registry / copilot-for-cursor / 2.2.2

copilot-for-cursor@2.2.2

Proxy that bridges GitHub Copilot API to Cursor IDE — translates Anthropic format, bridges Responses API for GPT 5.x, and more

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 20 file(s), 136 KB of source, external domains: api.github.com, bun.sh, developers.cloudflare.com, github.com, ngrok.com

Source & flagged code

2 flagged

tunnel.tsView file

Lines 1-38typescript

1import { spawn, type Subprocess } from 'bun';

2import { existsSync, mkdirSync, chmodSync, createWriteStream, renameSync, rmSync } from 'fs';

3import { homedir } from 'os';

4import { join } from 'path';

5import { pipeline } from 'stream/promises';

7export type TunnelProvider = 'cloudflared' | 'ngrok' | 'bore';

8export type TunnelStatus = 'idle' | 'starting' | 'running' | 'error' | 'stopped';

10export interface TunnelState {

11 provider: TunnelProvider | null;

12 status: TunnelStatus;

13 url: string | null;

14 error: string | null;

15 startedAt: number | null;

16}

18const PROXY_PORT = 4142;

19const BIN_DIR = join(homedir(), '.copilot-proxy', 'bin');

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

tunnel.tsView on unpkg · L18

21let state: TunnelState = {

22 provider: null,

23 status: 'idle',

24 url: null,

25 error: null,

26 startedAt: null,

27};

29let currentProc: Subprocess | null = null;

30const subscribers = new Set<(s: TunnelState) => void>();

32const notify = () => {

33 const snapshot = { ...state };

34 for (const cb of subscribers) {

35 try {

36 cb(snapshot);

37 } catch {}

38 }

start.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = copilot-for-cursor@2.2.1 matchedIdentity = npm:Y29waWxvdC1mb3ItY3Vyc29y:2.2.1 similarity = 0.824 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

start.tsView on unpkg

Source & flagged code

2 flagged · loading source

tunnel.tsView file

18const PROXY_PORT = 4142; L19: const BIN_DIR = join(homedir(), '.copilot-proxy', 'bin'); L20: ... L56: const getCloudflaredAssetName = (): string | null => { L57: const platform = process.platform; L58: const arch = process.arch; ... L82: const DOWNLOAD_HEADERS: Record<string, string> = { L83: 'User-Agent': 'copilot-for-cursor/1.0 (+https://github.com/jeffrey-cao/copilot-for-cursor)', L84: Accept: 'application/octet-stream', ... L89: if (!resp.ok || !resp.body) { L90: const bodySnippet = await resp.text().catch(() => '').then(t => t.slice(0, 200)); L91: throw new Error(

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

tunnel.tsView on unpkg · L18

start.tsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

start.tsView on unpkg

Findings

2 High3 Medium4 Low

HighSandbox Evasion Gated Capabilitytunnel.ts

HighPrevious Version Dangerous Deltastart.ts

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

tunnel.tsView file

Lines 1-38typescript

1import { spawn, type Subprocess } from 'bun';

2import { existsSync, mkdirSync, chmodSync, createWriteStream, renameSync, rmSync } from 'fs';

3import { homedir } from 'os';

4import { join } from 'path';

5import { pipeline } from 'stream/promises';

7export type TunnelProvider = 'cloudflared' | 'ngrok' | 'bore';

8export type TunnelStatus = 'idle' | 'starting' | 'running' | 'error' | 'stopped';

10export interface TunnelState {

11 provider: TunnelProvider | null;

12 status: TunnelStatus;

13 url: string | null;

14 error: string | null;

15 startedAt: number | null;

16}

18const PROXY_PORT = 4142;

19const BIN_DIR = join(homedir(), '.copilot-proxy', 'bin');

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

tunnel.tsView on unpkg · L18

21let state: TunnelState = {

22 provider: null,

23 status: 'idle',

24 url: null,

25 error: null,

26 startedAt: null,

27};

29let currentProc: Subprocess | null = null;

30const subscribers = new Set<(s: TunnelState) => void>();

32const notify = () => {

33 const snapshot = { ...state };

34 for (const cb of subscribers) {

35 try {

36 cb(snapshot);

37 } catch {}

38 }

start.tsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

start.tsView on unpkg