18import { createHash, randomBytes, randomUUID } from "node:crypto";
L19: import * as http from "node:http";
L20: import * as https from "node:https";
...
L22: import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L251: try {
L252: const resolved = new Intl.DateTimeFormat("en-US", { timeZone: trimmed }).resolvedOptions().timeZone;
L253: if (!resolved) throw new Error(`unrecognized IANA timezone: ${trimmed}`);
...
L348: *
L349: * @private
L350: * @param {Error} err
CriticalCredential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/connect-token-4Hm00eBL.mjsView on unpkg · L18 18Trigger-reachable chain: manifest.exports -> dist/index.mjs -> dist/connect-token-4Hm00eBL.mjs
L18: import { createHash, randomBytes, randomUUID } from "node:crypto";
L19: import * as http from "node:http";
L20: import * as https from "node:https";
...
L22: import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L251: try {
L252: const resolved = new Intl.DateTimeFormat("en-US", { timeZone: trimmed }).resolvedOptions().timeZone;
L253: if (!resolved) throw new Error(`unrecognized IANA timezone: ${trimmed}`);
...
L348: *
L349: * @private
L350: * @param {Error} err
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/connect-token-4Hm00eBL.mjsView on unpkg · L18 21764process.argv[0],
L21765: ...process.execArgv,
L21766: ...process.argv.slice(1)
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/connect-token-4Hm00eBL.mjs:
import { accessSync, appendFileSync, chmodSync, closeSync, constants, createReadStream, createWriteStream, existsSync, fchmodSync, fstatSync, fsyncSync, linkSync, lstatSync, mkdirS...
import { createInterface } from "node:readline";
import { chmod, lstat, mkdir, mkdtemp, open, readFile as readFile$1, readdir as readdir$1, readlink, realpath, rename, rm, stat, symlink, writeFile } from "node:fs/promises";
* Named constants for call sites that prefer `RUNTIME_PROVIDERS.CODEX` over
"authorization",
"*.authorization",
"*.headers.authorization"
const AUTHORIZATION_KEY = `["']?authorization["']?`;
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/connect-token-4Hm00eBL.mjsView on unpkg 18import { createHash, randomBytes, randomUUID } from "node:crypto";
L19: import * as http from "node:http";
L20: import * as https from "node:https";
...
L22: import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L251: try {
L252: const resolved = new Intl.DateTimeFormat("en-US", { timeZone: trimmed }).resolvedOptions().timeZone;
L253: if (!resolved) throw new Error(`unrecognized IANA timezone: ${trimmed}`);
...
L348: *
L349: * @private
L350: * @param {Error} err
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/connect-token-4Hm00eBL.mjsView on unpkg · L18 22import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L4266: trustProxy: field$1(z.boolean().default(false), { env: "FIRST_TREE_TRUST_PROXY" }),
L4267: connectBootstrap: { portableDownloadBaseUrl: field$1(z.string().url().default("https://download.first-tree.ai/releases"), { env: "FIRST_TREE_PORTABLE_DOWNLOAD_BASE_URL" }) },
L4268: rateLimit: optional$1({ max: field$1(z.number().default(3e3), { env: "FIRST_TREE_RATE_LIMIT_MAX" }) }),
...
L25869: const filePath = join(process.cwd(), "package.json");
L25870: return JSON.parse(readFileSync(filePath, "utf8"));
L25871: } catch {
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
dist/connect-token-4Hm00eBL.mjsView on unpkg · L22 •Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
freezeresult(resourceconfigversion, result) {
return object.freeze({
ok: result.failures.length === 0,
resourceconfigversion,
installed: object.freeze([...result.installed]),
skipped: object.freeze([...result.skipped]),
removed: object.freeze([...result.removed]),
teamskills: object.freeze([...result.teamskills]),
teamskillcommands: result.teamskillcommands === null ? null : object.freeze([...result.teamskillcommands]),
failures: object.freeze([...result.failures]),
staleteamsnapshot: result.staleteamsnapshot
});
}
function processmutexkey(workspace) {
try {
return realpathsync(resolve(workspace));
} catch {
return resolve(workspace);
}
}
async functio
HighTrigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/connect-token-4Hm00eBL.mjsView on unpkg 18Trigger-reachable credential exfiltration chain: manifest.exports -> dist/index.mjs -> dist/connect-token-4Hm00eBL.mjs
L18: import { createHash, randomBytes, randomUUID } from "node:crypto";
L19: import * as http from "node:http";
L20: import * as https from "node:https";
...
L22: import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L251: try {
L252: const resolved = new Intl.DateTimeFormat("en-US", { timeZone: trimmed }).resolvedOptions().timeZone;
L253: if (!resolved) throw new Error(`unrecognized IANA timezone: ${trimmed}`);
...
L348: *
L349: * @private
L350: * @param {Error} err
HighTrigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/connect-token-4Hm00eBL.mjsView on unpkg · L18 18Trigger-reachable persistence chain: manifest.exports -> dist/index.mjs -> dist/connect-token-4Hm00eBL.mjs
L18: import { createHash, randomBytes, randomUUID } from "node:crypto";
L19: import * as http from "node:http";
L20: import * as https from "node:https";
...
L22: import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L251: try {
L252: const resolved = new Intl.DateTimeFormat("en-US", { timeZone: trimmed }).resolvedOptions().timeZone;
L253: if (!resolved) throw new Error(`unrecognized IANA timezone: ${trimmed}`);
...
L348: *
L349: * @private
L350: * @param {Error} err
HighTrigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/connect-token-4Hm00eBL.mjsView on unpkg · L18 102308/**
L102309: * Validate an npm install spec (the part after `@` in `<pkg>@<spec>`). We
L102310: * accept either a known dist-tag string (`latest`, `alpha`, …) or an exact
...
L102313: * want to forward an attacker-controlled shell metacharacter from a
L102314: * (compromised) server welcome frame straight into `spawn`. spawn() already
L102315: * argv-escapes, but a `--registry=...` style spec would still be
HighRuntime Package Install
Package source invokes a package manager install command at runtime.
dist/connect-token-4Hm00eBL.mjsView on unpkg · L102308 •stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 5
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/connect-token-4Hm00eBL.mjsView on unpkg 18import { createHash, randomBytes, randomUUID } from "node:crypto";
L19: import * as http from "node:http";
L20: import * as https from "node:https";
...
L22: import { AsyncLocalStorage } from "node:async_hooks";
L23: import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
L24: import * as util$2 from "node:util";
...
L251: try {
L252: const resolved = new Intl.DateTimeFormat("en-US", { timeZone: trimmed }).resolvedOptions().timeZone;
L253: if (!resolved) throw new Error(`unrecognized IANA timezone: ${trimmed}`);
...
L348: *
L349: * @private
L350: * @param {Error} err
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/connect-token-4Hm00eBL.mjsView on unpkg · L18