Loading npm security reports…
The Dahrk edge client: install it (npm / Homebrew / curl), run `dahrk` with an enrolment token, and it becomes a self-managed node that executes Dahrk workflow stages in a git worktree.
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/main.jsView on unpkg · L3A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/main.jsView on unpkgPackage source references dynamic require/import behavior.
dist/main.jsView on unpkg · L1362Source writes installer persistence such as shell profile or service configuration.
dist/main.jsView on unpkg · L3Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/main.jsView on unpkg · L3Source writes installer persistence such as shell profile or service configuration.
dist/main.jsView on unpkg · L3A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/main.jsView on unpkgPackage source references dynamic require/import behavior.
dist/main.jsView on unpkg · L1362