registry / bailian-cli-runtime / 1.14.2
bailian-cli-runtime@1.14.2
Runtime framework for bailian-cli (createCli, registry, args, output, pipeline). See https://www.npmjs.com/package/bailian-cli for usage.
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
Source & flagged code
5 flaggeddist/index.mjsView file
1import{a as e,c as t,d as n,f as r,h as i,i as a,l as o,m as s,o as c,p as l,r as u,s as d,t as f,u as p}from"./binary-update-Dxwl7hbM.mjs";import{BailianError as m,COMMAND_PACK_AP...
L2: `);return{kind:`unknown`,error:new w(`Unknown command: ${this.cliName} ${e.join(` `)}\n\nAvailable commands:\n${r}`,`${this.cliName} ${n.join(` `)} --help`)}}return{kind:`unknown`,...
High
1import{a as e,c as t,d as n,f as r,h as i,i as a,l as o,m as s,o as c,p as l,r as u,s as d,t as f,u as p}from"./binary-update-Dxwl7hbM.mjs";import{BailianError as m,COMMAND_PACK_AP...
L2: `);return{kind:`unknown`,error:new w(`Unknown command: ${this.cliName} ${e.join(` `)}\n\nAvailable commands:\n${r}`,`${this.cliName} ${n.join(` `)} --help`)}}return{kind:`unknown`,...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.mjsView on unpkg · L11import{a as e,c as t,d as n,f as r,h as i,i as a,l as o,m as s,o as c,p as l,r as u,s as d,t as f,u as p}from"./binary-update-Dxwl7hbM.mjs";import{BailianError as m,COMMAND_PACK_AP...
L2: `);return{kind:`unknown`,error:new w(`Unknown command: ${this.cliName} ${e.join(` `)}\n\nAvailable commands:\n${r}`,`${this.cliName} ${n.join(` `)} --help`)}}return{kind:`unknown`,...
L3: `)}buildFlagLines(e,t,n){let r=Object.entries(e).map(([e,t])=>({flag:ot(e,t),desc:t.description})),i=Math.max(...r.map(e=>e.flag.length));return r.map(e=>` ${t(e.flag.padEnd(i+2))...
L4: `)}buildAuthFlagSection(e,t,n,r,i,a,o){return this.authRequirements.has(e)?`${i(t)} ${o(n)}\n${this.buildFlagLines(r,a,o)}`:null}bold=(e,t)=>L(t).bold(e);accent=(e,t)=>L(t).accent(...
L5: `)}printPipelineQuickStart(e){let t=t=>this.
Findings
4 High4 Medium5 Low
HighChild Processdist/index.mjs
HighSame File Env Network Executiondist/index.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighTrigger Reachable Command Output Exfiltrationdist/index.mjs
MediumDynamic Requiredist/index.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to bailian-cli-runtime@1.14.2.
See all versions of bailian-cli-runtime for other recorded verdicts.
- Review the evidence and your use of bailian-cli-runtime@1.14.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.