registry / eddieseddies / 1.0.3
eddieseddies@1.0.3
⚠ Under reviewex420 — x402 for Eddies. Accept payments with a single line of code; HTTP 402 settled in €$ on the Eddies ledger.
Static Scan Results
scanned 27d ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 17 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsPossibleObfuscationUrlStrings
Source & flagged code
10 flaggedmcp.jsView file
30import { join } from 'node:path';
L31: import { execFile } from 'node:child_process';
L32: import { createCipheriv, createDecipheriv, createHash, createHmac, randomBytes } from 'node:crypto';
High
25// The wire is MCP's stdio transport: newline-delimited JSON-RPC 2.0 on
L26: // stdin/stdout. Nothing but protocol goes to stdout; notes go to stderr.
L27:
...
L30: import { join } from 'node:path';
L31: import { execFile } from 'node:child_process';
L32: import { createCipheriv, createDecipheriv, createHash, createHmac, randomBytes } from 'node:crypto';
L33: import { EddiesIdentity, DEFAULT_GATEWAY } from './identity.js';
...
L39:
L40: const username = (process.env.EDDIES_USERNAME || '').trim().toLowerCase();
L41: const gateway = (process.env.EDDIES_GATEWAY || DEFAULT_GATEWAY).replace(/\/+$/, '');
...
L45: const UNJOINED = 'eddie';
L46: // One allowance in the private pool per ex420-chain seller this AI pays,
High
Credential Exfiltration
Source combines credential-like environment material and outbound requests; review data flow before blocking.
mcp.jsView on unpkg · L2525// The wire is MCP's stdio transport: newline-delimited JSON-RPC 2.0 on
L26: // stdin/stdout. Nothing but protocol goes to stdout; notes go to stderr.
L27:
...
L30: import { join } from 'node:path';
L31: import { execFile } from 'node:child_process';
L32: import { createCipheriv, createDecipheriv, createHash, createHmac, randomBytes } from 'node:crypto';
L33: import { EddiesIdentity, DEFAULT_GATEWAY } from './identity.js';
...
L39:
L40: const username = (process.env.EDDIES_USERNAME || '').trim().toLowerCase();
L41: const gateway = (process.env.EDDIES_GATEWAY || DEFAULT_GATEWAY).replace(/\/+$/, '');
...
L45: const UNJOINED = 'eddie';
L46: // One allowance in the private pool per ex420-chain seller this AI pays,
Findings
1 Critical8 High4 Medium4 Low
CriticalManifest Confusionpackage.json
HighChild Processmcp.js
HighSame File Env Network Executionmcp.js#virtual:normalized:round1
HighCredential Exfiltrationmcp.js
HighCommand Output Exfiltrationmcp.js#virtual:normalized:round1
HighSandbox Evasion Gated Capabilitymcp.js
HighTrigger Reachable Credential Exfiltrationmcp.js
HighTrigger Reachable Command Output Exfiltrationmcp.js#virtual:normalized:round1
HighSemantic Analysis Limitedmcp.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulewasm/eddies_ledger_bg.wasm
Affected versions and remediation
This report applies to eddieseddies@1.0.3.
See all versions of eddieseddies for other recorded verdicts.
- Review the evidence and your use of eddieseddies@1.0.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.