registry / icoa-cli / 2.19.628

icoa-cli@2.19.628

⚠ Under review

ICOA CLI — AI-native competition runtime of the International Cyber Olympiad in AI: learn, practise, and compete in AI & cybersecurity from the terminal (AI4CTF · CTF4AI · CTF4EAI)

Static Scan Results

scanned 19d ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 31 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 153 file(s), 1.22 MB of source, external domains: 172.235.198.124, 172.237.95.164, aistudio.google.com, api.github.com, archive.ubuntu.com, bootstrap.pypa.io, cdn.jsdelivr.net, deb.nodesource.com, github.com, icoa-assets.oss-cn-hongkong.aliyuncs.com, icoa-datasets.sg-sin-1.linodeobjects.com, icoa2026.au, mirrors.aliyun.com, nodejs.org, npmmirror.com, practice.icoa2026.au, pypi.org, pypi.tuna.tsinghua.edu.cn, python.org, raw.githubusercontent.com, registry.npmjs.org, registry.npmmirror.com, www.docker.com

Source & flagged code

24 flagged

dist/commands/gpufortask.jsView file

Lines 1-1javascript

1import{createInterface as e,Interface as o}from"node:readline";import chalk from"chalk";import{getDeviceFingerprint as t}from"../lib/access.js";import{getMainRl as n}from"../lib/main-rl.js";const s=(process.env.ICOA_GPUTASK_SERVER||"https://practice.icoa2026.au").replace(/\/$/,"");let i=[],a=null,l=null;function r(o){return new Promise(t=>{const s=n();if(s)return l=t,s.setPrompt(o),void s.prompt();const i=e({input:process.stdin,output:process.stdout});i.question(o,e=>{i.close(),t(e)})})}let c="en";const g={banner:{en:"[🧪 Committee GPU sandbox — clean 40-pkg IOAI environment]",zh:"[🧪 命题组 GP ...

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/commands/gpufortask.jsView on unpkg · L1

Long lines were clipped for display.

dist/repl.jsView file

Lines 1-1javascript

1import{createInterface as o}from"node:readline";import{spawn as e,execSync as t}from"node:child_process";import chalk from"chalk";import{appendExitLog as n}from"./lib/exit-log.js";import

dist/lib/access.jsView file

Lines 1-1javascript

1import{createHash as t}from"node:crypto";import{execSync as e}from"node:child_process";import{platform as n}from"node:os";import{getConfig as r,saveConfig as i,getIcoaDir as o,getInstallSalt

dist/commands/ctf4ai-demo.jsView file

Lines 1-1javascript

1function a0f(a,b){a=a-(-0x5*-0xc7+-0x378+0x4*0x24);const c=a0b();

dist/lib/exam-sandbox.jsView file

Lines 1-1javascript

1import{mkdtempSync as t,mkdirSync as e,existsSync as o,appendFileSync as s,statSync as i}from"node:fs";import{execFileSync as n}from"node:child_process";import{tmpdir as r,homedir as a,platform

dist/lib/tool-man.jsView file

Lines 1-1javascript

1import chalk from"chalk";export const TOOL_DOCS=[{name:"file",cat:"Forensics",summary:"identify a file type (always step 1)",ex:[["file mystery","what is this really? (extension lies)"]]},{name:"strings",cat:"Forensics",summary:"pull printable text out of any binary"

dist/commands/aienv.jsView file

Lines 1-1javascript

1import{execSync as o,spawn as n}from"node:child_process";import{existsSync as e,mkdtempSync as t,readFileSync as r,rmSync as s,writeFileSync as a}from"node:fs";import{homedir as i,tmpdir

dist/commands/gfssm.jsView file

1Trigger-reachable command-output exfiltration chain: scripts.start -> dist/index.js -> dist/commands/gfssm.js L1: import{execFile as e}from"node:child_process";import{mkdir as o,writeFile as n}from"node:fs/promises";import{homedir as t}from"node:os";import{join as r}from"node:path";import{crea...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/commands/gfssm.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/gfssm.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/gfssm.jsView on unpkg

dist/commands/battle.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/commands/battle.js#virtual:string-array:round1View on unpkg

dist/commands/env.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/env.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/env.jsView on unpkg

dist/commands/ioailab.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/ioailab.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/ioailab.jsView on unpkg

dist/commands/teleload.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/teleload.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/teleload.jsView on unpkg

dist/commands/arena-eai.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/arena-eai.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/arena-eai.jsView on unpkg

dist/commands/battle.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/battle.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/battle.jsView on unpkg

dist/commands/duck.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/duck.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/duck.jsView on unpkg

dist/commands/shell.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/commands/shell.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/shell.jsView on unpkg

dist/lib/open-file.jsView file

•matchType = normalized_sha256 matchedPackage = icoa-cli@2.19.614 matchedPath = dist/lib/open-file.js matchedIdentity = npm:aWNvYS1jbGk:2.19.614 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/open-file.jsView on unpkg

icoa-cli@2.19.628

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code