Loading npm security reports…
beast-agent@2.86.0: Clean npm security report (Allow) | LPM Firewall
Allowed — no malicious behavior detected
No malicious behavior detected. 36 low-signal pattern(s) reviewed.
scanned 3d ago · by lpm-firewall-ai Source inspection supports a package-aligned Electron runtime repair hook and ordinary version checking and agent features. The scanner’s source-similarity labels did not establish an attack, and the inspected paths showed no concrete malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Package installation triggers the postinstall repair; the launcher’s update operation requires the user to invoke the update command.
Impact
No unauthorized credential transfer, destructive action, or unrelated control-surface mutation was established.
Mechanism
The repair verifies the Electron binary and, if needed, reruns Electron’s installer using its default source or an Electron mirror. The main entrypoint checks the npm registry for the latest package version.
AI rationale
Source inspection supports a package-aligned Electron runtime repair hook and ordinary version checking and agent features. The scanner’s source-similarity labels did not establish an attack, and the inspected paths showed no concrete malicious behavior.
Evidence
package.json scripts/fix-electron.js src/main.js
Network endpoints2
registry.npmjs.org npmmirror.com
public snapshot AI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
package.json runs a postinstall repair for the package’s Electron runtime; the repair checks for a working binary and retries its installer from Electron’s standard sources. The inspected agent engine reads project instruction files into the session prompt; the Discord excerpt builds a bounded message payload from an incoming message. The inspected CLI update path runs only when the user invokes the update command. The main entrypoint’s npm request checks the latest package version. The inspected source-similarity paths cover MCP, Git tools, local app extensions, logging, event handling, configuration, memory, spreadsheet support, and perception features; their similarity labels alone do not establish malicious behavior. Behavioral surface
Source ChildProcess Crypto DynamicRequire EnvironmentVars Eval Filesystem Network Shell WebSocket
Supply chain
27 flagged · loading source • scripts.postinstall = node scripts/fix-electron.js --soft
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg • scripts.postinstall = node scripts/fix-electron.js --soft
Medium Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.json View on unpkg 7 L8: const { spawn, spawnSync } = require('child_process');
L9: const path = require('path');
High Child Process
Package source references child process execution.
bin/beast-agent.js View on unpkg · L7 2 Critical 21 High 6 Medium 7 Low
Critical Download Execute src/agent/tools.js
Critical Trigger Reachable Dangerous Capability src/main.js
High Install Time Lifecycle Scripts package.json
High Child Process bin/beast-agent.js
High Shell bin/beast-agent.js
High Same File Env Network Execution src/agent/searxng.js
High Credential Redirect Persistence src/main.js
High Entrypoint Foreign Package Code Overwrite src/agent/store.js
High Command Output Exfiltration src/main.js
High Runtime Package Install bin/beast-agent.js#virtual:normalized:round1
High Semantic Analysis Limited bin/beast-agent.js
Affected versions and remediation This report applies to beast-agent@2.86.0 .
See all versions of beast-agent for other recorded verdicts.
Review the evidence and your use of beast-agent@2.86.0 before allowing it. Restrict the permissions described in this report. Choose an independently verified alternative or release. This report does not establish that other versions are safe. Evidence last updated: 2026-10-20 06:46:29.164Z (UTC) .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced .
HighEntropyStrings UrlStrings
Manifest No manifest risk signals triggered.
scanned 90 file(s), 3.38 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.github.com, api.groq.com, api.openai.com, api.ornek.com, api.search.tinyfish.ai, api.telegram.org, api.typesafe.ai, api.z.ai, beastagent-skills.web.app, bootstrap.pypa.io, codeload.github.com, connectivitycheck.gstatic.com, cp.cloudflare.com, discord.com, docs.astral.sh, duckduckgo.com, fapi.binance.com, feeds.content.dowjones.io, generativelanguage.googleapis.com, git-scm.com, github.com, html.duckduckgo.com, huggingface.co, integrate.api.nvidia.com, news.google.com, npmmirror.com, opencode.ai, openrouter.ai, raw.githubusercontent.com, registry.npmjs.org, schemas.openxmlformats.org, skills.algokod.com, www.bloomberght.com, www.forexcrunch.com, www.forexlive.com, www.google.com, www.investing.com, www.msftconnecttest.com, www.npmjs.com, www.okx.com, www.python.org, www.w3.org
20
try {
L21: spawnSync('powershell.exe', ['-NoProfile', '-Command',
L22: "Get-Process electron -ErrorAction SilentlyContinue | Where-Object { $_.Path -like '*node_modules*beast-agent*' } | Stop-Process -Force"],
• stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 20
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
bin/beast-agent.js View on unpkg 7 L8: const { spawn, spawnSync } = require('child_process');
L9: const path = require('path');
Medium Dynamic Require
Package source references dynamic require/import behavior.
bin/beast-agent.js View on unpkg · L7 45 function beastRoot() {
L46: if (process.env.BEAST_DATA) return process.env.BEAST_DATA;
L47: return process.env.APPDATA
L48: ? path.join(process.env.APPDATA, 'beast')
L49: : path.join(os.homedir(), 'AppData', 'Roaming', 'beast');
L50: }
...
L92: if (!v) return null;
L93: return Buffer.from(v.buffer, v.byteOffset, v.byteLength).toString('base64');
L94: }
Low Weak Crypto
Package source references weak cryptographic algorithms.
src/agent/docchat.js View on unpkg · L45 15 const os = require('os');
L16: const { spawn, execFile, execSync } = require('child_process');
L17:
L18: const REQS_URL = 'https://raw.githubusercontent.[redacted].txt';
L19: const PKG_URL = 'https://github.[redacted].zip';
...
L25: function beastAppDir() {
L26: if (process.env.BEAST_DATA) return process.env.BEAST_DATA;
L27: return process.env.APPDATA
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
src/agent/searxng.js View on unpkg · L15 • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/searxng.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/searxng.js View on unpkg 5 Trigger-reachable chain: manifest.main -> src/main.js
L5: const fs = require('fs');
L6: const http = require('http');
L7: const https = require('https');
L8: const dns = require('dns');
L9: const crypto = require('crypto');
...
L13: const OPENCODE_SESSION = 'beast-' + crypto.randomUUID();
L14: const { spawn } = require('child_process');
L15: const { Engine, OBSERVE_MARK, stripAiDashes } = require('./agent/engine');
...
L83: if (res.ok) {
L84: const j = await res.json();
L85: const v = String(j.version || '').trim();
...
L94: if (win && !win.isDestroyed()) {
Critical Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
src/main.js View on unpkg · L5 • Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
src/main.js:
sadece API key gir, modeller otomatik çekilir. Hepsi OpenAI-uyumlu. */
{ id: 'opencode-zen', name: 'OpenCode Zen', baseUrl: 'https://opencode.ai/zen/v1', hint: 'Ücretsiz modeller var — anahtar: opencode.ai/auth' },
{ id: 'opencode-go', name: 'OpenCode Go', baseUrl: 'https://opencode.ai/zen/go/v1', hint: 'Abonelik anahtarı' },
{ id: 'openrouter', name: 'OpenRouter', baseUrl: 'https://openrouter.ai/api/v1', hint: 'openrouter.ai/keys' },
{ id: 'openai', name: 'OpenAI', baseUrl: 'https://api.openai.com/v1', hint: 'platform.openai.com/api-keys' },
{ id: 'anthropic', name: 'Anthropic', baseUrl: 'https://api.anthropic.com/v1', hi
High Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
src/main.js View on unpkg 5 const fs = require('fs');
L6: const http = require('http');
L7: const https = require('https');
L8: const dns = require('dns');
L9: const crypto = require('crypto');
...
L13: const OPENCODE_SESSION = 'beast-' + crypto.randomUUID();
L14: const { spawn } = require('child_process');
L15: const { Engine, OBSERVE_MARK, stripAiDashes } = require('./agent/engine');
...
L83: if (res.ok) {
L84: const j = await res.json();
L85: const v = String(j.version || '').trim();
...
L94: if (win && !win.isDestroyed()) {
High Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
src/main.js View on unpkg · L5 • Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
src/agent/store.js:
const SITE_URL = 'https://sk[redacted]';
const SITE_FALLBACK_URL = 'https://beastagent-sk[redacted]';
const COMMUNITY_URL = 'https://raw.githubusercontent.com/algokodcom/beast-agent/main/store/skills.json';
const SKIP_DIRS = new Set(['node_modules', '.git', '__pycache__', '.drafts']);
fs.writeFileSync(p, JSON.stringify(obj, null, 2));
fs.writeFileSync(target, String(content ?? ''), 'utf8');
High Entrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
src/agent/store.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/store.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/store.js View on unpkg 5 const path = require('path');
L6: const https = require('https');
L7: const dns = require('dns');
L8: const net = require('net');
L9: const { execFile } = require('child_process');
L10: const { spawn } = require('child_process');
...
L222: if (/\bnpm\s+init\b/i.test(raw) && !/(\s-y\b|\s--yes\b)/i.test(raw)) {
L223: return '`npm init` sihirbazı soru sorar — `npm init -y` kullan ya da package.json\'u write_file ile yaz.';
L224: }
...
L256: ['-NoProfile', '-NonInteractive', '-NoExit', '-ExecutionPolicy', 'Bypass', '-Command', '-'],
L257: { cwd: cwd || process.cwd(), windowsHide: true, env: envWithPathPrefix() }
L258: );
Critical Download Execute
Source downloads or fetches remote code and executes it.
src/agent/tools.js View on unpkg · L5 bin/beast-agent.js#virtual:normalized:round1 View file 44 } else {
L45: try { spawnSync("pkill", ["-f", "node_modules/beast-agent"], { stdio: "ignore" }); } catch {}
L46: }
...
L57: This command is run by the update button inside a VISIBLE cmd window;
L58: it also works from a terminal — npm install output streams on screen. */
L59: if (process.argv[2] === "update") {
High Runtime Package Install
Package source invokes a package manager install command at runtime.
bin/beast-agent.js#virtual:normalized:round1 View on unpkg · L44 src/agent/defaulttools/fastbrowse_task/fastbrowse_bridge.py View file • path = src/agent/defaulttools/fastbrowse_task/fastbrowse_bridge.py
kind = build_helper
sizeBytes = 14937
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
src/agent/defaulttools/fastbrowse_task/fastbrowse_bridge.py View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/mcp.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/mcp.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = scripts/release.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/release.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/gittools.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/gittools.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/apps.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/apps.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/logger.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/logger.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/bus.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/bus.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/config.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/config.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/memory.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/memory.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/xlsx.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/xlsx.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/perception.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/perception.js View on unpkg High
Known Malware Source Similarity
src/agent/mcp.js
High Known Malware Source Similarity scripts/release.js
High Known Malware Source Similarity src/agent/gittools.js
High Known Malware Source Similarity src/agent/searxng.js
High Known Malware Source Similarity src/agent/apps.js
High Known Malware Source Similarity src/agent/logger.js
High Known Malware Source Similarity src/agent/bus.js
High Known Malware Source Similarity src/agent/config.js
High Known Malware Source Similarity src/agent/memory.js
High Known Malware Source Similarity src/agent/xlsx.js
High Known Malware Source Similarity src/agent/perception.js
High Known Malware Source Similarity src/agent/store.js
Medium Ambiguous Install Lifecycle Script package.json
Medium Dynamic Require bin/beast-agent.js
Medium Ships Build Helper src/agent/defaulttools/fastbrowse_task/fastbrowse_bridge.py
Medium Structural Risk Force Deep Review
Low Non Install Lifecycle Scripts
Low Weak Crypto src/agent/docchat.js
Entrypoints main → src/main.js bin → beast, beast-agent
Runtime No engine / OS / CPU constraints
Artifact 4.92 MB · 152 files 2 signature(s)
Install lifecycle postinstall prepublishOnly
Behavioral surface ChildProcess Crypto DynamicRequire EnvironmentVars Eval Filesystem Network Shell WebSocket HighEntropyStrings UrlStrings Manifest: clean
27 flagged Lines 25-65 json
26 "main" : "src/main.js" ,
29 "beast-agent" : "bin/beast-agent.js" ,
30 "beast" : "bin/beast-agent.js"
41 "start" : "electron ." ,
42 "dist" : "electron-builder --win nsis portable" ,
43 "test" : "node --test --test-concurrency=6 tests/*.test.js" ,
44 "release" : "node scripts/release.js" ,
45 "postinstall" : "node scripts/fix-electron.js --soft" ,
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg · L45 Medium Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.json View on unpkg · L45 46 "prepublishOnly" : "node scripts/swap-electron.js deps" ,
47 "postpublish" : "node scripts/swap-electron.js devdeps"
50 "electron-builder" : "^26.15.3"
53 "@huggingface/transformers" : "3.7.5" ,
54 "@ngrok/ngrok" : "^1.7.0" ,
55 "ngrok" : "5.0.0-beta.2" ,
56 "@pdf-lib/fontkit" : "^1.1.1" ,
57 "@whiskeysockets/baileys" : "^7.0.0-rc14" ,
58 "@xenova/transformers" : "^2.17.2" ,
59 "electron-updater" : "^6.8.9" ,
60 "ffmpeg-static" : "^5.3.0" ,
62 "nodemailer" : "^9.0.5" ,
64 "pdf-parse" : "^2.4.5" ,
65 "pdf-to-img" : "^6.3.0" ,
Lines 1-40 javascript
4 /* Beast Agent global npm launcher (`beast` short alias points to the same script):
5 `beast` / `beast-agent` → launches the app detached, frees the terminal immediately
6 `beast update` → installs the latest version from npm (run while the app is closed) */
8 const { spawn , spawnSync } = require (
Lines 25-65 javascript
25 const mem0 = require ( './mem0' );
27 const DIMS = mem0. DIMS || 384 ;
Lines 1-35 javascript
3 /* SearXNG — local metasearch integration (github.com/searxng/searxng)
4 SearXNG officially targets Linux/Docker; on Windows it crashes because of
5 `import pwd`. This module installs the real searxng (GitHub master) into
6 Beast's EMBEDDED Python + writes a pwd shim + runs it in the background on
7 127.0.0.1:8888. The search chain only uses the 'searxng' engine while it is UP.
9 CLI: beast searxng → install if needed + start
10 beast searxng status → status
5 Trigger-reachable chain: manifest.main -> src/main.js
L5: const fs = require('fs');
L6: const http = require('http');
L7: const https = require('https');
L8: const dns = require('dns');
L9: const crypto = require('crypto');
...
L13: const OPENCODE_SESSION = 'beast-' + crypto.randomUUID();
L14: const { spawn } = require('child_process');
L15: const { Engine, OBSERVE_MARK, stripAiDashes } = require('./agent/engine');
...
L83: if (res.ok) {
L84: const j = await res.json();
L85: const v = String(j.version || '').trim();
...
L94: if (win && !win.isDestroyed()) {
Critical Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
src/main.js View on unpkg · L5 • Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
src/main.js:
sadece API key gir, modeller otomatik çekilir. Hepsi OpenAI-uyumlu. */
{ id: 'opencode-zen', name: 'OpenCode Zen', baseUrl: 'https://opencode.ai/zen/v1', hint: 'Ücretsiz modeller var — anahtar: opencode.ai/auth' },
{ id: 'opencode-go', name: 'OpenCode Go', baseUrl: 'https://opencode.ai/zen/go/v1', hint: 'Abonelik anahtarı' },
{ id: 'openrouter', name: 'OpenRouter', baseUrl: 'https://openrouter.ai/api/v1', hint: 'openrouter.ai/keys' },
{ id: 'openai', name: 'OpenAI', baseUrl: 'https://api.openai.com/v1', hint: 'platform.openai.com/api-keys' },
{ id: 'anthropic', name: 'Anthropic', baseUrl: 'https://api.anthropic.com/v1', hi
High Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
src/main.js View on unpkg 5 const fs = require('fs');
L6: const http = require('http');
L7: const https = require('https');
L8: const dns = require('dns');
L9: const crypto = require('crypto');
...
L13: const OPENCODE_SESSION = 'beast-' + crypto.randomUUID();
L14: const { spawn } = require('child_process');
L15: const { Engine, OBSERVE_MARK, stripAiDashes } = require('./agent/engine');
...
L83: if (res.ok) {
L84: const j = await res.json();
L85: const v = String(j.version || '').trim();
...
L94: if (win && !win.isDestroyed()) {
• Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
src/agent/store.js:
const SITE_URL = 'https://sk[redacted]';
const SITE_FALLBACK_URL = 'https://beastagent-sk[redacted]';
const COMMUNITY_URL = 'https://raw.githubusercontent.com/algokodcom/beast-agent/main/store/skills.json';
const SKIP_DIRS = new Set(['node_modules', '.git', '__pycache__', '.drafts']);
fs.writeFileSync(p, JSON.stringify(obj, null, 2));
fs.writeFileSync(target, String(content ?? ''), 'utf8');
High Entrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
src/agent/store.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/store.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/store.js View on unpkg 5 const path = require('path');
L6: const https = require('https');
L7: const dns = require('dns');
L8: const net = require('net');
L9: const { execFile } = require('child_process');
L10: const { spawn } = require('child_process');
...
L222: if (/\bnpm\s+init\b/i.test(raw) && !/(\s-y\b|\s--yes\b)/i.test(raw)) {
L223: return '`npm init` sihirbazı soru sorar — `npm init -y` kullan ya da package.json\'u write_file ile yaz.';
L224: }
...
L256: ['-NoProfile', '-NonInteractive', '-NoExit', '-ExecutionPolicy', 'Bypass', '-Command', '-'],
L257: { cwd: cwd || process.cwd(), windowsHide: true, env: envWithPathPrefix() }
L258: );
Critical Download Execute
Source downloads or fetches remote code and executes it.
src/agent/tools.js View on unpkg · L5 bin/beast-agent.js#virtual:normalized:round1 View file 44 } else {
L45: try { spawnSync("pkill", ["-f", "node_modules/beast-agent"], { stdio: "ignore" }); } catch {}
L46: }
...
L57: This command is run by the update button inside a VISIBLE cmd window;
L58: it also works from a terminal — npm install output streams on screen. */
L59: if (process.argv[2] === "update") {
High Runtime Package Install
Package source invokes a package manager install command at runtime.
bin/beast-agent.js#virtual:normalized:round1 View on unpkg · L44 src/agent/defaulttools/fastbrowse_task/fastbrowse_bridge.py View file • path = src/agent/defaulttools/fastbrowse_task/fastbrowse_bridge.py
kind = build_helper
sizeBytes = 14937
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
src/agent/defaulttools/fastbrowse_task/fastbrowse_bridge.py View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/mcp.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/mcp.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = scripts/release.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/release.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/gittools.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/gittools.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/apps.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/apps.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/logger.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/logger.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/bus.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/bus.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/config.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/config.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/memory.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/memory.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/xlsx.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/xlsx.js View on unpkg • matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/perception.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/perception.js View on unpkg 'child_process'
);
9 const path = require ( 'path' );
High Child Process
Package source references child process execution.
bin/beast-agent.js View on unpkg · L7 Medium Dynamic Require
Package source references dynamic require/import behavior.
bin/beast-agent.js View on unpkg · L7 10 const fs = require ( 'fs' );
11 const os = require ( 'os' );
13 /* uninstall mode: removes the app but KEEPS YOUR PERSONAL DATA
14 (%APPDATA%\beast: config.yaml, .env, sessions, memory, WhatsApp pairing, backups) */
15 if (process.argv[ 2 ] === 'uninstall' ) {
16 const isWin = process.platform === 'win32' ;
17 console. log ( 'Uninstalling Beast Agent \u2026 ' );
19 /* stop running instances */
21 spawnSync ( 'powershell.exe' , [ '-NoProfile' , '-Command' ,
22 "Get-Process electron -ErrorAction SilentlyContinue | Where-Object { $_.Path -like '*node_modules*beast-agent*' } | Stop-Process -Force" ],
24 console. log ( ' \u2022 stopped running Beast instances (if any)' );
26 /* remove the startup entry — only if it points to beast-agent */
28 spawnSync ( 'powershell.exe' , [ '-NoProfile' , '-Command' ,
29 "$k='HKCU: \\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ Run';" +
30 "foreach($n in (Get-Item $k -ErrorAction SilentlyContinue).GetValueNames()){" +
31 "$v=(Get-ItemProperty $k).$n; if($v -like '*node_modules*beast-agent*'){ Remove-ItemProperty -Path $k -Name $n; Write-Host ' \u2022 startup entry removed' } }" ],
32 { stdio: 'inherit' });
34 /* remove the desktop shortcut (real Desktop path: may be under OneDrive) */
36 spawnSync ( 'powershell.exe' , [ '-NoProfile' , '-Command' ,
37 "$d=[Environment]::GetFolderPath('Desktop'); if(Test-Path \" $d \\ Beast Agent.lnk \" ){ Remove-Item \" $d \\ Beast Agent.lnk \" -Force; Write-Host ' \u2022 desktop shortcut removed' }" ],
38 { stdio: 'inherit' });
40 /* remove the Start Menu shortcut (Windows AUMID registration) */
• stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 20
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
bin/beast-agent.js View on unpkg
=
0.65
;
// hibrit skor: semantik ağırlık (mem0 ile aynı)
29 const SEARCH_KW_W = 0.35 ; // hibrit skor: keyword ağırlık
30 const CHUNK_CHARS = 1400 ; // ~350 token
31 const CHUNK_OVERLAP = 170 ; // ~%12 üst üste binme — cümle ortası bölünmesin
32 const MAX_FILES = 600 ; // güvenlik tavanı (kütüphane kendi kendine şişmesin)
33 const MAX_FILE_BYTES = 20 * 1024 * 1024 ; // 20 MB / dosya
34 const MAX_CHUNKS = 12000 ; // kütüphane tavanı (~600 dosya × 20 parça ortalama)
35 const EMBED_BATCH = 24 ; // tek seferde gömülecek parça sayısı
38 const TEXT_EXT = / \. (txt | md | markdown | csv | tsv | json | jsonl | log | yaml | yml | xml | html | htm | ini | cfg | conf | nfo | srt | ts | js | jsx | mjs | cjs | py | ps1 | psm1 | bat | cmd | sql | css | c | cpp | h | hpp | cs | java | go | rs | rb | php) $ / i ;
39 const PDF_EXT = / \. pdf $ / i ;
40 const SKIP_DIR = /(node_modules |^ \. git $|^ \. svn $| dist $| build $| __pycache__ |^ \. | venv)/ ;
41 const TR_FOLD = { ç: 'c' , ğ: 'g' , ı: 'i' , ö: 'o' , ş: 's' , ü: 'u' , â: 'a' , î: 'i' , û: 'u' };
43 /* ---------- yollar ---------- */
46 if (process.env. BEAST_DATA ) return process.env. BEAST_DATA ;
47 return process.env. APPDATA
48 ? path. join (process.env. APPDATA , 'beast' )
49 : path. join (os. homedir (), 'AppData' , 'Roaming' , 'beast' );
50 }
Low Weak Crypto
Package source references weak cryptographic algorithms.
src/agent/docchat.js View on unpkg · L45 53 const d = path. join ( beastRoot (), 'docchat' );
54 try { fs. mkdirSync (d, { recursive: true }); } catch {}
58 /* library adı → güvenli dosya adı */
59 function libSafe ( name ) {
60 const s = String (name || 'main' ). trim (). toLowerCase ()
61 . replace ( / [ ^ a-zA-Z0-9._-] + / g , '-' ). replace ( / ^ - +| - +$ / g , '' ). slice ( 0 , 40 );
65 function libPath ( name ) {
beast searxng stop → stop */
13 const fs = require ( 'fs' );
14 const path = require ( 'path' );
15 const os = require ( 'os' );
16 const { spawn , execFile , execSync } = require ( 'child_process' );
18 const REQS_URL = 'https://raw.githubusercontent.com/searxng/searxng/master/requirements.txt' ;
19 const PKG_URL = 'https://github.com/searxng/searxng/archive/refs/heads/master.zip' ;
20 const GETPIP_URL = 'https://bootstrap.pypa.io/get-pip.py' ;
21 const DEFAULT_URL = 'http://127.0.0.1:8888' ;
23 /* ---------- paths ---------- */
25 function beastAppDir () {
26 if (process.env. BEAST_DATA ) return process.env. BEAST_DATA ;
27 return process.env. APPDATA
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
src/agent/searxng.js View on unpkg · L15 28 ? path. join (process.env. APPDATA , 'beast' )
29 : path. join (os. homedir (), 'AppData' , 'Roaming' , 'beast' );
33 const d = path. join ( beastAppDir (), 'searxng' );
34 try { fs. mkdirSync (d, { recursive: true }); } catch {}
• matchType = normalized_sha256
matchedPackage = beast-agent@2.44.2
matchedPath = src/agent/searxng.js
matchedIdentity = npm:YmVhc3QtYWdlbnQ:2.44.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/agent/searxng.js View on unpkg High Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
src/main.js View on unpkg · L5