registry / flavor-code / 1.3.13

flavor-code@1.3.13

⚠ Under review

<p align="center"><a href="./README.md">English</a> | <b><a href="./README.zh-CN.md">简体中文</a></b></p>

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 21 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

NoLicense

scanned 119 file(s), 5.76 MB of source, external domains: 127.0.0.1, 192.168.1.100, api.example.com, developer.mozilla.org, example.com, github.com, json-schema.org, lite.duckduckgo.com, mcp.example.com, react.dev, www.bing.com, www.w3.org

Source & flagged code

13 flagged

dist/chunk-F2HMO5Q2.jsView file

27059function wrapAnsi(string, columns, options) { L27060: return String(string).normalize().replaceAll("\r\n", "\n").split("\n").map((line) => exec(expandTabs2(line), columns, options)).join("\n"); L27061: }

High

Child Process

Package source references child process execution.

dist/chunk-F2HMO5Q2.jsView on unpkg · L27059

dist/desktop/main.jsView file

7314} L7315: if (["powershell", "pwsh"].includes(name)) { L7316: const flag = args.findIndex((arg) => ["-command", "-c"].includes(arg.toLowerCase()));

High

Shell

Package source references shell execution.

dist/desktop/main.jsView on unpkg · L7314

8734function runShellHandler(descriptor, event, signal) { L8735: return new Promise((resolve41, reject) => { L8736: const child = spawn(descriptor.command, [...descriptor.args ?? []], { L8737: env: { ...process.env, ...descriptor.env }, L8738: shell: false,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/desktop/main.jsView on unpkg · L8734

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/desktop/main.js: import { readFile as readFile39, stat as stat18, writeFile as writeFile19 } from "fs/promises"; baseURL: z.string().trim().url().max(2048).refine((value) => { baseURL: z2.string().url().optional(), authorizationUrl: z2.string().url().optional(), await handle.writeFile(data2); baseURL: HttpUrlInput, async function runInteractionManifest(manifest, baseUrl, createDriver) { if (!isLoopbackPreviewUrl(baseUrl)) throw new Error("D2C interaction preview must use a loopback HTTP URL");

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/desktop/main.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/desktop/main.js: import { readFile as readFile39, stat as stat18, writeFile as writeFile19 } from "fs/promises"; await handle.writeFile(data2); var DesktopMessageDeliverySchema = z3.enum(["prompt", "steer", "followUp"]); import { copyFile, mkdir as mkdir2, open as open2, readFile, rename as rename2, rm as rm2, stat, unlink } from "fs/promises"; var defaultFileOperations = { rename: rename2, copyFile, unlink }; await handle.writeFile(token, "utf8"); await handle.writeFile(content, "utf8"); await operations.copyFile(temporary, path);

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/desktop/main.jsView on unpkg

8773if (code !== 0) { L8774: reject(new Error(`Shell hook exited with code ${code}: ${stderr.trim()}`)); L8775: return; ... L8777: try { L8778: resolve41(HookDecisionSchema.parse(JSON.parse(stdout))); L8779: } catch (error) { ... L8782: }); L8783: child.stdin.end(JSON.stringify(event)); L8784: }); ... L8788: if (process.platform === "win32") { L8789: const killer = spawn("taskkill", ["/pid", String(child.pid), "/t", "/f"], { L8790: stdio: "ignore",

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/desktop/main.jsView on unpkg · L8773

8773Trigger-reachable command-output exfiltration chain: manifest.main -> dist/desktop/main.js L8773: if (code !== 0) { L8774: reject(new Error(`Shell hook exited with code ${code}: ${stderr.trim()}`)); L8775: return; ... L8777: try { L8778: resolve41(HookDecisionSchema.parse(JSON.parse(stdout))); L8779: } catch (error) { ... L8782: }); L8783: child.stdin.end(JSON.stringify(event)); L8784: }); ... L8788: if (process.platform === "win32") { L8789: const killer = spawn("taskkill", ["/pid", String(child.pid), "/t", "/f"], { L8790: stdio: "ignore",

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/desktop/main.jsView on unpkg · L8773

4import { readFile as readFile39, stat as stat18, writeFile as writeFile19 } from "fs/promises"; L5: import { basename as basename11, dirname as dirname24, join as join47, resolve as resolve40 } from "path"; L6: import { fileURLToPath as fileURLToPath4 } from "url"; ... L46: try { L47: parsed = JSON.parse(unfenced); L48: } catch { ... L408: } L409: return { ...input, data: data2 }; L410: } ... L1140: const onRenderProcessGone = (_event, details) => { L1141: recordRendererDiagnostic(`renderer process ${details.reason} (exit ${details.exitCode})`); L1142: };

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/desktop/main.jsView on unpkg · L4

dist/astgraph/vendor/tree-sitter.jsView file

Lines 2957-2997javascript

2957 "env": proxy,

2958 "wasi_snapshot_preview1": proxy

2959 };

2960 function postInstantiation(module, instance) {

2961 updateTableMap(tableBase, metadata.tableSize);

2962

dist/astgraph/index.jsView file

Lines 9-49javascript

9// inside the host's activation timeout; WASM grammars and the database load on

10// first use.

12import { existsSync } from "node:fs";

13import { isAbsolute, join, relative } from "node:path";

15import { z } from "./vendor/zod/index.js"

dist/desktop/plugin-worker-entry.jsView file

Lines 8-48javascript

8var CONTRIBUTION_NAME_SOURCE = "^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$";

9var data = workerData;

10var port = parentPort;

11if (port === null) throw

dist/astgraph/vendor/tree-sitter.wasmView file

•path = dist/astgraph/vendor/tree-sitter.wasm kind = wasm_module sizeBytes = 205488 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/astgraph/vendor/tree-sitter.wasmView on unpkg

dist/chunk-W2D2MLY2.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = flavor-code@1.2.15 matchedIdentity = npm:Zmxhdm9yLWNvZGU:1.2.15 similarity = 0.921 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-W2D2MLY2.jsView on unpkg

Source & flagged code

13 flagged · loading source

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code