registry / blade-code / 0.11.1

blade-code@0.11.1

⚠ Under review

🗡️ Blade Code - 智能代码助手命令行工具

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 18 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 113 file(s), 4.35 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.github.com, api.openai.com, bun.sh, cdn.jsdelivr.net, code.visualstudio.com, duckduckgo.com, example.com, gateway.example.com, github.com, glama.ai, mcp.exa.ai, r.jina.ai, raw.githubusercontent.com, react.dev, registry.npmjs.org, search.ononoki.org, searx.be, searx.tiekoetter.com, searx.work, tauri.localhost, www.npmjs.com, www.w3.org

Source & flagged code

11 flagged

dist/chunk-25s0c8km.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = blade-code@0.10.189 matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.189 similarity = 0.366 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-25s0c8km.jsView on unpkg

High

Child Process

Package source references child process execution.

dist/chunk-25s0c8km.jsView on unpkg · L1

120[error] ${B.message}`),z.foregroundCapture?.append("stderr",` L121: [error] ${B.message}`),z.releaseAdmission(),z.resolveCompletion()})()}),this.processes.set(Z,z);try{await W.release()}catch(B){throw z.status="aborted",z.endTime=Date.now(),await U... L122: Install with: blade browser install`)}if(this.disposed)throw await J.close().catch(()=>{return}),new f("browser_disposed","Browser process pool is closed");this.generation++,this.b...

High

Shell

Package source references shell execution.

dist/chunk-25s0c8km.jsView on unpkg · L120

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/chunk-25s0c8km.js: `,{encoding:"utf8",mode:384,fsync:!0}),Q}remove($){p0.rmSync(this.filePath($),{force:!0})}async reapOrphans(){let $=0,J=0,Z=0,Y=0;for(let Q of this.readAll()){if(T4(Q.ownerPid)&&P4... [error] ${B.message}`),z.releaseAdmission(),z.resolveCompletion()})()}),this.processes.set(Z,z);try{await W.release()}catch(B){throw z.status="aborted",z.endTime=Date.now(),await U... `):o$(Z,Math.max(0,X))}${I8}`,truncated:!0}}class x8{latestByPage=new Map;issue($){let J=VU($.snapshot,$.maxBytes),Z={snapshotId:`browser_snapshot_${qJ()}`,pageId:$.pageId,pageGene... `).filter((q)=>q.toLocaleLowerCase("en-US").includes(G)),D=B.slice(

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/chunk-25s0c8km.jsView on unpkg

1import{Ka as QJ}from"./chunk-f6hc7t65.js";import{Na as T,Oa as t0,Ta as DW,Ua as PY,Va as o0}from"./chunk-pm5ssr7m.js";import{Ab as JV,Wa as t8,Za as u3,bb as n3,cb as KX,db as DX,... L2: const { spawn } = require('node:child_process'); L3: const [ownerPidValue, command, ...args] = process.argv.slice(1); ... L11: if (!Number.isSafeInteger(ownerPid) || ownerPid <= 1) return false; L12: if (process.platform !== 'win32' && process.ppid !== ownerPid) return false; L13: try { ... L79: } else if (ownerIsRunning()) { L80: child.stdin.end(); L81: } else { ... L97: child = spawn(command, args, { L98: env: process.env, L99: stdio: ['pipe', 'inherit', 'inherit'],

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-25s0c8km.jsView on unpkg · L1

dist/chunk-ms0wve9g.jsView file

1import{e as B3,f as x3,g as f3,h as r0,i as S3}from"./chunk-1beqtjsw.js";import{j as o1}from"./chunk-8sth12hd.js";import{w as t0,x as d2,y as T1,z as c1}from"./chunk-sa9fxss4.js";i... L2: `;if(O.event!==void 0)$+=`event: ${O.event} ... L6: `,Buffer.byteLength($)}class W1{serial;buffered=[];bufferedBytes=0;nextOrder=0;phase="buffering";highestDeliveredSequence=0;highestReplaySequence=0;failure;maxPendingItems;maxPendi... L7: `)}async function Q2(O,$,Z,J,Y,X={}){let{abortController:G,sessionId:H,id:B}=O,M=X.preparedInputTurn?.messageId??u1(12),I=X.pendingInputOnly===!0||X.preparedInputTurn?.mode==="pend... L8: `),$=await this.runCommand("osascript",["-e",O]);if(P4($))throw Error("Unable to open the macOS folder picker");return S4($.stdout)}async pickOnWindows(){let O=["Add-Type -Assembly

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-ms0wve9g.jsView on unpkg · L1

1import{e as B3,f as x3,g as f3,h as r0,i as S3}from"./chunk-1beqtjsw.js";import{j as o1}from"./chunk-8sth12hd.js";import{w as t0,x as d2,y as T1,z as c1}from"./chunk-sa9fxss4.js";i... L2: `;if(O.event!==void 0)$+=`event: ${O.event} L3: `;for(let Z of O.data.split(/\r\n|\r|\n/))$+=`data: ${Z} L4: `;if(O.retry!==void 0)$+=`retry: ${O.retry} ... L6: `,Buffer.byteLength($)}class W1{serial;buffered=[];bufferedBytes=0;nextOrder=0;phase="buffering";highestDeliveredSequence=0;highestReplaySequence=0;failure;maxPendingItems;maxPendi... L7: `)}async function Q2(O,$,Z,J,Y,X={}){let{abortController:G,sessionId:H,id:B}=O,M=X.preparedInputTurn?.messageId??u1(12),I=X.pendingInputOnly===!0||X.preparedInputTurn?.mode==="pend... L8: `),$=await this.runCommand("osascript",["-e",O]);if(P4($))throw Error("

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-ms0wve9g.js

dist/chunk-2ftyzk83.jsView file

1Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/blade.js -> dist/chunk-2vrsfb8p.js -> dist/chunk-2ftyzk83.js L1: import{Xj as I}from"./chunk-a1tt14a2.js";import{Kk as f}from"./chunk-f552hzcx.js";import*as j from"fs/promises";import*as S from"path";import X from"semver";import{ProxyAgent as R,... L2: export{A as k,V as l,v as m,p as n,h as o};

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/chunk-2ftyzk83.jsView on unpkg · L1

dist/chunk-0b83mt1c.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-a60cmnmz.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-0b83mt1c.jsView on unpkg

dist/chunk-f6hc7t65.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-6p6ts4kv.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-f6hc7t65.jsView on unpkg

dist/chunk-a74ynw4t.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-kfkvdj49.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-a74ynw4t.jsView on unpkg

blade-code@0.11.1

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code