registry / blade-code / 0.10.179

blade-code@0.10.179

🗡️ Blade Code - 智能代码助手命令行工具

Static Scan Results

scanned 25d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 97.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 113 file(s), 4.41 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.github.com, api.openai.com, bun.sh, cdn.jsdelivr.net, code.visualstudio.com, duckduckgo.com, example.com, gateway.example.com, github.com, glama.ai, mcp.exa.ai, r.jina.ai, radix-ui.com, raw.githubusercontent.com, react.dev, registry.npmjs.org, search.ononoki.org, searx.be, searx.tiekoetter.com, searx.work, tauri.localhost, www.npmjs.com, www.w3.org

Source & flagged code

10 flagged

dist/chunk-ywqkqsff.jsView file

Lines 694-734javascript

694| "提高温度" | temperature 调整 |

695| "限制 50 轮" | maxTurns = 50 |

696| "禁用 hooks" | disableAllHooks = true |

697| "添加环境变量" | env 对象更新 |

698

699## 验证流程

700

701每次安装 hook 或修改配置后，**必须**验证：

702

7031. 用 \`ConfigTool({ operation: "get", key: "<modified-key>" })\` 确认值已生效

7042. 如果是 hooks，检查结构是否正确（包含 matcher 和 hooks 数组）

7053. 如果是 permissions，确认 allow/ask/deny 数组格式正确

7064. 告知用户配置已保存到哪个文件（根据 scope 判断）

707

708## 注意事项

709

7101. **hooks 字段使用 deep-merge 策略**：设置新的 hook 不会覆盖已有的 hook。但如果同一事件下设置新的 matcher 数组，会替换该事件的整个 matcher 列表

7112. **permissions 字段使用 replace 策略**：设置 permissions 会完全替换现有值。如果只想添加规则，先 GET 当前值，合并后再 SET

7123. **env 字段使用 deep-merge 策略**：可以逐个添加环境变量

7134. **scope 默认值**：不指定 scope 时，根据字段路由表决定（hooks/permissions/env 默认 local，temperature/codeTheme 等默认 global）

714`}}import*as n from"node:fs/promises";import*as Y0 from"node:path";import{parse as yO}from"yaml";var hO=/^---\r?\n([\s\S]*?)\r

715`)}get size(){return this.skills.size}async refresh(){return this.skills.clear(),this.pluginSkills.clear(),this.initialized=!1,this.initialize()}snapshot(){let O=new R({...this.config});return O.skills=new Map(Array.from(this.skills,([$,Q])=>[$,{...Q,...Q.allowedTools?{allowedTools:[...Q.allowedTools]}:{}}])),O.pluginSkills=new Map(Array.from(this.pluginSkills,([$,Q])=>[$,{...Q,metadata:{...Q.metadata,...Q.metadata.allowedTools?{allowedTools:[...Q.metadata.allowedTools]}:{}}}])),O.initialized=this.initialized,O}registerPluginSkill(O){this.pluginSkills.set(O.namespacedName,O),this.skills.set(O. ...

716${Y}

High

Child Process

Package source references child process execution.

dist/chunk-ywqkqsff.jsView on unpkg · L714

717\`\`\``;J=J.replace(L,H)}}catch{}}return J}hasDynamicContent(O){return{hasArgs:/\$ARGUMENTS|\$\d/.test(

718

719`,J=Z.length,L=0;for(let K of $){let W=K.argumentHint?` ${K.argumentHint}`:"",G=`- /${K.name}${W}: ${K.description} ${K.label}

720`;if(J+G.length>O)break;Z+=G,J+=G.length,L++}if(L<Q)Z+=`

721(${L} of ${Q} commands shown due to character budget)`;return{text:Z,includedCount:L,totalCount:Q}}snapshot(){let O=new z;return O.workspaceRoot=this.workspaceRoot,O.commands=new Map(Array.from(this.commands,([$,Q])=>[$,{...Q,config:{...Q.config,...Q.config.allowedTools?{allowedTools:[...Q.config.allowedTools]}:{}}}])),O.pluginCommands=new Map(Array.from(this.pluginCommands,([$,Q])=>[$,{...Q,config:{...Q.config,...Q.config.allowedTools?{allowedTools:[...Q.config.allowedTools]}:{}}}])),O.initialized=this.initialized,O.lastDiscoveryResult=this.lastDiscoveryResult?{commands:Array.from(O.commands. ...

722`,"utf8"),await Z.close(),async()=>{try{if(JSON.parse(await F.readFile(O,"utf8")).token===$)await F.unlink(O)}catch(J){if(!u(J))j.warn(`Failed to release plugin package lock: ${J}`)}}}catch(Z){if(Z.code!=="EEXIST")throw Z;await this.removeStaleStoreLock(O),await new Promise((J)=>setTimeout(J,50))}throw new U("PLUGIN_STORE_BUSY","Plugin package store is busy; retry the operation")}async removeStaleStoreLock(O){try{let $=await F.lstat(O);if(!$.isFile()||$.isSymbolicLink())throw new U("PLUGIN_STORE_INVALID","Plugin package lock must be a regular file");if(process.getuid&&$.uid!==process.getuid()| ...

723`,{mode:384,encoding:"utf8"}),await F.chmod(this.statePath,384)}async ensureStoreDirectory(){try{let O=await F.lstat(this.stateRoot);if(!O.isDirectory()||O.isSymbolicLink())throw new U("PLUGIN_STORE_INVALID","Plugin package store must be a regular directory");if(process.getuid&&O.uid!==process.getuid())throw new U("PLUGIN_STORE_INVALID","Plugin package store must be owned by the current user");if((O.mode&511)!==448)throw new U("PLUGIN_STORE_INVALID","Plugin package store permissions must be 0700")}catch(O){if(!u(O))throw O;await F.mkdir(this.stateRoot,{recursive:!0,mode:448}),await F.chmod(thi ...

724`)}}function e(O=B()){return T.getInstance(O)}var O0=new Map,ZO=Object.values(B0);function o0(O,$){let Q=QO.resolve(O),Z=O0.get(Q);if(!Z||$&&Z.registry!==$)return!1;return $0.getInstance().loadConfig(Z.base,Q),O0.delete(Q),!0}function i0(O){let $={...O};for(let Q of ZO)$[Q]=(O[Q]??[]).map((Z)=>({...Z,matcher:Z.matcher?{...Z.matcher}:void 0,hooks:Z.hooks.map((J)=>({...J}))}));return $}class a0{commandRegistry;

725${K.content}

726</instruction-file>`}),J=Q==="contextual-project-instructions"&&$.length>0?` trigger-paths="${VO($.join(","))}"`:"",L=Z.length>0?`<${Q}${J}>

727${Z.join(`

728

729`)}

730</${Q}>`:"";return{content:L,files:[...O],references:O.map(c$),triggerPaths:[...$],contentBytes:Buffer.byteLength(L,"utf8"),provenanceSha256:x0(O.map((K)=>`${K.id}:${K.contentSha256}`).join(`

731`))}}function jO(O,$){let Q=$,Z=[];for(let J=O.length-1;J>=0;J-=1){let L=O[J];if(!L)continue;let K=Buffer.byteLength(L.content,"utf8");if(K>Q)continue;Z.push(L),Q-=K}return Z.reverse()}class h{projectRoot;catalogSha256;definitions;byId;constructor(O,$=[]){this.projectRoot=O;this.projectRoot=O1(O),this.definitions=Object.freeze([...$].sort(Q1).map((Q)=>Object.freeze({...Q}))),this.byId=new Map(this.definitions.map((Q)=>[Q.id,Q])),this.catalogSha256=x0(this.definitions.map((Q)=>`${Q.id}:${Q.contentSha256}`).join(`

732`))}static empty(O){return new h(O)}list(){return this.definitions.map((O)=>({id:O.id,relativePath:O.relativePath,source:O.source,kind:O.kind,conditional:O.conditional,contentSha256:O.contentSha256}))}snapshot(){return new h(this.projectRoot,this.definitions.map((O)=>({...O,patterns:O.patterns?[...O.patterns]:void 0})))}staticRules(O,$=y$){if(this.definitions.length===0)return Q0([],[],"project-instructions");let Q=this.relativeSourcePath(O),Z=this.definitions.filter((J)=>!J.conditional&&$1(J.scopeDirectory,Q));return Q0(jO(Z,$),[],"project-instructions")}contextualRules(O,$,Q,Z=h$){if(this.de ...

733export{O4 as Bg,$4 as Cg,Q4 as Dg,H1 as Eg,q4 as Fg,G4 as Gg,s as Hg,x4 as Ig,m as Jg,z as Kg,s0 as Lg,j0 as Mg,T as Ng,e as Og,t0 as Pg,M0 as Qg,h as Rg,zO as Sg,_0 as Tg,bO as Ug,s$ as Vg,u2 as Wg,c2 as Xg,l2 as Yg,s2 as Zg,n2 as _g,i2 as $g,o2 as ah};

734

Long lines were clipped for display.

dist/chunk-va2ep9wa.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/chunk-va2ep9wa.js: `,{encoding:"utf8",mode:384,fsync:!0}),Q}remove($){l0.rmSync(this.filePath($),{force:!0})}async reapOrphans(){let $=0,Z=0,J=0,Y=0;for(let Q of this.readAll()){if(R6(Q.ownerPid)&&S6... [error] ${G.message}`),z.releaseAdmission(),z.resolveCompletion()})()}),this.processes.set(J,z);try{await W.release()}catch(G){throw z.status="aborted",z.endTime=Date.now(),await U... `):o$(J,Math.max(0,X))}${m8}`,truncated:!0}}class c8{latestByPage=new Map;issue($){let Z=JU($.snapshot,$.maxBytes),J={snapshotId:`browser_snapshot_${_3()}`,pageId:$.pageId,pageGene... `).filter((w)=>w.toLocaleLowerCase("en-US").includes(B)),D=G.slice(

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/chunk-va2ep9wa.jsView on unpkg

1import{Ga as W3}from"./chunk-g01mth5d.js";import{Ja as T,Ka as $$,Pa as HW,Qa as fY,Ra as e0}from"./chunk-xcxjrrzk.js";import{$a as BX,Sa as Y5,Va as pZ,Za as tZ,_a as zX,bb as nW,... L2: const { spawn } = require('node:child_process'); L3: const [ownerPidValue, command, ...args] = process.argv.slice(1); ... L11: if (!Number.isSafeInteger(ownerPid) || ownerPid <= 1) return false; L12: if (process.platform !== 'win32' && process.ppid !== ownerPid) return false; L13: try { ... L79: } else if (ownerIsRunning()) { L80: child.stdin.end(); L81: } else { ... L97: child = spawn(command, args, { L98: env: process.env, L99: stdio: ['pipe', 'inherit', 'inherit'],

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-va2ep9wa.jsView on unpkg · L1

dist/chunk-kzcxhza1.jsView file

Lines 1-15javascript

1import{e as U3,f as H3,g as R3,h as s0,i as q3}from"./chunk-k1qe0zcj.js";import{j as o1}from"./chunk-zj1g4nbq.js";import{v as a0,w as y2}from

dist/chunk-7zsr4pak.jsView file

Lines 1-21javascript

1import{e as $X,f as JX,h as S$,i as M4}from"./chunk-k1qe0zcj.js";import{l as eX,m as $Z,n as JZ}from"./chunk-sqhyk4g9.js";import{A as q4,y as

dist/chunk-sqhyk4g9.jsView file

Lines 1-3javascript

1import{Xj as I}from"./chunk-2w572bba.js";import{Mk as f}from"./chunk-eg3ms291.js";import*as j from"fs/promises";import*as S from"path";import X from

dist/chunk-g01mth5d.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-6p6ts4kv.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-g01mth5d.jsView on unpkg

dist/chunk-jj4ggb04.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-a60cmnmz.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-jj4ggb04.jsView on unpkg

dist/chunk-z47b782d.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-kfkvdj49.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-z47b782d.jsView on unpkg

blade-code@0.10.179

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code