flavor-code@1.2.18

⚠ Under review

<p align="center"><a href="./README.md">English</a> | <b><a href="./README.zh-CN.md">简体中文</a></b></p>

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 15 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

NoLicense

scanned 117 file(s), 5.04 MB of source, external domains: 127.0.0.1, 192.168.1.100, api.example.com, example.com, github.com, json-schema.org, lite.duckduckgo.com, mcp.example.com, react.dev, www.bing.com, www.w3.org

Source & flagged code

7 flagged

dist/astgraph/vendor/tree-sitter.jsView file

2977var func = `(${args}) => { ${body} };`; L2978: ASM_CONSTS[start] = eval(func); L2979: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/astgraph/vendor/tree-sitter.jsView on unpkg · L2977

dist/astgraph/index.jsView file

29async function mod(name) { L30: return import(new URL(`./${name}`, import.meta.url).href); L31: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/astgraph/index.jsView on unpkg · L29

dist/desktop/main.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/desktop/main.js: import { readFile as readFile34, stat as stat15, writeFile as writeFile18 } from "fs/promises"; baseURL: z.string().trim().url().max(2048).refine((value) => { baseURL: z2.string().url().optional(), authorizationUrl: z2.string().url().optional(), await handle.writeFile(data2); baseURL: HttpUrlInput, async function runInteractionManifest(manifest, baseUrl, createDriver) { if (!isLoopbackPreviewUrl(baseUrl)) throw new Error("D2C interaction preview must use a loopback HTTP URL");

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/desktop/main.jsView on unpkg

45try { L46: parsed = JSON.parse(unfenced); L47: } catch { ... L400: } L401: return { ...input, data: data2 }; L402: } ... L1051: const onRenderProcessGone = (_event, details) => { L1052: recordRendererDiagnostic(`renderer process ${details.reason} (exit ${details.exitCode})`); L1053: }; ... L1460: function normalizedPage(value) { L1461: const url = new URL(value, "http://127.0.0.1/"); L1462: return url.pathname.replace(/^\//, "") || "index.html";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/desktop/main.jsView on unpkg · L45

dist/astgraph/vendor/tree-sitter.wasmView file

•path = dist/astgraph/vendor/tree-sitter.wasm kind = wasm_module sizeBytes = 205488 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/astgraph/vendor/tree-sitter.wasmView on unpkg

dist/astgraph/vendor/zod/v4/core/util.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/astgraph/vendor/zod/v4/core/util.js#virtual:normalized:round1View on unpkg

dist/chunk-RQTYHUMK.jsView file

•matchType = normalized_sha256 matchedPackage = flavor-code@1.3.20 matchedPath = dist/chunk-RQTYHUMK.js matchedIdentity = npm:Zmxhdm9yLWNvZGU:1.3.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-RQTYHUMK.jsView on unpkg

Source & flagged code

7 flagged · loading source

dist/astgraph/vendor/tree-sitter.jsView file

2977var func = `(${args}) => { ${body} };`; L2978: ASM_CONSTS[start] = eval(func); L2979: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/astgraph/vendor/tree-sitter.jsView on unpkg · L2977

dist/astgraph/index.jsView file

29async function mod(name) { L30: return import(new URL(`./${name}`, import.meta.url).href); L31: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/astgraph/index.jsView on unpkg · L29

dist/desktop/main.jsView file

Findings

3 High5 Medium7 Low

HighCredential Redirect Persistencedist/desktop/main.js

HighSemantic Analysis Limiteddist/astgraph/vendor/zod/v4/core/util.js#virtual:normalized:round1

HighKnown Malware Source Similaritydist/chunk-RQTYHUMK.js

MediumDynamic Requiredist/astgraph/index.js

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Moduledist/astgraph/vendor/tree-sitter.wasm

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/astgraph/vendor/tree-sitter.js

LowWeak Cryptodist/desktop/main.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to flavor-code@1.2.18.

See all versions of flavor-code for other recorded verdicts.

Review the evidence and your use of flavor-code@1.2.18 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-19 19:03:34.828Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.