registry / grepmax / 0.26.37

grepmax@0.26.37

⚠ Under review

Semantic code search for coding agents. Local embeddings, LLM summaries, call graph tracing.

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 24 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 188 file(s), 2.04 MB of source, external domains: 127.0.0.1, github.com, huggingface.co

Source & flagged code

16 flagged

package.jsonView file

Lines 1-41json

2 "name": "grepmax",

3 "version": "0.26.37",

4 "author": "Robert Owens <78518764+reowens@users.noreply.github.com>",

5 "homepage": "https://github.com/reowens/grepmax",

6 "bugs": {

7 "url": "https://github.com/reowens/grepmax/issues"

8 },

9 "repository": {

10 "type": "git",

11 "url": "https://github.com/reowens/grepmax.git"

12 },

13 "main": "dist/index.js",

14 "bin": {

15 "gmax": "dist/bin.js"

16 },

17 "engines": {

18 "node": ">=22.12.0"

19 },

20 "scripts": {

21 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L21

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L21

22 "prebuild": "rm -rf dist tsconfig.tsbuildinfo && mkdir -p dist",

23 "build": "tsc",

24 "postbuild": "chmod +x dist/bin.js dist/index.js",

25 "dev": "npx tsc && node dist/bin.js",

26 "test": "vitest run",

27 "test:watch": "vitest",

28 "bench:recall": "npx tsx src/eval.ts",

29 "bench:recall:json": "GMAX_EVAL_JSON=1 npx tsx src/eval.ts",

30 "bench:oss": "npx tsx src/eval-oss.ts all",

31 "bench:oss:json": "GMAX_EVAL_JSON=1 npx tsx src/eval-oss.ts all",

32 "bench:tokens": "npx tsx src/eval-tokens.ts",

33 "bench:tokens:json": "GMAX_EVAL_JSON=1 npx tsx src/eval-tokens.ts",

34 "bench:surprises": "npx tsx src/eval-surprising-connections.ts",

35 "bench:surprises:json": "GMAX_EVAL_JSON=1 npx tsx src/eval-surprising-connections.ts",

36 "format": "biome format --write .",

37 "format:check": "biome check .",

38 "lint": "biome lint .",

39 "lint:fix": "biome check --write .",

40 "typecheck": "tsc --noEmit",

41 "test:typecheck": "tsc -p tsconfig.tests.json",

dist/eval-graph-sanity.jsView file

Lines 52-92javascript

52 return function (mod) {

53 if (mod && mod.__esModule) return mod;

54 var result = {};

55 if (mod !=

dist/lib/search/pagerank.jsView file

Lines 210-250javascript

210 if (!set) {

211 set = new Set();

212 edges.set(d, set);

213 }

214 for (const r

dist/commands/codex.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: strict"; var __awaiter = (this && this.__awaiter) || function (thisarg, _arguments, p, generator) { function adopt(value) { return value instanceof p ? value : new p(function (resolve) { resolve(value); }); } return new (p || (p = promise))(function (resolve, reject) { function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } } function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } } function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); } step((generator = generator.apply(thisarg, _arguments || [])).next()); }); }; var __importdefault

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/commands/codex.jsView on unpkg

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. "use strict"; var __awaiter = (this && this.__awaiter) || function (thisarg, _arguments, p, generator) { function adopt(value) { return value instanceof p ? value : new p(function (resolve) { resolve(value); }); } return new (p || (p = promise))(function (resolve, reject) { function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } } function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } } function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); } step((generator = generator.apply(thisarg, _arguments || [])).next());

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

mlx-embed-server/server.pyView file

•path = mlx-embed-server/server.py kind = build_helper sizeBytes = 8671 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

mlx-embed-server/server.pyView on unpkg

dist/commands/add.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/commands/add.js#virtual:normalized:round1View on unpkg

dist/commands/claude-code.jsView file

•matchType = normalized_sha256 matchedPackage = grepmax@0.26.26 matchedPath = dist/commands/claude-code.js matchedIdentity = npm:Z3JlcG1heA:0.26.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High