cartethyia@2.4.2

⚠ Under review

A powerful, self-hosted reverse proxy for OpenAI- and Anthropic-compatible AI clients, powered by native Bun and Elysia. It serves both protocols from a single server, routes every model across any configured provider, and translates requests and response

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 30 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

CopyleftLicense

scanned 592 file(s), 6.51 MB of source, external domains: 127.0.0.1, accounts.google.com, agentrouter.org, aihubmix.com, aistudio.google.com, antigravity-hub-auto-updater-974169037036.us-central1.run.app, antigravity.google, api.aiand.com, api.anthropic.com, api.b.ai, api.cerebras.ai, api.cline.bot, api.cloudflare.com, api.code.umans.ai, api.commandcode.ai, api.coralbricks.com, api.deepinfra.com, api.deepseek.com, api.eu.factory.ai, api.factory.ai, api.fireworks.ai, api.github.com, api.gmi-serving.com, api.groq.com, api.helmcode.com, api.individual.githubcopilot.com, api.inference.wandb.ai, api.inferhub.dev, api.kilo.ai, api.kimi.com, api.meta.ai, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.nano-gpt.com, api.novita.ai, api.openai.com, api.parallel.ai, api.perplexity.ai, api.sakana.ai, api.siliconflow.cn, api.siliconflow.com, api.stepfun.com, api.synthetic.new, api.together.ai, api.together.xyz, api.venice.ai, api.vercel.com, api.workos.com, api.x.ai

Source & flagged code

21 flagged

src/providers/discovery/catalog/catalog-blob.tsView file

Lines 1-19typescript

1/**

2 * GENERATED — do not edit.

3 *

4 * The packed, brotli-compressed offline model catalog for `ModelsDevCatalog`.

5 * Rebuild with `bun run scripts/generate/models-catalog.ts`.

6 *

7 * Sources: models.dev (pricing, every provider) and models.opencode.ai (the

8 * authoritative limits for the OpenCode family).

9 *

10 * Fetched 2026-10-17T02:27:15.774Z · 8941 rows · 232 providers ·

11 * 2482 global price keys · 2700 cost tuples ·

12 * 584 KB packed → 105 KB brotli.

13 */

14export const CATALOG_BLOB_BROTLI_BASE64 =

15 "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 ...

High

High Secret

Package contains a high-severity secret pattern.

src/providers/discovery/catalog/catalog-blob.tsView on unpkg · L15

High

Secret Pattern

Google API key in src/providers/discovery/catalog/catalog-blob.ts

src/providers/discovery/catalog/catalog-blob.tsView on unpkg · L15

17/** Byte length of the blob *after* decompression, so a reader can preallocate. */

18export const CATALOG_BLOB_BYTES = 597744;

Long lines were clipped for display.

scripts/cli/cli.tsView file

Lines 1-22typescript

1import { randomBytes } from "node:crypto";

2import { existsSync, mkdirSync, openSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";

3import { spawn, type ChildProcess } from "node:child_process";

4import { tmpdir } from

dist/dashboard/assets/entry-B92UGcyr.jsView file

Lines 1-4javascript

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/LoginPage-a_voqncN.js","assets/jsx-runtime-CXUMngI_.js","assets/toast-DKAdP2mo.js","assets/app-BDJWMThu.js","assets/app-Cjgo4-Lf.css","assets/log-in-BmRjy60c.js","assets/query-keys-ROf-g1Wi.js",

src/providers/integrations/qoder/qoder.tsView file

31export const MODERN_PROFILE: QoderModeProfile = { L32: chatUrl: "https://api2.qoder.sh/algo/api/v2/service/pro/sse/agent_chat_generation?FetchKeys=llm_model_result&AgentId=agent_common&Encode=1", L33: businessProduct: "cli", ... L195: function transformQoderBody(plaintext: string): Uint8Array { L196: const base64 = Buffer.from(plaintext).toString("base64"); L197: const third = Math.floor(base64.length / 3); ... L207: function qoderBuildCosyHeaders( L208: body: Uint8Array, L209: url: string, ... L661: readonly provider_id = QODER_PROVIDER_ID; L662: private readonly fetchFn: typeof fetch; L663:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/providers/integrations/qoder/qoder.tsView on unpkg · L31

scripts/cli/cli-launcher.cjsView file

Lines 1-27javascript

1#!/usr/bin/env node

2"use strict";

4const fs = require("node:fs");

5const { randomUUID } = require("node:crypto");

scripts/cli/version.tsView file

Lines 21-61typescript

21 try {

22 const response = await fetch("https://registry.npmjs.org/cartethyia/latest", {

23 signal: AbortSignal.timeout(4_000),

24 });

src/boot/dependencies.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/boot/dependencies.ts#virtual:normalized:round1View on unpkg

scripts/cli/setup.tsView file

•matchType = token_shingles matchedPackage = cartethyia@2.3.4 matchedPath = scripts/cli/setup.ts matchedIdentity = npm:Y2FydGV0aHlpYQ:2.3.4 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High