Loading npm security reports…
beast-agent@2.38.4: AI-agent capability abuse – flagged | LPM Firewall
Flagged as AI-agent capability risk
Allowed by default with warning: agent-facing configuration or capability changes need review before use.
scanned 1mo ago · by lpm-firewall-ai The package is not proven malicious by source inspection, but it combines automatic runtime repair with broad AI-agent command execution and default-off approvals. This warrants a warning for dangerous capability rather than a publication block.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
npm installation activates the Electron repair hook; using the agent activates command execution.
Impact
A compromised or unsafe model interaction could execute commands or alter files in the selected workspace.
Mechanism
Install-time Electron repair plus an AI-controlled workspace shell.
AI rationale
The package is not proven malicious by source inspection, but it combines automatic runtime repair with broad AI-agent command execution and default-off approvals. This warrants a warning for dangerous capability rather than a publication block.
Evidence
package.json scripts/fix-electron.js src/agent/tools.js src/main.js node_modules/electron/dist node_modules/electron/path.txt
Network endpoints1
npmmirror.com /mirrors/electron/
public snapshot AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
Its postinstall hook runs a repair routine that deletes Electron runtime files and invokes Electron's installer, including a mirror fallback. At runtime the AI agent can execute model-selected shell commands in the chosen workspace. The optional approval gate is disabled by default, leaving non-delete command and file actions available without a confirmation prompt. Evidence against
The install hook is limited to the declared Electron dependency and does not modify AI-agent configuration. No runtime dependency on beast-agent itself was found. No credential collection or covert exfiltration path was confirmed in the inspected source. Additional Python, SearXNG, and app installs are reached through explicit agent or CLI actions. Behavioral surface
Source ChildProcess Crypto DynamicRequire EnvironmentVars Filesystem NativeBindings Network Shell WebSocket
27 flagged · loading source • scripts.postinstall = node scripts/fix-electron.js --soft
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg • scripts.postinstall = node scripts/fix-electron.js --soft
Medium Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.json View on unpkg 7 L8: const { spawn, spawnSync } = require('child_process');
L9: const path = require('path');
High Child Process
Package source references child process execution.
bin/beast-agent.js View on unpkg · L7
2 Critical 21 High 6 Medium 6 Low
Critical Download Execute src/agent/tools.js
Critical Trigger Reachable Dangerous Capability src/main.js
High Install Time Lifecycle Scripts package.json
High Child Process bin/beast-agent.js
High Shell src/main.js
High Same File Env Network Execution src/agent/searxng.js
High Entrypoint Foreign Package Code Overwrite src/agent/store.js
High Command Output Exfiltration src/main.js
High Sandbox Evasion Gated Capability src/agent/computeruse.js
High Runtime Package Install bin/beast-agent.js#virtual:normalized:round1
High Semantic Analysis Limited bin/beast-agent.js
Affected versions and remediation This report applies to beast-agent@2.38.4 .
See all versions of beast-agent for other recorded verdicts.
Review the evidence and your use of beast-agent@2.38.4 before allowing it. Restrict the permissions described in this report. Choose an independently verified alternative or release. This report does not establish that other versions are safe. Evidence last updated: 2026-09-11 18:41:58.982Z (UTC) .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced .
88% Suspicious
AI assessment confidence
Package metadata npm Author algokodcom
Maintainers algokod
Version 2.38.4
Latest on npm 2.92.0
Published Sep 11, 2026
License MIT
Dependencies 17
Integrity verified
Package size 759 KB
Files 115
Keywords agent ai whatsapp assistant electron windows llm openai
Supply chain
HighEntropyStrings UrlStrings
Manifest No manifest risk signals triggered.
scanned 65 file(s), 2.13 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.github.com, api.groq.com, api.openai.com, api.search.tinyfish.ai, api.telegram.org, api.z.ai, beastagent-skills.web.app, bootstrap.pypa.io, codeload.github.com, connectivitycheck.gstatic.com, cp.cloudflare.com, cua.ai, discord.com, duckduckgo.com, generativelanguage.googleapis.com, git-scm.com, github.com, html.duckduckgo.com, integrate.api.nvidia.com, news.google.com, npmmirror.com, opencode.ai, openrouter.ai, raw.githubusercontent.com, registry.npmjs.org, schemas.openxmlformats.org, skills.algokod.com, www.google.com, www.msftconnecttest.com, www.npmjs.com, www.python.org, www.w3.org
• stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 14
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
bin/beast-agent.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = bin/beast-agent.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/beast-agent.js View on unpkg 7 L8: const { spawn, spawnSync } = require('child_process');
L9: const path = require('path');
Medium Dynamic Require
Package source references dynamic require/import behavior.
bin/beast-agent.js View on unpkg · L7 5 Trigger-reachable chain: manifest.main -> src/main.js
L5: const fs = require('fs');
L6: const http = require('http');
L7: const dns = require('dns');
L8: const crypto = require('crypto');
...
L12: const OPENCODE_SESSION = 'beast-' + crypto.randomUUID();
L13: const { spawn } = require('child_process');
L14: const { Engine, OBSERVE_MARK } = require('./agent/engine');
...
L68: if (res.ok) {
L69: const j = await res.json();
L70: const v = String(j.version || '').trim();
...
L79: if (win && !win.isDestroyed()) {
L80: win.webContents.send('agent:event', { type: 'update', ...updateState, current: app.getVersion() });
Critical Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
src/main.js View on unpkg · L5 1152 const zipPath = path.join(outDir, `beast-${stamp}.zip`);
L1153: /* zip yoksa PowerShell Compress-Archive ile */
L1154: await new Promise((resolve, reject) => {
5 const fs = require('fs');
L6: const http = require('http');
L7: const dns = require('dns');
L8: const crypto = require('crypto');
...
L12: const OPENCODE_SESSION = 'beast-' + crypto.randomUUID();
L13: const { spawn } = require('child_process');
L14: const { Engine, OBSERVE_MARK } = require('./agent/engine');
...
L68: if (res.ok) {
L69: const j = await res.json();
L70: const v = String(j.version || '').trim();
...
L79: if (win && !win.isDestroyed()) {
L80: win.webContents.send('agent:event', { type: 'update', ...updateState, current: app.getVersion() });
High Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
src/main.js View on unpkg · L5 • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/main.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/main.js View on unpkg 29 function beastRoot() {
L30: if (process.env.BEAST_DATA) return process.env.BEAST_DATA;
L31: return process.env.APPDATA
L32: ? path.join(process.env.APPDATA, 'beast')
L33: : path.join(os.homedir(), 'AppData', 'Roaming', 'beast');
L34: }
...
L167: if (!v) return null;
L168: return Buffer.from(v.buffer, v.byteOffset, v.byteLength).toString('base64');
L169: }
Low Weak Crypto
Package source references weak cryptographic algorithms.
src/agent/mem0.js View on unpkg · L29 15 const os = require('os');
L16: const { spawn, execFile, execSync } = require('child_process');
L17:
L18: const REQS_URL = 'https://raw.githubusercontent.[redacted].txt';
L19: const PKG_URL = 'https://github.[redacted].zip';
...
L25: function beastAppDir() {
L26: if (process.env.BEAST_DATA) return process.env.BEAST_DATA;
L27: return process.env.APPDATA
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
src/agent/searxng.js View on unpkg · L15 • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/searxng.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/searxng.js View on unpkg • Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
src/agent/store.js:
const SITE_URL = 'https://sk[redacted]';
const SITE_FALLBACK_URL = 'https://beastagent-sk[redacted]';
const COMMUNITY_URL = 'https://raw.githubusercontent.com/algokodcom/beast-agent/main/store/skills.json';
const SKIP_DIRS = new Set(['node_modules', '.git', '__pycache__', '.drafts']);
fs.writeFileSync(p, JSON.stringify(obj, null, 2));
fs.writeFileSync(target, String(content ?? ''), 'utf8');
High Entrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
src/agent/store.js View on unpkg 5 const path = require('path');
L6: const https = require('https');
L7: const dns = require('dns');
L8: const net = require('net');
L9: const { execFile } = require('child_process');
L10: const { spawn } = require('child_process');
...
L107: ['-NoProfile', '-NoExit', '-Command', '-'],
L108: { cwd: cwd || process.cwd(), windowsHide: true, env: envWithPathPrefix() }
L109: );
...
L125: proc.stdin.unref && proc.stdin.unref();
L126: proc.stdout.unref && proc.stdout.unref();
L127: proc.stderr.unref && proc.stderr.unref();
Critical Download Execute
Source downloads or fetches remote code and executes it.
src/agent/tools.js View on unpkg · L5 • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/tools.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/tools.js View on unpkg 8 L9: Sürücü: https://github.com/trycua/cua — `cua-driver mcp` stdio MCP sunucusu;
L10: el yazımı minimal JSON-RPC 2.0 client'ı (mcp.js ile aynı çerçeve).
L11: Binary yoksa eski PowerShell backend'ine düşer (yalnız koordinat + foreground).
L12:
...
L49: otomatik kurulum asla çalışmaz (tests dahil). */
L50: return !String(process.env.BEAST_CUA_DRIVER_CMD || '').trim();
L51: }
...
L56: return new Promise((resolve) => {
L57: execFile(driverCmd(), ['--version'], { timeout: 10000, windowsHide: true }, (err, stdout) => {
L58: const res = {
...
L70: function runInstaller(cb) {
High Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
src/agent/computeruse.js View on unpkg · L8 • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/computeruse.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/computeruse.js View on unpkg bin/beast-agent.js#virtual:normalized:round1 View file 29 L30: /* güncelleme modu: çalışan Beast"i kapat (dosya kilidi EBUSY vermesin) → npm güncelle (görünür ilerleme) → yeniden başlat.\r\n Bu komut güncelleme butonu tarafından GÖRÜNÜR bir ...
L31: detached: true,
High Runtime Package Install
Package source invokes a package manager install command at runtime.
bin/beast-agent.js#virtual:normalized:round1 View on unpkg · L29 • path = src/agent/scripts/mt5_bridge.py
kind = build_helper
sizeBytes = 14849
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
src/agent/scripts/mt5_bridge.py View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/mcp.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/mcp.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = scripts/fix-electron.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/fix-electron.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = scripts/release.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/release.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/gittools.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/gittools.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/mt5bridge.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/mt5bridge.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/apps.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/apps.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/logger.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/logger.js View on unpkg High
Known Malware Source Similarity
src/main.js
High Known Malware Source Similarity bin/beast-agent.js
High Known Malware Source Similarity src/agent/mcp.js
High Known Malware Source Similarity scripts/fix-electron.js
High Known Malware Source Similarity scripts/release.js
High Known Malware Source Similarity src/agent/computeruse.js
High Known Malware Source Similarity src/agent/gittools.js
High Known Malware Source Similarity src/agent/searxng.js
High Known Malware Source Similarity src/agent/tools.js
High Known Malware Source Similarity src/mt5bridge.js
High Known Malware Source Similarity src/agent/apps.js
High Known Malware Source Similarity src/agent/logger.js
Medium Ambiguous Install Lifecycle Script package.json
Medium Dynamic Require bin/beast-agent.js
Medium Ships Build Helper src/agent/scripts/mt5_bridge.py
Medium Structural Risk Force Deep Review
Low Non Install Lifecycle Scripts
Low Weak Crypto src/agent/mem0.js
Runtime surface package.json Entrypoints main → src/main.js bin → beast, beast-agent
Runtime No engine / OS / CPU constraints
Artifact 2.57 MB · 115 files 2 signature(s)
Install lifecycle postinstall prepublishOnly
Behavioral surface ChildProcess Crypto DynamicRequire EnvironmentVars Filesystem NativeBindings Network Shell WebSocket HighEntropyStrings UrlStrings Manifest: clean
27 flagged • scripts.postinstall = node scripts/fix-electron.js --soft
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg • scripts.postinstall = node scripts/fix-electron.js --soft
Medium Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.json View on unpkg 7 L8: const { spawn, spawnSync } = require('child_process');
L9: const path = require('path');
High Child Process
Package source references child process execution.
bin/beast-agent.js View on unpkg · L7 • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 14
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
bin/beast-agent.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = bin/beast-agent.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/beast-agent.js View on unpkg 7 L8: const { spawn, spawnSync } = require('child_process');
L9: const path = require('path');
Medium Dynamic Require
Package source references dynamic require/import behavior.
bin/beast-agent.js View on unpkg · L7 5 Trigger-reachable chain: manifest.main -> src/main.js
L5: const fs = require('fs');
L6: const http = require('http');
L7: const dns = require('dns');
L8: const crypto = require('crypto');
...
L12: const OPENCODE_SESSION = 'beast-' + crypto.randomUUID();
L13: const { spawn } = require('child_process');
L14: const { Engine, OBSERVE_MARK } = require('./agent/engine');
...
L68: if (res.ok) {
L69: const j = await res.json();
L70: const v = String(j.version || '').trim();
...
L79: if (win && !win.isDestroyed()) {
L80: win.webContents.send('agent:event', { type: 'update', ...updateState, current: app.getVersion() });
Critical Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
src/main.js View on unpkg · L5 1152 const zipPath = path.join(outDir, `beast-${stamp}.zip`);
L1153: /* zip yoksa PowerShell Compress-Archive ile */
L1154: await new Promise((resolve, reject) => {
5 const fs = require('fs');
L6: const http = require('http');
L7: const dns = require('dns');
L8: const crypto = require('crypto');
...
L12: const OPENCODE_SESSION = 'beast-' + crypto.randomUUID();
L13: const { spawn } = require('child_process');
L14: const { Engine, OBSERVE_MARK } = require('./agent/engine');
...
L68: if (res.ok) {
L69: const j = await res.json();
L70: const v = String(j.version || '').trim();
...
L79: if (win && !win.isDestroyed()) {
L80: win.webContents.send('agent:event', { type: 'update', ...updateState, current: app.getVersion() });
29 function beastRoot() {
L30: if (process.env.BEAST_DATA) return process.env.BEAST_DATA;
L31: return process.env.APPDATA
L32: ? path.join(process.env.APPDATA, 'beast')
L33: : path.join(os.homedir(), 'AppData', 'Roaming', 'beast');
L34: }
...
L167: if (!v) return null;
L168: return Buffer.from(v.buffer, v.byteOffset, v.byteLength).toString('base64');
L169: }
Low Weak Crypto
Package source references weak cryptographic algorithms.
src/agent/mem0.js View on unpkg · L29 15 const os = require('os');
L16: const { spawn, execFile, execSync } = require('child_process');
L17:
L18: const REQS_URL = 'https://raw.githubusercontent.[redacted].txt';
L19: const PKG_URL = 'https://github.[redacted].zip';
...
L25: function beastAppDir() {
L26: if (process.env.BEAST_DATA) return process.env.BEAST_DATA;
L27: return process.env.APPDATA
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
src/agent/searxng.js View on unpkg · L15 • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/searxng.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/searxng.js View on unpkg • Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
src/agent/store.js:
const SITE_URL = 'https://sk[redacted]';
const SITE_FALLBACK_URL = 'https://beastagent-sk[redacted]';
const COMMUNITY_URL = 'https://raw.githubusercontent.com/algokodcom/beast-agent/main/store/skills.json';
const SKIP_DIRS = new Set(['node_modules', '.git', '__pycache__', '.drafts']);
fs.writeFileSync(p, JSON.stringify(obj, null, 2));
fs.writeFileSync(target, String(content ?? ''), 'utf8');
High Entrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
src/agent/store.js View on unpkg 5 const path = require('path');
L6: const https = require('https');
L7: const dns = require('dns');
L8: const net = require('net');
L9: const { execFile } = require('child_process');
L10: const { spawn } = require('child_process');
...
L107: ['-NoProfile', '-NoExit', '-Command', '-'],
L108: { cwd: cwd || process.cwd(), windowsHide: true, env: envWithPathPrefix() }
L109: );
...
L125: proc.stdin.unref && proc.stdin.unref();
L126: proc.stdout.unref && proc.stdout.unref();
L127: proc.stderr.unref && proc.stderr.unref();
Critical Download Execute
Source downloads or fetches remote code and executes it.
src/agent/tools.js View on unpkg · L5 • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/tools.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/tools.js View on unpkg 8 L9: Sürücü: https://github.com/trycua/cua — `cua-driver mcp` stdio MCP sunucusu;
L10: el yazımı minimal JSON-RPC 2.0 client'ı (mcp.js ile aynı çerçeve).
L11: Binary yoksa eski PowerShell backend'ine düşer (yalnız koordinat + foreground).
L12:
...
L49: otomatik kurulum asla çalışmaz (tests dahil). */
L50: return !String(process.env.BEAST_CUA_DRIVER_CMD || '').trim();
L51: }
...
L56: return new Promise((resolve) => {
L57: execFile(driverCmd(), ['--version'], { timeout: 10000, windowsHide: true }, (err, stdout) => {
L58: const res = {
...
L70: function runInstaller(cb) {
High Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
src/agent/computeruse.js View on unpkg · L8 • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/computeruse.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/computeruse.js View on unpkg bin/beast-agent.js#virtual:normalized:round1 View file 29 L30: /* güncelleme modu: çalışan Beast"i kapat (dosya kilidi EBUSY vermesin) → npm güncelle (görünür ilerleme) → yeniden başlat.\r\n Bu komut güncelleme butonu tarafından GÖRÜNÜR bir ...
L31: detached: true,
High Runtime Package Install
Package source invokes a package manager install command at runtime.
bin/beast-agent.js#virtual:normalized:round1 View on unpkg · L29 • path = src/agent/scripts/mt5_bridge.py
kind = build_helper
sizeBytes = 14849
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
src/agent/scripts/mt5_bridge.py View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/mcp.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/mcp.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = scripts/fix-electron.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/fix-electron.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = scripts/release.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/release.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/gittools.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/gittools.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/mt5bridge.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/mt5bridge.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/apps.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/apps.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/agent/logger.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/logger.js View on unpkg Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
src/main.js
• matchType = normalized_sha256
matchedPackage = beast-agent@2.38.0
matchedPath = src/main.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/main.js View on unpkg