cartethyia@2.4.4

⚠ Under review

A powerful, self-hosted reverse proxy for OpenAI- and Anthropic-compatible AI clients, powered by native Bun and Elysia. It serves both protocols from a single server, routes every model across any configured provider, and translates requests and response

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 31 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

CopyleftLicense

scanned 593 file(s), 6.51 MB of source, external domains: 127.0.0.1, accounts.google.com, agentrouter.org, aihubmix.com, aistudio.google.com, antigravity-hub-auto-updater-974169037036.us-central1.run.app, antigravity.google, api.aiand.com, api.anthropic.com, api.b.ai, api.cerebras.ai, api.cline.bot, api.cloudflare.com, api.code.umans.ai, api.commandcode.ai, api.coralbricks.com, api.deepinfra.com, api.deepseek.com, api.eu.factory.ai, api.factory.ai, api.fireworks.ai, api.github.com, api.gmi-serving.com, api.groq.com, api.helmcode.com, api.individual.githubcopilot.com, api.inference.wandb.ai, api.inferhub.dev, api.kilo.ai, api.kimi.com, api.meta.ai, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.nano-gpt.com, api.novita.ai, api.openai.com, api.parallel.ai, api.perplexity.ai, api.sakana.ai, api.siliconflow.cn, api.siliconflow.com, api.stepfun.com, api.synthetic.new, api.together.ai, api.together.xyz, api.venice.ai, api.vercel.com, api.workos.com, api.x.ai

Source & flagged code

22 flagged

src/providers/discovery/catalog/catalog-blob.tsView file

Lines 1-19typescript

1/**

2 * GENERATED — do not edit.

3 *

4 * The packed, brotli-compressed offline model catalog for `ModelsDevCatalog`.

5 * Rebuild with `bun run scripts/generate/models-catalog.ts`.

6 *

7 * Sources: models.dev (pricing, every provider) and models.opencode.ai (the

8 * authoritative limits for the OpenCode family).

9 *

10 * Fetched 2026-10-17T02:27:15.774Z · 8941 rows · 232 providers ·

11 * 2482 global price keys · 2700 cost tuples ·

12 * 584 KB packed → 105 KB brotli.

13 */

14export const CATALOG_BLOB_BROTLI_BASE64 =

15 "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 ...

High

High Secret

Package contains a high-severity secret pattern.

src/providers/discovery/catalog/catalog-blob.tsView on unpkg · L15

High

Secret Pattern

Google API key in src/providers/discovery/catalog/catalog-blob.ts

src/providers/discovery/catalog/catalog-blob.tsView on unpkg · L15

17/** Byte length of the blob *after* decompression, so a reader can preallocate. */

18export const CATALOG_BLOB_BYTES = 597744;

Long lines were clipped for display.

scripts/cli/cli.tsView file

Lines 1-21typescript

1import { existsSync, mkdirSync, openSync, writeFileSync } from "node:fs";

2import { spawn } from "node:child_process";

3import { tmpdir } from "node:os";

High

Child Process

Package source references child process execution.

scripts/cli/cli.tsView on unpkg · L1

4import

dist/dashboard/assets/entry-DTiWhIY-.jsView file

Lines 1-4javascript

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/LoginPage-CeqROJrT.js","assets/jsx-runtime-CXUMngI_.js","assets/toast-DKAdP2mo.js","assets/app-BDJWMThu.js","assets/app-Cjgo4-Lf.css","assets/log-in-BmRjy60c.js","assets/query-keys-ROf-g1Wi.js",

src/providers/integrations/qoder/qoder.tsView file

Lines 11-51typescript

11import { readCredentialSecret, type ProviderDispatchTarget, type ProviderAdapter, type ProviderDispatchContext } from "../../provider-contracts";

12import type { ModelDefinition } from "../../provider-model-definition";

13import { parseQoderOAuthState } from

scripts/cli/cli-launcher.cjsView file

Lines 1-27javascript

1#!/usr/bin/env node

2"use strict";

4const fs = require("node:fs");

5const { randomUUID } = require("node:crypto");

scripts/cli/version.tsView file

Lines 21-61typescript

21 try {

22 const response = await fetch("https://registry.npmjs.org/cartethyia/latest", {

23 signal: AbortSignal.timeout(4_000),

24 });

scripts/cli/tray.ps1View file

•path = scripts/cli/tray.ps1 kind = build_helper sizeBytes = 3553 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/cli/tray.ps1View on unpkg

src/boot/dependencies.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/boot/dependencies.ts#virtual:normalized:round1View on unpkg

scripts/cli/setup.tsView file

•matchType = token_shingles matchedPackage = cartethyia@2.3.4 matchedPath = scripts/cli/setup.ts matchedIdentity = npm:Y2FydGV0aHlpYQ:2.3.4 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High