cartethyia@2.5.4

⚠ Under review

A powerful, self-hosted reverse proxy for OpenAI- and Anthropic-compatible AI clients, powered by native Bun and Elysia. It serves both protocols from a single server, routes every model across any configured provider, and translates requests and response

Static Scan Results

scanned 15h ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 24 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

CopyleftLicense

scanned 647 file(s), 7.39 MB of source, external domains: 127.0.0.1, accounts.google.com, agentrouter.org, aihubmix.com, aistudio.google.com, antigravity-hub-auto-updater-974169037036.us-central1.run.app, antigravity.google, api.aiand.com, api.anthropic.com, api.b.ai, api.cerebras.ai, api.cline.bot, api.cloudflare.com, api.code.umans.ai, api.commandcode.ai, api.coralbricks.com, api.deepinfra.com, api.deepseek.com, api.eu.factory.ai, api.example.com, api.factory.ai, api.fireworks.ai, api.github.com, api.gmi-serving.com, api.groq.com, api.helmcode.com, api.individual.githubcopilot.com, api.inference.wandb.ai, api.inferhub.dev, api.kilo.ai, api.kimi.com, api.marscode.com, api.meta.ai, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.nano-gpt.com, api.novita.ai, api.openai.com, api.parallel.ai, api.perplexity.ai, api.sakana.ai, api.siliconflow.cn, api.siliconflow.com, api.stepfun.com, api.synthetic.new, api.together.ai, api.together.xyz, api.trae.ai, api.trae.cn

Source & flagged code

15 flagged

src/providers/discovery/catalog/catalog-blob.tsView file

Lines 1-19typescript

1/**

2 * GENERATED — do not edit.

3 *

4 * The packed, brotli-compressed offline model catalog for `ModelsDevCatalog`.

5 * Rebuild with `bun run scripts/generate/models-catalog.ts`.

6 *

7 * Sources: models.dev (pricing, every provider) and models.opencode.ai (the

8 * authoritative limits for the OpenCode family).

9 *

10 * Fetched 2026-10-17T02:27:15.774Z · 8941 rows · 232 providers ·

11 * 2482 global price keys · 2700 cost tuples ·

12 * 584 KB packed → 105 KB brotli.

13 */

14export const CATALOG_BLOB_BROTLI_BASE64 =

15 "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 ...

High

High Secret

Package contains a high-severity secret pattern.

src/providers/discovery/catalog/catalog-blob.tsView on unpkg · L15

High

Secret Pattern

Google API key in src/providers/discovery/catalog/catalog-blob.ts

src/providers/discovery/catalog/catalog-blob.tsView on unpkg · L15

17/** Byte length of the blob *after* decompression, so a reader can preallocate. */

18export const CATALOG_BLOB_BYTES = 597744;

Long lines were clipped for display.

dist/dashboard/assets/entry-CgdSAzEV.jsView file

Lines 1-4javascript

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/LoginPage-BvzCx8Kr.js","assets/jsx-runtime-CXUMngI_.js","assets/numbers-YNcHvRY7.js","assets/app-DCQZRmHY.js","assets/app-COlK95oi.css","assets/log-in-BmRjy60c.js","assets/query-keys-gmjzC3RS.js",

src/providers/integrations/qoder/qoder.tsView file

Lines 13-53typescript

13import { parseQoderOAuthState } from "./qoder-oauth";

14import { getQoderVersion } from "../../operations/client-versions";

15import { abortGatewayError, createUpstreamDeadlineLifecycle } from "../../operations/upstream-deadline";

16import { qoderMachineOs } from

scripts/cli/autostart.tsView file

Lines 43-83typescript

43function commandFor(executable: string, args: readonly string[]): string {

44 const quoted = /\s

scripts/cli/bin/cartethyia.cjsView file

Lines 1-27javascript

1#!/usr/bin/env node

2"use strict";

4const fs = require("node:fs");

5const { randomUUID } = require("node:crypto");

scripts/cli/tray/windows.ps1View file

•path = scripts/cli/tray/windows.ps1 kind = build_helper sizeBytes = 4029 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/cli/tray/windows.ps1View on unpkg

dist/dashboard/index.html.gzView file

•path = dist/dashboard/index.html.gz kind = compressed_blob sizeBytes = 1654 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/dashboard/index.html.gzView on unpkg

dist/dashboard/assets/CliToolDetailPage-DUcZ6pMB.js.gzView file

•path = [redacted]-DUcZ6pMB.js.gz kind = high_entropy_blob sizeBytes = 5380 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/dashboard/assets/CliToolDetailPage-DUcZ6pMB.js.gzView on unpkg

src/boot/dependencies.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/boot/dependencies.ts#virtual:normalized:round1View on unpkg

src/console/cli-tools/fs-ops.tsView file

•matchType = normalized_sha256 matchedPackage = cartethyia@2.3.4 matchedPath = src/console/cli-tools/fs-ops.ts matchedIdentity = npm:Y2FydGV0aHlpYQ:2.3.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/console/cli-tools/fs-ops.tsView on unpkg

dist/dashboard/assets/quota-DZGyp0N5.jsView file

•matchType = normalized_sha256 matchedPackage = cartethyia@2.3.4 matchedPath = dist/dashboard/assets/quota-DZGyp0N5.js matchedIdentity = npm:Y2FydGV0aHlpYQ:2.3.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/dashboard/assets/quota-DZGyp0N5.jsView on unpkg

src/console/routing/pools/probe-result.tsView file

•matchType = normalized_sha256 matchedPackage = cartethyia@2.3.4 matchedPath = src/console/routing/pools/probe-result.ts matchedIdentity = npm:Y2FydGV0aHlpYQ:2.3.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/console/routing/pools/probe-result.tsView on unpkg

src/protocol/codecs.tsView file

•matchType = token_shingles matchedPackage = cartethyia@2.3.4 matchedPath = src/protocol/codecs.ts matchedIdentity = npm:Y2FydGV0aHlpYQ:2.3.4 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/protocol/codecs.tsView on unpkg

Source & flagged code

15 flagged · loading source

src/providers/discovery/catalog/catalog-blob.tsView file

15patternName = google_api_key severity = high line = 15

High

High Secret

Package contains a high-severity secret pattern.

src/providers/discovery/catalog/catalog-blob.tsView on unpkg · L15

15patternName = google_api_key severity = high line = 15

High

Secret Pattern

Google API key in src/providers/discovery/catalog/catalog-blob.ts

src/providers/discovery/catalog/catalog-blob.tsView on unpkg · L15

dist/dashboard/assets/entry-CgdSAzEV.jsView file

3L4: Please change the parent <Route path="${e}"> to <Route path="${e===`/`?`*`:`${e}/*`}">.`)}let u=W(),d;if(t){let e=typeof t==`string`?Pt(t):t;L(c===`/`||e.pathname?.startsWith(c),`W...

Medium

Findings

10 High7 Medium7 Low

HighHigh Secretsrc/providers/discovery/catalog/catalog-blob.ts

HighEntrypoint Build Divergencescripts/cli/bin/cartethyia.cjs

HighShips High Entropy Blobdist/dashboard/assets/CliToolDetailPage-DUcZ6pMB.js.gz

HighSemantic Analysis Limitedsrc/boot/dependencies.ts#virtual:normalized:round1

HighKnown Malware Source Similaritysrc/console/cli-tools/fs-ops.ts

HighKnown Malware Source Similaritydist/dashboard/assets/quota-DZGyp0N5.js

HighKnown Malware Source Similaritysrc/console/routing/pools/probe-result.ts

HighKnown Malware Source Similaritysrc/protocol/codecs.ts

HighPrevious Version Dangerous Deltascripts/cli/bin/cartethyia.cjs

HighSecret Patternsrc/providers/discovery/catalog/catalog-blob.ts

Affected versions and remediation

This report applies to cartethyia@2.5.4.

See all versions of cartethyia for other recorded verdicts.

Review the evidence and your use of cartethyia@2.5.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-22 13:59:03.802Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.