18import { createHash, randomBytes, randomUUID } from "node:crypto";
L19: import * as http from "node:http";
L20: import * as https from "node:https";
...
L22: import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L252: try {
L253: const resolved = new Intl.DateTimeFormat("en-US", { timeZone: trimmed }).resolvedOptions().timeZone;
L254: if (!resolved) throw new Error(`unrecognized IANA timezone: ${trimmed}`);
...
L349: *
L350: * @private
L351: * @param {Error} err
CriticalCredential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/connect-token-CWjKsC5j.mjsView on unpkg · L18 18Trigger-reachable chain: manifest.exports -> dist/index.mjs -> dist/connect-token-CWjKsC5j.mjs
L18: import { createHash, randomBytes, randomUUID } from "node:crypto";
L19: import * as http from "node:http";
L20: import * as https from "node:https";
...
L22: import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L252: try {
L253: const resolved = new Intl.DateTimeFormat("en-US", { timeZone: trimmed }).resolvedOptions().timeZone;
L254: if (!resolved) throw new Error(`unrecognized IANA timezone: ${trimmed}`);
...
L349: *
L350: * @private
L351: * @param {Error} err
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/connect-token-CWjKsC5j.mjsView on unpkg · L18 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/connect-token-CWjKsC5j.mjs:
import { accessSync, appendFileSync, chmodSync, closeSync, constants, createReadStream, createWriteStream, existsSync, fchmodSync, fstatSync, fsyncSync, linkSync, lstatSync, mkdirS...
import { createInterface } from "node:readline";
import { chmod, lstat, mkdir, mkdtemp, open, readFile as readFile$1, readdir as readdir$1, readlink, realpath, rename, rm, stat, symlink, unlink, writeFile } from "node:fs/promises...
* Named constants for call sites that prefer `RUNTIME_PROVIDERS.CODEX` over
"authorization",
"*.authorization",
"*.headers.authorization"
const AUTHORIZATION_KEY = `["']?authorization["']?`;
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/connect-token-CWjKsC5j.mjsView on unpkg 18import { createHash, randomBytes, randomUUID } from "node:crypto";
L19: import * as http from "node:http";
L20: import * as https from "node:https";
...
L22: import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L252: try {
L253: const resolved = new Intl.DateTimeFormat("en-US", { timeZone: trimmed }).resolvedOptions().timeZone;
L254: if (!resolved) throw new Error(`unrecognized IANA timezone: ${trimmed}`);
...
L349: *
L350: * @private
L351: * @param {Error} err
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/connect-token-CWjKsC5j.mjsView on unpkg · L18 22import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L4300: if (existsSync(configPath)) {
L4301: const raw = parse(readFileSync(configPath, "utf-8"));
L4302: if (typeof raw === "object" && raw !== null) fileValues = raw;
...
L4637: trustProxy: field$1(z.boolean().default(false), { env: "FIRST_TREE_TRUST_PROXY" }),
L4638: connectBootstrap: { portableDownloadBaseUrl: field$1(z.string().url().default("https://download.first-tree.ai/releases"), { env: "FIRST_TREE_PORTABLE_DOWNLOAD_BASE_URL" }) },
L4639: rateLimit: optional$1({ max: field$1(z.number().default(3e3), { env: "FIRST_TREE_RATE_LIMIT_MAX" }) }),
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
dist/connect-token-CWjKsC5j.mjsView on unpkg · L22 •Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
freezeresult(resourceconfigversion, result) {
return object.freeze({
ok: result.failures.length === 0,
resourceconfigversion,
installed: object.freeze([...result.installed]),
skipped: object.freeze([...result.skipped]),
removed: object.freeze([...result.removed]),
teamskills: object.freeze([...result.teamskills]),
teamskillcommands: result.teamskillcommands === null ? null : object.freeze([...result.teamskillcommands]),
failures: object.freeze([...result.failures]),
staleteamsnapshot: result.staleteamsnapshot
});
}
function processmutexkey(workspace) {
try {
return realpathsync(resolve(workspace));
} catch {
return resolve(workspace);
}
}
async functio
HighTrigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/connect-token-CWjKsC5j.mjsView on unpkg 18Trigger-reachable credential exfiltration chain: manifest.exports -> dist/index.mjs -> dist/connect-token-CWjKsC5j.mjs
L18: import { createHash, randomBytes, randomUUID } from "node:crypto";
L19: import * as http from "node:http";
L20: import * as https from "node:https";
...
L22: import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L252: try {
L253: const resolved = new Intl.DateTimeFormat("en-US", { timeZone: trimmed }).resolvedOptions().timeZone;
L254: if (!resolved) throw new Error(`unrecognized IANA timezone: ${trimmed}`);
...
L349: *
L350: * @private
L351: * @param {Error} err
HighTrigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/connect-token-CWjKsC5j.mjsView on unpkg · L18 18Trigger-reachable persistence chain: manifest.exports -> dist/index.mjs -> dist/connect-token-CWjKsC5j.mjs
L18: import { createHash, randomBytes, randomUUID } from "node:crypto";
L19: import * as http from "node:http";
L20: import * as https from "node:https";
...
L22: import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L252: try {
L253: const resolved = new Intl.DateTimeFormat("en-US", { timeZone: trimmed }).resolvedOptions().timeZone;
L254: if (!resolved) throw new Error(`unrecognized IANA timezone: ${trimmed}`);
...
L349: *
L350: * @private
L351: * @param {Error} err
HighTrigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/connect-token-CWjKsC5j.mjsView on unpkg · L18 105706/**
L105707: * Validate an npm install spec (the part after `@` in `<pkg>@<spec>`). We
L105708: * accept either a known dist-tag string (`latest`, `alpha`, …) or an exact
...
L105711: * want to forward an attacker-controlled shell metacharacter from a
L105712: * (compromised) server welcome frame straight into `spawn`. spawn() already
L105713: * argv-escapes, but a `--registry=...` style spec would still be
HighRuntime Package Install
Package source invokes a package manager install command at runtime.
dist/connect-token-CWjKsC5j.mjsView on unpkg · L105706 •stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 8
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/connect-token-CWjKsC5j.mjsView on unpkg 18import { createHash, randomBytes, randomUUID } from "node:crypto";
L19: import * as http from "node:http";
L20: import * as https from "node:https";
...
L22: import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L252: try {
L253: const resolved = new Intl.DateTimeFormat("en-US", { timeZone: trimmed }).resolvedOptions().timeZone;
L254: if (!resolved) throw new Error(`unrecognized IANA timezone: ${trimmed}`);
...
L349: *
L350: * @private
L351: * @param {Error} err
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/connect-token-CWjKsC5j.mjsView on unpkg · L18