registry / blade-code / 0.10.206

blade-code@0.10.206

⚠ Under review

🗡️ Blade Code - 智能代码助手命令行工具

Static Scan Results

scanned 18d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 19 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 111 file(s), 4.37 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.github.com, api.openai.com, bun.sh, cdn.jsdelivr.net, code.visualstudio.com, duckduckgo.com, example.com, gateway.example.com, github.com, glama.ai, mcp.exa.ai, r.jina.ai, radix-ui.com, raw.githubusercontent.com, react.dev, registry.npmjs.org, search.ononoki.org, searx.be, searx.tiekoetter.com, searx.work, tauri.localhost, www.npmjs.com, www.w3.org

Source & flagged code

12 flagged

dist/chunk-5k8k56f2.jsView file

Lines 694-732javascript

694| "提高温度" | temperature 调整 |

695| "限制 50 轮" | maxTurns = 50 |

696| "禁用 hooks" | disableAllHooks = true |

697| "添加环境变量" | env 对象更新 |

698

699## 验证流程

700

701每次安装 hook 或修改配置后，**必须**验证：

702

7031. 用 \`ConfigTool({ operation: "get", key: "<modified-key>" })\` 确认值已生效

7042. 如果是 hooks，检查结构是否正确（包含 matcher 和 hooks 数组）

7053. 如果是 permissions，确认 allow/ask/deny 数组格式正确

7064. 告知用户配置已保存到哪个文件（根据 scope 判断）

707

708## 注意事项

709

7101. **hooks 字段使用 deep-merge 策略**：设置新的 hook 不会覆盖已有的 hook。但如果同一事件下设置新的 matcher 数组，会替换该事件的整个 matcher 列表

7112. **permissions 字段使用 replace 策略**：设置 permissions 会完全替换现有值。如果只想添加规则，先 GET 当前值，合并后再 SET

7123. **env 字段使用 deep-merge 策略**：可以逐个添加环境变量

7134. **scope 默认值**：不指定 scope 时，根据字段路由表决定（hooks/permissions/env 默认 local，temperature/codeTheme 等默认 global）

714`;var qb={name:"update-config",description:"配置 Blade harness（settings/hooks/permissions）。"+"用户请求自动化行为时使用此 Skill。",allowedTools:["ConfigTool","Read","Bash","AskUserQuestion"],version:"1.0.0",userInvocable:!0,disableModelInvocation:!1,whenToUse:'用户说"从现在起..."、"每次..."、"当...时..."、'+"需要改配置、安装 hooks、修改权限",path:"builtin://update-config"

715`)}get size(){return this.skills.size}async refresh(){return this.skills.clear(),this.pluginSkills.clear(),this.initialized=!1,this.initialize()}snapshot(){let b=new v({...this.config});return b.skills=new Map(Array.from(this.skills,([O,S])=>[O,{...S,...S.allowedTools?{allowedTools:[...S.allowedTools]}:{}}])),b.pluginSkills=new Map(Array.from(this.pluginSkills,([O,S])=>[O,{...S,metadata:{...S.metadata,...S.metadata.allowedTools?{allowedTools:[...S.metadata.allowedTools]}:{}}}])),b.initialized=this.initialized,b}registerPluginSkill(b){this.pluginSkills.set(b.namespacedName,b),this.skills.set(b. ...

716${K}

High

Child Process

Package source references child process execution.

dist/chunk-5k8k56f2.jsView on unpkg · L714

717\`\`\``;G=G.replace(I,Z)}}catch{}}return G}}import RO from"node:fs";import i0 from"node:os";import n from"node:path";import

718

719`,G=L.length,I=0;for(let $ of O){let T=$.argumentHint?` ${$.argumentHint}`:"",q=

720`;if(G+q.length>b)break;L+=q,G+=q.length,I++}if(I<S)L+=`

721(${I} of ${S} commands shown due to character budget)`;return{text:L,includedCount:I,totalCount:S}}snapshot(){let b=new

722`,"utf8"),await L.close(),async()=>{try{if(JSON.parse(await J.readFile(b,"utf8")).token===O)await J.unlink(b)}catch(G){if(!p(G))A.warn(`Failed to release plugin package lock: ${G}`)}}}catch(L){if(L.code!=="EEXIST")throw L;await this.removeStaleStoreLock(b),await new Promise((G)=>setTimeout(G,50))}throw new H("PLUGIN_STORE_BUSY","Plugin package store is busy; retry the operation")}async removeStaleStoreLock(b){try{let O=await J.lstat(b);if(!O.isFile()||O.isSymbolicLink())throw new H("PLUGIN_STORE_INVALID","Plugin package lock must be a regular file");if(process.getuid&&O.uid!==process.getuid()| ...

723`,{mode:384,encoding:"utf8"}),await J.chmod(this.statePath,384)}async ensureStoreDirectory(){try{let b=await J.lstat(this.stateRoot);if(!b.isDirectory()||b.isSymbolicLink())throw new H

724${$.content}

725</instruction-file>`}),G=S==="contextual-project-instructions"&&O.length>0?` trigger-paths="${B0(O.join(","))}"`:"",I=L.length>0?`<${S}${G}>

726${L.join(`

727

728`)}

729</${S}>`:"";return{content:I,files:[...b],references:b.map(a1),triggerPaths:[...O],contentBytes:Buffer.byteLength(I,"utf8"),provenanceSha256:bO(b.map(($)=>`${$.id}:${$.contentSha256}`).join(`

730`))}}function X0(b,O){let S=O,L=[];for(let G=b.length-1;G>=0;G-=1){let I=b[G];if(!I)continue;let $=Buffer.byteLength(I.content,"utf8");if($>S)continue;L.push(I),S-=$}return L.reverse()}class y{projectRoot;definitions;byId;constructor(b,O=[]){this.projectRoot=b;this.projectRoot=ab(b),this.definitions=Object.freeze([...O].sort(rb).map((S)=>Object.freeze({...S}))),this.byId=new Map(this.definitions.map((S)=>[S.id,S]))}static empty(b){return new y(b)}list(){return this.definitions.map((b)=>({id:b.id,relativePath:b.relativePath,source:b.source,kind:b.kind,conditional:b.conditional,contentSha256:b.c ...

731export{qS as Bg,TS as Cg,KS as Dg,ZO as Eg,FS as Fg,BS as Gg,Ib as Hg,s as Ig,X as Jg,ub as Kg,Yb as Lg,w as Mg,e as Ng,ob as Og,Fb as Pg,y as Qg,z0 as Rg,Mb as Sg,w0 as Tg,r1 as Ug,b4 as Vg,O4 as Wg,S4 as Xg,L4 as Yg,$4 as Zg,G4 as _g,I4 as $g};

732

Long lines were clipped for display.

dist/chunk-az3rehz9.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = blade-code@0.10.189 matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.189 similarity = 0.709 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-az3rehz9.jsView on unpkg

120[error] ${B.message}`),z.foregroundCapture?.append("stderr",` L121: [error] ${B.message}`),z.releaseAdmission(),z.resolveCompletion()})()}),this.processes.set(J,z);try{await W.release()}catch(B){throw z.status="aborted",z.endTime=Date.now(),await U... L122: Install with: blade browser install`)}if(this.disposed)throw await Z.close().catch(()=>{return}),new f("browser_disposed","Browser process pool is closed");this.generation++,this.b...

High

Shell

Package source references shell execution.

dist/chunk-az3rehz9.jsView on unpkg · L120

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/chunk-az3rehz9.js: `,{encoding:"utf8",mode:384,fsync:!0}),Q}remove($){p0.rmSync(this.filePath($),{force:!0})}async reapOrphans(){let $=0,Z=0,J=0,Y=0;for(let Q of this.readAll()){if(T6(Q.ownerPid)&&P6... [error] ${B.message}`),z.releaseAdmission(),z.resolveCompletion()})()}),this.processes.set(J,z);try{await W.release()}catch(B){throw z.status="aborted",z.endTime=Date.now(),await U... `):o$(J,Math.max(0,X))}${I8}`,truncated:!0}}class h8{latestByPage=new Map;issue($){let Z=WU($.snapshot,$.maxBytes),J={snapshotId:`browser_snapshot_${L9()}`,pageId:$.pageId,pageGene... `).filter((q)=>q.toLocaleLowerCase("en-US").includes(G)),D=B.slice(

dist/chunk-65wc1h38.jsView file

Lines 1-3javascript

1import{Wj as I}from"./chunk-yzf2jpam.js";import{Jk as f}from"./chunk-gmpsfkgg.js";import*as j from"fs/promises";import*as S from"path";import X from

dist/chunk-pt0y4zrg.jsView file

Lines 1-15javascript

1import{e as B3,f as x3,g as f3,h as r0,i as S3}from"./chunk-gz84aewr.js";import{j as a1}from"./chunk-870szc6v.js";import{w as t0,x as d2,y as

dist/chunk-dnpkf5mv.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-a60cmnmz.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-dnpkf5mv.jsView on unpkg

dist/chunk-ebpg1srd.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-6p6ts4kv.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-ebpg1srd.jsView on unpkg

dist/chunk-pga8gxtf.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-kfkvdj49.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-pga8gxtf.jsView on unpkg

blade-code@0.10.206

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code