bridgerator@1.1.1

⚠ Under review

Connect ChatGPT to your Windows PC: files, search and terminal through an outbound-only bridge with folder limits. No inbound ports, no admin rights.

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 26 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 38 file(s), 592 KB of source, external domains: bridgerator.recondeck.com, purl.org, registry.npmjs.org, schemas.openxmlformats.org, www.w3.org

Source & flagged code

19 flagged

src/undo.mjsView file

Lines 1-29javascript

1// LOGIC: see critical-logic/bridge.md ("Snapshots and Undo"). Before the AI writes, edits, moves or

2// (through the Recycle Bin path) deletes a file, a copy goes to %LOCALAPPDATA%\Bridgerator\snapshots

3// (inside the always-excluded folder, never sent anywhere). "Undo" puts the old state back — but never

4// over a file someone changed after the AI's action (size / time differ from what the AI left): that

5// file is skipped and reported. Limits: days, total MB, biggest file MB (a bigger file gets no copy:

6// the action is marked "no undo").

7import fs from 'node:fs';

8import path from 'node:path';

9import crypto from 'node:crypto';

10import cp from 'node:child_process';

11import { writeAtomic } from './confirm.mjs';

High

Child Process

Package source references child process execution.

src/undo.mjsView on unpkg · L9

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/undo.mjsView on unpkg · L9

12import { POWERSHELL, psArgs } from './win.mjs';

14export const SNAP_DEFAULTS = { enabled: true, days: 7, maxMb: 500, maxFileMb: 50 };

15const MAX_TREE_FILES = 5000;

16const MB = 1024 * 1024;

18/**

19 * Current state of a path: { kind: 'none' } | { kind: 'file', size, mtimeMs, hash? } | { kind: 'dir' }.

20 * Small files also get a content hash: two writes of the same size within one millisecond look alike otherwise.

21 */

22export function sig(p) {

23 try {

24 const s = fs.lstatSync(p);

25 if (s.isDirectory()) return { kind: 'dir' };

26 const out = { kind: 'file', size: s.size, mtimeMs: Math.round(s.mtimeMs) };

27 if (s.size <= HASH_MAX) { try { out.hash = crypto.createHash('sha1').update(fs.readFileSync(p)).digest('hex'); } catch { /* locked: size + time only */ } }

28 return out;

29 } catch { return { kind: 'none' }; }

src/docs-tool.mjsView file

Lines 1-34javascript

1// LOGIC: see critical-logic/bridge.md ("Extra tools" → create_document). New Word / Excel / PDF files

2// from markdown and tables, without Office or a browser: libraries the bundled engine already ships

3// (markdown-it, jszip, exceljs, pdf-lib; see lib()) + system fonts (pdf-font.mjs). A file is never overwritten:

4// an existing name gets " (2)". Paths go through the same folder rules as file writes (guard).

5import fs from 'node:fs';

6import path from 'node:path';

src/bridge.mjsView file

Lines 572-612javascript

572 case 'queue.update': return queue.update(p);

573 case 'queue.reorder': return queue.reorder(p);

574 case 'queue.remove': return queue.remove

vendor/webview2/x64/WebView2Loader.dllView file

•path = [redacted].dll kind = native_binary sizeBytes = 194912 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/webview2/x64/WebView2Loader.dllView on unpkg

install.ps1View file

•path = install.ps1 kind = build_helper sizeBytes = 34890 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.ps1View on unpkg

src/ask.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/ask.mjs#virtual:normalized:round1View on unpkg

src/cli.mjsView file

•matchType = normalized_sha256 matchedPackage = bridgerator@1.1.0 matchedPath = src/cli.mjs matchedIdentity = npm:YnJpZGdlcmF0b3I:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High