telegram.json'); L54: if (!fs.existsSync(configPath)) { ... L57: } L58: return JSON.parse(fs.readFileSync(configPath, 'utf8')); L59: } ... L143: if (data) L144: req.write(data);

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/tools/telegram-bot.jsView on unpkg · L42

Findings

1 Critical2 High3 Medium5 Low

CriticalCommand Output Exfiltrationdist/tools/telegram-bot.js

HighChild Processdist/tools/dictate_patched.js

HighShell

MediumDynamic Requiredist/research/council.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/tools/dictate_patched.jsView file

Lines 28-68javascript

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

31 __setModuleDefault(result, mod);

32 return result;

33 };

34})();

35var __importDefault = (this && this.__importDefault) || function (mod) {

36 return (mod && mod.__esModule) ? mod : { "default": mod };

37};

38Object.defineProperty(exports, "__esModule", { value: true });

39exports.injectText = injectText;

40exports.listDevices = listDevices;

41exports.getDefaultDevice = getDefaultDevice;

42exports.dictate = dictate;

43exports.toggleDictation = toggleDictation;

44exports.speakText = speakText;

45exports.synthesizeSpeech = synthesizeSpeech;

46exports.transcribeFile = transcribeFile;

47exports.listVoices = listVoices;

48exports.dictationLoop = dictationLoop;

49const child_process_1 = require("child_process");

50const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/tools/dictate_patched.jsView on unpkg · L48

51const path = __importStar(require("path"));

52const os = __importStar(require("os"));

53const chalk_1 = __importDefault(require("chalk"));

54const openai_1 = __importDefault(require("openai"));

55const http = __importStar(require("http"));

56const https = __importStar(require("https"));

57const SAMPLE_RATE = 16000;

58const MIMO_BASE = 'https://api.xiaomimimo.com/v1';

59// Inject system CA certificates at module load time, before any TLS

60// connection is made. Some providers (Xiaomi MiMo Token Plan) use a

61// CA chain that Node's bundled root CAs don't include.

62(function injectSystemCAs() {

63 try {

64 const caPath = '/etc/ssl/certs/ca-certificates.crt';

65 if (!fs.existsSync(caPath))

66 return;

67 const bundle = fs.readFileSync(caPath, 'utf8');

68 const certs = bundle.split(/-----END CERTIFICATE-----/)

dist/research/council.jsView file

Lines 16-56javascript

16 o["default"] = v;

17});

18var __importStar = (this && this.__importStar) || (function () {

19 var ownKeys = function(o) {

20 ownKeys =

dist/tools/telegram-bot.jsView file

Lines 22-62javascript

22var __importStar = (this && this.__importStar) || (function () {

23 var ownKeys = function(o) {

24 ownKeys = Object.getOwnPropertyNames || function (o) {