registry / cloud-pc-templates / 7.3.0

cloud-pc-templates@7.3.0

⚠ Under review

Cloud PC Templates is a command-line tool for managing cloud PC configurations and AI operations.

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 13 file(s), 48.3 KB of source, external domains: cloud-pc-templates.com, docs.docker.com, ollama.ai

Source & flagged code

5 flagged

handlers/ollamalocal.jsView file

Lines 1-22javascript

1const http = require('http');

2const https = require('https');

3const { spawn } = require('child_process');

4const { fetchFromGithub } = require('./github');

High

Child Process

Package source references child process execution.

handlers/ollamalocal.jsView on unpkg · L2

6const OLLAMA_PORT = 11434;

7const PROXY_PORT = 3005;

9// Function to check if Ollama is running locally

10function checkOllamaHealth() {

11 return new Promise((resolve) => {

12 const request = http.request(

13 {

14 hostname: 'localhost',

15 port: OLLAMA_PORT,

16 path: '/api/tags',

17 method: 'GET'

18 },

19 (res) => {

20 resolve(res.statusCode === 200);

21 }

22 );

handlers/ollamacloud.jsView file

Lines 1-21javascript

1const http = require('http');

2const https = require('https');

3const { spawn } = require

handlers/agents.jsView file

Lines 1-21javascript

1const { spawn, execSync } = require('child_process');

2const fs = require('fs');

3const { fetchFromGithub }

Source & flagged code

5 flagged · loading source

handlers/ollamalocal.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code