registry / balladeer / 0.0.3

balladeer@0.0.3

Installer for the Balladeer client (decision memory for engineering teams and their AI agents): downloads the sha256-verified client from get.balladeer.ai and installs it globally.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 88.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

UrlStrings

Manifest

NoLicense

scanned 1 file(s), 4.78 KB of source, external domains: app.balladeer.ai, get.balladeer.ai

Source & flagged code

3 flagged

bin/balladeer.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2/**

3 * Bootstrapper for the Balladeer client (npm name: balladeer).

4 *

5 * This package is not the client; it installs it. On consent it downloads the

6 * current client tarball from Balladeer's central installer endpoints, verifies

7 * the published sha256, and `npm install -g`s the verified file, which replaces

8 * this package in place (the client ships under the same package name).

9 *

10 * Flags: --yes/-y skip the prompt; --download-only fetch + verify, print the path.

11 */

12const { createHash } = require("node:crypto");

13const { mkdtempSync, writeFileSync, rmSync } = require("node:fs");

14const { tmpdir } = require("node:os");

15const { join } = require("node:path");

16const { spawnSync } = require("node:child_process");

17const readline = require("node:readline");

High

Child Process

Package source references child process execution.

bin/balladeer.jsView on unpkg · L15

19const BASE = process.env.BALLADEER_INSTALL_BASE ?? "https://get.balladeer.ai";

20const TGZ_URL = `${BASE}/install/client.tgz`;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/balladeer.jsView on unpkg · L15

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/balladeer.jsView on unpkg · L15

21const SHA_URL = `${BASE}/install/client.tgz.sha256`;

23const args = process.argv.slice(2);

24const yes = args.includes("--yes") || args.includes("-y");

25const downloadOnly = args.includes("--download-only");

27function fail(msg, code = 1) {

28 console.error(msg);

29 process.exit(code);

30}

32async function fetchBytes(url) {

33 const res = await fetch(url, { redirect: "follow" });

34 if (!res.ok) {

35 fail(

Source & flagged code

3 flagged · loading source

bin/balladeer.jsView file

15const { join } = require("node:path"); L16: const { spawnSync } = require("node:child_process"); L17: const readline = require("node:readline");

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code