beast-agent@2.44.2: Malicious npm security report (Block)

Loading npm security reports…

beast-agent@2.44.2: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

28 flagged

package.jsonView file

Lines 23-63json

23 "llm",

24 "openai"

25 ],

26 "main": "src/main.js",

27 "preferGlobal": true,

28 "bin": {

29 "beast-agent": "bin/beast-agent.js",

30 "beast": "bin/beast-agent.js"

31 },

32 "files": [

33 "src/**/*",

34 "assets/**/*",

35 "scripts/**/*",

36 "!**/__pycache__/**"

37 ],

38 "scripts": {

39 "start": "electron .",

40 "dist": "electron-builder --win nsis portable",

41 "test": "node --test \"tests/**/*.test.js\"",

42 "release": "node scripts/release.js",

43 "postinstall": "node scripts/fix-electron.js --soft",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L43

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L43

44 "prepublishOnly": "node scripts/swap-electron.js deps",

45 "postpublish": "node scripts/swap-electron.js devdeps"

46 },

47 "devDependencies": {

48 "electron-builder": "^26.15.3"

49 },

50 "dependencies": {

51 "@huggingface/transformers": "3.7.5",

52 "@pdf-lib/fontkit": "^1.1.1",

53 "@whiskeysockets/baileys": "^7.0.0-rc14",

54 "@xenova/transformers": "^2.17.2",

55 "electron-updater": "^6.8.9",

56 "ffmpeg-static": "^5.3.0",

57 "imapflow": "^1.7.6",

58 "nodemailer": "^9.0.5",

59 "pdf-lib": "^1.17.1",

60 "pdf-parse": "^2.4.5",

61 "pdf-to-img": "^6.3.0",

62 "pdfjs-dist": "^5.6.205",

63 "pdfkit": "^0.20.1",

bin/beast-agent.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2'use strict';

4/* Beast Agent global npm launcher (`beast` short alias points to the same script):

5 `beast` / `beast-agent` → launches the app detached, frees the terminal immediately

6 `beast update` → installs the latest version from npm (run while the app is closed) */

8const { spawn, spawnSync } = require(

src/main.jsView file

5Trigger-reachable chain: manifest.main -> src/main.js L5: const fs = require('fs'); L6: const http = require('http'); L7: const dns = require('dns'); L8: const crypto = require('crypto'); ... L12: const OPENCODE_SESSION = 'beast-' + crypto.randomUUID(); L13: const { spawn } = require('child_process'); L14: const { Engine, OBSERVE_MARK } = require('./agent/engine'); ... L68: if (res.ok) { L69: const j = await res.json(); L70: const v = String(j.version || '').trim(); ... L79: if (win && !win.isDestroyed()) { L80: win.webContents.send('agent:event', { type: 'update', ...updateState, current: app.getVersion() });

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/main.jsView on unpkg · L5

1165const zipPath = path.join(outDir, `beast-${stamp}.zip`); L1166: /* zip yoksa PowerShell Compress-Archive ile */ L1167: await new Promise((resolve, reject) => {

High

Shell

Package source references shell execution.

src/main.jsView on unpkg · L1165

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. src/main.js: sadece API key gir, modeller otomatik çekilir. Hepsi OpenAI-uyumlu. */ { id: 'opencode-zen', name: 'OpenCode Zen', baseUrl: 'https://opencode.ai/zen/v1', hint: 'Ücretsiz modeller var — anahtar: opencode.ai/auth' }, { id: 'opencode-go', name: 'OpenCode Go', baseUrl: 'https://opencode.ai/zen/go/v1', hint: 'Abonelik anahtarı' }, { id: 'openrouter', name: 'OpenRouter', baseUrl: 'https://openrouter.ai/api/v1', hint: 'openrouter.ai/keys' }, { id: 'openai', name: 'OpenAI', baseUrl: 'https://api.openai.com/v1', hint: 'platform.openai.com/api-keys' }, { id: 'anthropic', name: 'Anthropic', baseUrl: 'https://api.anthropic.com/v1', hi

src/agent/mem0.jsView file

Lines 9-49javascript

9 - Hibrit arama: 0.65*semantic(cosine) + 0.35*keyword (mem0 semantic+BM25 felsefesi)

10 Her fonksiyon degradasyonlu: embedding yoksa keyword, LLM yoksa hash+cos dedup.

src/agent/searxng.jsView file

Lines 1-35javascript

1'use strict';

3/* SearXNG — local metasearch integration (github.com/searxng/searxng)

4 SearXNG officially targets Linux/Docker; on Windows it crashes because of

5 `import pwd`. This module installs the real searxng (GitHub master) into

6 Beast's EMBEDDED Python + writes a pwd shim + runs it in the background on

7 127.0.0.1:8888. The search chain only uses the 'searxng' engine while it is UP.

9 CLI: beast searxng → install if needed + start

10 beast searxng status → status

src/agent/store.jsView file

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. src/agent/store.js: const SITE_URL = 'https://sk[redacted]'; const SITE_FALLBACK_URL = 'https://beastagent-sk[redacted]'; const COMMUNITY_URL = 'https://raw.githubusercontent.com/algokodcom/beast-agent/main/store/skills.json'; const SKIP_DIRS = new Set(['node_modules', '.git', '__pycache__', '.drafts']); fs.writeFileSync(p, JSON.stringify(obj, null, 2)); fs.writeFileSync(target, String(content ?? ''), 'utf8');

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

src/agent/store.jsView on unpkg

src/agent/tools.jsView file

5const path = require('path'); L6: const https = require('https'); L7: const dns = require('dns'); L8: const net = require('net'); L9: const { execFile } = require('child_process'); L10: const { spawn } = require('child_process'); ... L107: ['-NoProfile', '-NoExit', '-Command', '-'], L108: { cwd: cwd || process.cwd(), windowsHide: true, env: envWithPathPrefix() } L109: ); ... L125: proc.stdin.unref && proc.stdin.unref(); L126: proc.stdout.unref && proc.stdout.unref(); L127: proc.stderr.unref && proc.stderr.unref();

Critical

Download Execute

Source downloads or fetches remote code and executes it.

src/agent/tools.jsView on unpkg · L5

•matchType = normalized_sha256 matchedPackage = beast-agent@2.38.0 matchedPath = src/agent/tools.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/tools.jsView on unpkg

src/agent/computeruse.jsView file

8L9: Sürücü: https://github.com/trycua/cua — `cua-driver mcp` stdio MCP sunucusu; L10: el yazımı minimal JSON-RPC 2.0 client'ı (mcp.js ile aynı çerçeve). L11: Binary yoksa eski PowerShell backend'ine düşer (yalnız koordinat + foreground). L12: ... L49: otomatik kurulum asla çalışmaz (tests dahil). */ L50: return !String(process.env.BEAST_CUA_DRIVER_CMD || '').trim(); L51: } ... L56: return new Promise((resolve) => { L57: execFile(driverCmd(), ['--version'], { timeout: 10000, windowsHide: true }, (err, stdout) => { L58: const res = { ... L70: function runInstaller(cb) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/agent/computeruse.jsView on unpkg · L8

•matchType = normalized_sha256 matchedPackage = beast-agent@2.38.0 matchedPath = src/agent/computeruse.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/computeruse.jsView on unpkg

src/agent/defaulttools/mt5_m15_m5/m15m5.pyView file

•path = src/agent/defaulttools/mt5_m15_m5/m15m5.py kind = build_helper sizeBytes = 1937 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/agent/defaulttools/mt5_m15_m5/m15m5.pyView on unpkg

scripts/fix-electron.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@2.38.0 matchedPath = scripts/fix-electron.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/fix-electron.jsView on unpkg

src/agent/gittools.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@2.38.0 matchedPath = src/agent/gittools.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/gittools.jsView on unpkg

src/mt5bridge.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@2.38.0 matchedPath = src/mt5bridge.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/mt5bridge.jsView on unpkg

src/agent/bus.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@2.38.0 matchedPath = src/agent/bus.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/bus.jsView on unpkg

src/agent/llm.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@2.38.0 matchedPath = src/agent/llm.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/llm.jsView on unpkg

src/agent/memory.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@2.38.0 matchedPath = src/agent/memory.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/memory.jsView on unpkg

src/agent/skills.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@2.38.0 matchedPath = src/agent/skills.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/skills.jsView on unpkg

src/agent/perception.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@2.38.0 matchedPath = src/agent/perception.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/perception.jsView on unpkg

Source & flagged code

28 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/fix-electron.js --soft

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/fix-electron.js --soft

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/beast-agent.jsView file

7L8: const { spawn, spawnSync } = require('child_process'); L9: const path = require('path');

High

Child Process

Package source references child process execution.

bin/beast-agent.jsView on unpkg · L7

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 13

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/beast-agent.jsView on unpkg

•matchType = token_shingles matchedPackage = beast-agent@2.38.0 matchedPath = bin/beast-agent.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/beast-agent.jsView on unpkg

7L8: const { spawn, spawnSync } = require('child_process'); L9: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/beast-agent.jsView on unpkg · L7

src/main.jsView file

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/main.jsView on unpkg · L5

1165const zipPath = path.join(outDir, `beast-${stamp}.zip`); L1166: /* zip yoksa PowerShell Compress-Archive ile */ L1167: await new Promise((resolve, reject) => {

High

Shell

Package source references shell execution.

src/main.jsView on unpkg · L1165

src/agent/mem0.jsView file

29function beastRoot() { L30: if (process.env.BEAST_DATA) return process.env.BEAST_DATA; L31: return process.env.APPDATA L32: ? path.join(process.env.APPDATA, 'beast') L33: : path.join(os.homedir(), 'AppData', 'Roaming', 'beast'); L34: } ... L167: if (!v) return null; L168: return Buffer.from(v.buffer, v.byteOffset, v.byteLength).toString('base64'); L169: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/agent/mem0.jsView on unpkg · L29

src/agent/searxng.jsView file

15const os = require('os'); L16: const { spawn, execFile, execSync } = require('child_process'); L17: L18: const REQS_URL = 'https://raw.githubusercontent.[redacted].txt'; L19: const PKG_URL = 'https://github.[redacted].zip'; ... L25: function beastAppDir() { L26: if (process.env.BEAST_DATA) return process.env.BEAST_DATA; L27: return process.env.APPDATA

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/agent/searxng.jsView on unpkg · L15

•matchType = normalized_sha256 matchedPackage = beast-agent@2.38.0 matchedPath = src/agent/searxng.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.38.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/searxng.jsView on unpkg

src/agent/store.jsView file

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

src/agent/store.jsView on unpkg

src/agent/tools.jsView file

Critical

Download Execute

Source downloads or fetches remote code and executes it.

src/agent/tools.jsView on unpkg · L5

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/tools.jsView on unpkg

src/agent/computeruse.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/agent/computeruse.jsView on unpkg · L8

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/computeruse.jsView on unpkg

src/agent/defaulttools/mt5_m15_m5/m15m5.pyView file

•path = src/agent/defaulttools/mt5_m15_m5/m15m5.py kind = build_helper sizeBytes = 1937 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/agent/defaulttools/mt5_m15_m5/m15m5.pyView on unpkg

scripts/fix-electron.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/fix-electron.jsView on unpkg

src/agent/gittools.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/gittools.jsView on unpkg

src/mt5bridge.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/mt5bridge.jsView on unpkg

src/agent/bus.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/bus.jsView on unpkg

src/agent/llm.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/llm.jsView on unpkg

src/agent/memory.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/memory.jsView on unpkg

src/agent/skills.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/skills.jsView on unpkg

src/agent/perception.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/perception.jsView on unpkg

Source & flagged code

28 flagged

package.jsonView file

Lines 23-63json

23 "llm",

24 "openai"

25 ],

26 "main": "src/main.js",

27 "preferGlobal": true,

28 "bin": {

29 "beast-agent": "bin/beast-agent.js",

30 "beast": "bin/beast-agent.js"

31 },

32 "files": [

33 "src/**/*",

34 "assets/**/*",

35 "scripts/**/*",

36 "!**/__pycache__/**"

37 ],

38 "scripts": {

39 "start": "electron .",

40 "dist": "electron-builder --win nsis portable",

41 "test": "node --test \"tests/**/*.test.js\"",

42 "release": "node scripts/release.js",

43 "postinstall": "node scripts/fix-electron.js --soft",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L43

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L43

44 "prepublishOnly": "node scripts/swap-electron.js deps",

45 "postpublish": "node scripts/swap-electron.js devdeps"

46 },

47 "devDependencies": {

48 "electron-builder": "^26.15.3"

49 },

50 "dependencies": {

51 "@huggingface/transformers": "3.7.5",

52 "@pdf-lib/fontkit": "^1.1.1",

53 "@whiskeysockets/baileys": "^7.0.0-rc14",

54 "@xenova/transformers": "^2.17.2",

55 "electron-updater": "^6.8.9",

56 "ffmpeg-static": "^5.3.0",

57 "imapflow": "^1.7.6",

58 "nodemailer": "^9.0.5",

59 "pdf-lib": "^1.17.1",

60 "pdf-parse": "^2.4.5",

61 "pdf-to-img": "^6.3.0",

62 "pdfjs-dist": "^5.6.205",

63 "pdfkit": "^0.20.1",

bin/beast-agent.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2'use strict';

4/* Beast Agent global npm launcher (`beast` short alias points to the same script):

5 `beast` / `beast-agent` → launches the app detached, frees the terminal immediately

6 `beast update` → installs the latest version from npm (run while the app is closed) */

8const { spawn, spawnSync } = require(

src/main.jsView file

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/main.jsView on unpkg · L5

1165const zipPath = path.join(outDir, `beast-${stamp}.zip`); L1166: /* zip yoksa PowerShell Compress-Archive ile */ L1167: await new Promise((resolve, reject) => {

High

Shell

Package source references shell execution.

src/main.jsView on unpkg · L1165

src/agent/mem0.jsView file

Lines 9-49javascript

9 - Hibrit arama: 0.65*semantic(cosine) + 0.35*keyword (mem0 semantic+BM25 felsefesi)

10 Her fonksiyon degradasyonlu: embedding yoksa keyword, LLM yoksa hash+cos dedup.

src/agent/searxng.jsView file

Lines 1-35javascript

1'use strict';

3/* SearXNG — local metasearch integration (github.com/searxng/searxng)

4 SearXNG officially targets Linux/Docker; on Windows it crashes because of

5 `import pwd`. This module installs the real searxng (GitHub master) into

6 Beast's EMBEDDED Python + writes a pwd shim + runs it in the background on

7 127.0.0.1:8888. The search chain only uses the 'searxng' engine while it is UP.

9 CLI: beast searxng → install if needed + start

10 beast searxng status → status

src/agent/store.jsView file

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

src/agent/store.jsView on unpkg

src/agent/tools.jsView file

Critical

Download Execute

Source downloads or fetches remote code and executes it.

src/agent/tools.jsView on unpkg · L5

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/tools.jsView on unpkg

src/agent/computeruse.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/agent/computeruse.jsView on unpkg · L8

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/computeruse.jsView on unpkg

src/agent/defaulttools/mt5_m15_m5/m15m5.pyView file

•path = src/agent/defaulttools/mt5_m15_m5/m15m5.py kind = build_helper sizeBytes = 1937 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/agent/defaulttools/mt5_m15_m5/m15m5.pyView on unpkg

scripts/fix-electron.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/fix-electron.jsView on unpkg

src/agent/gittools.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/gittools.jsView on unpkg

src/mt5bridge.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/mt5bridge.jsView on unpkg

src/agent/bus.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/bus.jsView on unpkg

src/agent/llm.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/llm.jsView on unpkg

src/agent/memory.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/memory.jsView on unpkg

src/agent/skills.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/skills.jsView on unpkg

src/agent/perception.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/perception.jsView on unpkg

beast-agent@2.44.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code