registry / edgeone / 1.6.35

edgeone@1.6.35

Command-line interface for TencentCloud Pages Functions

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

There is no source-grounded proof of malicious behavior, but the embedded binary archive and extensive bundled runtime prevent a decisive clean classification. Downgrade to a warning rather than block publication.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

Running the CLI or its development-worker functionality.

Impact

Unresolved supply-chain risk; no demonstrated compromise behavior.

Mechanism

Bundled CLI and embedded Python storage component.

AI rationale

Evidence

libs-pages-blob-python/pages_blob_python-0.12.0-py3-none-any.whledgeone-bin/edgeone.jsedgeone-dist/pages/dev/runner-worker.js

Decision evidence

public snapshot

AI called this Suspicious at 72.0% confidence as Unknown with medium false-positive risk.

Evidence for warning

The package ships a compressed Python wheel, leaving an embedded code payload outside normal JavaScript source review.
The CLI bundle imports the process-launching child_process module.
The development worker is a very large bundled runtime, which limits reliable static attribution of all included code.

Evidence against

The manifest has no preinstall, install, or postinstall hook; its only publish hook is prepublishOnly.
The declared executable is a user-invoked CLI entrypoint.
No runtime dependency on edgeone itself was found.
No confirmed credential theft, destructive action, or unsolicited agent-control mutation was identified.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

Source & flagged code

16 flagged

edgeone-bin/edgeone.jsView file

Lines 1-9javascript

1#!/usr/bin/env node

2var _a;

3var Un=Object.create;var jt=Object.defineProperty;var Bn=Object.getOwnPropertyDescriptor;var Dn=Object.getOwnPropertyNames;var Mn=Object.getPrototypeOf,jn=Object.prototype.hasOwnProperty;var p=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports);var Hn=(t,e,r,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of Dn(e))!jn.call(t,s)&&s!==r&&jt(t,s,{get:()=>e[s],enumerable:!(n=Bn(e,s))||n.enumerable});return t};var ce=(t,e,r)=>(r=t!=null?Un(Mn(t)):{},Hn(e||!t||!t.__esModule?jt(r,"default",{value:t,enumerable:!0}):r,t));var kt=p(Ht=>{var d=Ht,{Buffer:Oe}=require("buffer"),kn=require ...

4`),function(u){if(o=u.indexOf(":"),n=et.trim(u.substr(0,o)).toLowerCase(),s=et.trim(u.substr(o+1)),n){if(r[n]&&Es.indexOf(n)>=0)return;n==="set-cookie"?r[n]=(r[n]?r[n]:[]).concat([s]):r[n]=r[n]?r[n]+", "+s:s}}),r}});var yr=p((mi,gr)=>{"use strict";var vr=x();gr.exports=vr.isStandardBrowserEnv()?function(){var e=/(msie|trident)/i.test(navigator.userAgent),r=document.createElement("a"),n;function s(o){var i=o;return e&&(r.setAttribute("href",i),i=r.href),r.setAttribute("href",i),{href:r.href,protocol:r.protocol?r.protocol.replace(/:$/,""):"",host:r.host,search:r.search?r.search.replace(/^\?/,"") ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

edgeone-bin/edgeone.jsView on unpkg · L2

5`).join(`

6`+o),t.push(s+"m+"+Ue.exports.humanize(this.diff)+"\x1B[0m")}else t[0]=Ws()+e+" "+t[0]}function Ws(){return

7`)}function Ys(t){t?process.env.DEBUG=t:delete process.env.DEBUG}function Zs(){return process.env.DEBUG}function Ks(t){t.inspectOpts={};let e=

8`).map(e=>e.trim()).join(" ")};Ir.O=function(t){return this.inspectOpts.colors=this.useColors,Ae.inspect(t,this.inspectOpts)}});var Pr=p((Ei,

Long lines were clipped for display.

•matchType = normalized_sha256 matchedPackage = edgeone@1.6.34 matchedPath = edgeone-bin/edgeone.js matchedIdentity = npm:ZWRnZW9uZQ:1.6.34 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

edgeone-bin/edgeone.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 48dcd752ecac19f9 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = edgeone@1.6.34 matchedPath = edgeone-bin/edgeone.js matchedIdentity = npm:ZWRnZW9uZQ:1.6.34 similarity = 1.000 shingleOverlap = 9 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

edgeone-bin/edgeone.jsView on unpkg

edgeone-dist/pages/dev/runner-worker.jsView file

1Cross-file remote execution chain: edgeone-dist/pages/dev/runner-worker.js spawns edgeone-bin/edgeone.js; helper contains network access plus dynamic code execution. L1: var _a; L2: var ZNe=Object.create;var WT=Object.defineProperty;var QNe=Object.getOwnPropertyDescriptor;var e4e=Object.getOwnPropertyNames;var t4e=Object.getPrototypeOf,r4e=Object.prototype.has... L3: `?(tx++,Jm=0):e?Jm+=e.length:Jm++,e&&(bk+=e.length),e}var MG={default(){switch(Ks){case" ":case"\v":case"\f":case" ":case"\xA0":case"\uFEFF":case` ... L8: `:case"\u2028":case"\u2029":return cr(),"";case"\r":return cr(),Av()===` L9: `&&cr(),"";case"1":case"2":case"3":case"4":case"5":case"6":case"7":case"8":case"9":throw ru(cr());case void 0:throw ru(cr())}return cr()}function o4e(){let e="",t=Av();if(!Ql.isHex... L10: `+n;ne=J.

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

edgeone-dist/pages/dev/runner-worker.jsView on unpkg · L1

1Detached bundled service listener: edgeone-dist/pages/dev/runner-worker.js launches a Node helper and exposes a broad-bound HTTP listener. L1: var _a; L2: var ZNe=Object.create;var WT=Object.defineProperty;var QNe=Object.getOwnPropertyDescriptor;var e4e=Object.getOwnPropertyNames;var t4e=Object.getPrototypeOf,r4e=Object.prototype.has... L3: `?(tx++,Jm=0):e?Jm+=e.length:Jm++,e&&(bk+=e.length),e}var MG={default(){switch(Ks){case" ":case"\v":case"\f":case" ":case"\xA0":case"\uFEFF":case` ... L8: `:case"\u2028":case"\u2029":return cr(),"";case"\r":return cr(),Av()===` L9: `&&cr(),"";case"1":case"2":case"3":case"4":case"5":case"6":case"7":case"8":case"9":throw ru(cr());case void 0:throw ru(cr())}return cr()}function o4e(){let e="",t=Av();if(!Ql.isHex... L10: `+n;ne=J.join(ge),le=`{ ... L14: `+n

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

edgeone-dist/pages/observability-python/bootstrap.pyView file

•path = edgeone-dist/pages/observability-python/bootstrap.py kind = build_helper sizeBytes = 5257 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

edgeone-dist/pages/observability-python/bootstrap.pyView on unpkg

libs-pages-blob-python/pages_blob_python-0.12.0-py3-none-any.whlView file

•path = libs-pages-blob-python/pages_blob_python-0.12.0-py3-none-any.whl kind = high_entropy_blob sizeBytes = 22939 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

libs-pages-blob-python/pages_blob_python-0.12.0-py3-none-any.whlView on unpkg

•path = libs-pages-blob-python/pages_blob_python-0.12.0-py3-none-any.whl kind = compressed_blob sizeBytes = 22939 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

libs-pages-blob-python/pages_blob_python-0.12.0-py3-none-any.whlView on unpkg

•path = libs-pages-blob-python/pages_blob_python-0.12.0-py3-none-any.whl kind = nested_archive_needs_inspection sizeBytes = 22939 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

libs-pages-blob-python/pages_blob_python-0.12.0-py3-none-any.whlView on unpkg

edgeone-dist/studio/ui/assets/tea-Slf_ajmf.jsView file

•path = edgeone-dist/studio/ui/assets/tea-Slf_ajmf.js kind = oversized_source_file sizeBytes = 4904963 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

edgeone-dist/studio/ui/assets/tea-Slf_ajmf.jsView on unpkg

edgeone-dist/cli.jsView file

•path = edgeone-dist/cli.js kind = oversized_cli_entrypoint sizeBytes = 10837424 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

edgeone-dist/cli.jsView on unpkg

Source & flagged code

16 flagged · loading source

edgeone-bin/edgeone.jsView file

7`)}function Ys(t){t?process.env.DEBUG=t:delete process.env.DEBUG}function Zs(){return process.env.DEBUG}function Ks(t){t.inspectOpts={};let e=Object.keys(E.inspectOpts);for(let r=0... L8: `).map(e=>e.trim()).join(" ")};Ir.O=function(t){return this.inspectOpts.colors=this.useColors,Ae.inspect(t,this.inspectOpts)}});var Pr=p((Ei,it)=>{typeof process>"u"||process.type=...

High

Child Process

Package source references child process execution.

edgeone-bin/edgeone.jsView on unpkg · L7

2var _a; L3: var Un=Object.create;var jt=Object.defineProperty;var Bn=Object.getOwnPropertyDescriptor;var Dn=Object.getOwnPropertyNames;var Mn=Object.getPrototypeOf,jn=Object.prototype.hasOwnPr... L4: `),function(u){if(o=u.indexOf(":"),n=et.trim(u.substr(0,o)).toLowerCase(),s=et.trim(u.substr(o+1)),n){if(r[n]&&Es.indexOf(n)>=0)return;n==="set-cookie"?r[n]=(r[n]?r[n]:[]).concat([... L5: `).join(` ... L7: `)}function Ys(t){t?process.env.DEBUG=t:delete process.env.DEBUG}function Zs(){return process.env.DEBUG}function Ks(t){t.inspectOpts={};let e=Object.keys(E.inspectOpts);for(let r=0... L8: `).map(e=>e.trim()).join(" ")};Ir.O=function(t){return this.inspectOpts.colors=this.useColors,Ae.inspect(t,this.inspectOpts)}});var Pr=p((Ei,it)=>{typeof process>"u"||process.type=...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

edgeone-bin/edgeone.jsView on unpkg · L2

Findings

11 High8 Medium7 Low

HighChild Processedgeone-bin/edgeone.js

HighShell

HighSame File Env Network Executionedgeone-bin/edgeone.js

HighCommand Output Exfiltrationedgeone-bin/edgeone.js

HighCross File Remote Execution Contextedgeone-dist/pages/dev/runner-worker.js

HighSpawned Bundled Service Listeneredgeone-dist/pages/dev/runner-worker.js

HighTrigger Reachable Command Output Exfiltrationedgeone-bin/edgeone.js

HighShips High Entropy Bloblibs-pages-blob-python/pages_blob_python-0.12.0-py3-none-any.whl

HighKnown Malware Source Similarityedgeone-bin/edgeone.js

HighKnown Malware Source Similarityedgeone-dist/pages/dev/runner-worker.js

HighKnown Malware Source Fingerprint Signature

Affected versions and remediation

This report applies to edgeone@1.6.35.

See all versions of edgeone for other recorded verdicts.

Review the evidence and your use of edgeone@1.6.35 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-09 11:43:36.965Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.