registry / jinzd-ai-cli / 0.4.221

jinzd-ai-cli@0.4.221

Cross-platform REPL-style AI CLI with multi-provider support

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 19 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 81 file(s), 2.76 MB of source, external domains: 127.0.0.1, ai.dev, api.deepseek.com, api.minimaxi.com, api.moonshot.ai, api.openai.com, cn.bing.com, console.cloud.google.com, dashscope.aliyuncs.com, github.com, json.schemastore.org, mths.be, ollama.com, open.bigmodel.cn, openrouter.ai, programmablesearchengine.google.com, registry.npmjs.org, tailwindcss.com, twitter.com, www.googleapis.com

Source & flagged code

10 flagged

dist/web/client/vendor/highlight.min.jsView file

Lines 112-152javascript

112e.scope&&"object"==typeof e.scope&&null!==e.scope&&(e.beginScope=e.scope,

113delete e.scope)})(e),"string"==typeof e.beginScope&&(e.beginScope={

114_wrap:e.beginScope}),"string"==typeof e.endScope&&(e.endScope={_wrap:e.endScope

115}),(e=>{if(Array.isArray(e.begin)){

116if(e.skip||e.excludeBegin||e.returnBegin)throw K("skip, excludeBegin, returnBegin not compatible with beginScope: {}"),

117G

118;if("object"!=typeof e.beginScope||null===e.beginScope)throw K("beginScope must be object"),

119G;Z(e,e.begin,{key:"beginScope"}),e.begin=h(e.begin,{joinWith:""})}})(e),(e=>{

120if(Array.isArray(e.end)){

121if(e.skip||e.excludeEnd||e.returnEnd)throw K("skip, excludeEnd, returnEnd not compatible with endScope: {}"),

122G

123;if("object"!=typeof e.endScope||null===e.endScope)throw K("endScope must be object"),

124G;Z(e,e.end,{key:"endScope"}),e.end=h(e.end,{joinWith:""})}})(e)}function Q(e){

125function n(n,t){

126return RegExp(c(n),"m"+(e.case_insensitive?"i":"")+(e.unicodeRegex?"u":"")+(t?"g":""))

127}class t{constructor(){

128this.matchIndexes={},this.regexes=[],this.matchAt=1,this.position=0}

129addRule(e,n){

130n.position=this.position++,this.matchIndexes[this.matchAt]=n,this.regexes.push([n,e]),

131this.matchAt+=p(e)+1}compile(){0===this.regexes.length&&(this.exec=()=>null)

132;const e=this.regexes.map((e=>e[1]));this.matcherRe=n(h(e,{joinWith:"|"

133}),!0),this.lastIndex=0}exec(e){this.matcherRe.lastIndex=this.lastIndex

134;const n=this.matcherRe.exec(e);if(!n)return null

High

Child Process

Package source references child process execution.

dist/web/client/vendor/highlight.min.jsView on unpkg · L132

135;const t=n.findIndex(((e,n)=>n>0&&void 0!==e)),a=this.matchIndexes[t]

136;return n.splice(0,t),Object.assign(n,a)}}class i{constructor(){

137this.rules=[],this.multiRegexes=[],

138this.count=0,this.lastIndex=0,this.regexIndex=0}getMatcher(e){

139if(this.multiRegexes[e])return this.multiRegexes[e];const n=new t

140;return this.rules.slice(e).forEach((([e,t])=>n.addRule(e,t))),

141n.compile(),this.multiRegexes[e]=n,n}resumingScanAtSamePosition(){

142return 0!==this.regexIndex}considerAll(){this.regexIndex=0}addRule(e,n){

143this.rules.push([e,n]),"begin"===n.type&&this.count++}exec(e){

144const n=this.getMatcher(this.regexIndex);n.lastIndex=this.lastIndex

145;let t=n.exec(e)

146;if(this.resumingScanAtSamePosition())if(t&&t.index===this.lastIndex);else{

147const n=this.getMatcher(0);n.lastIndex=this.lastIndex+1,t=n.exec(e)}

148return t&&(this.regexIndex+=t.position+1,

149this.regexIndex===this.count&&this.considerAll()),t}}

150if(e.compilerExtensions||(e.compilerExtensions=[]),

151e.contains&&e.contains.includes("self"))throw Error("ERR: contains `self` is not supported at the top-level of a language. See documentation.")

152;return e.classNameAliases=a(e.classNameAliases||{}),function t(r,s){const o=r

dist/electron-server.jsView file

High

Shell

Package source references shell execution.

dist/electron-server.jsView on unpkg · L729

89// 可选：直接在此写 key（也可通过 apiKeys 字段或环境变量提供） L90: baseUrl: z.string(), L91: // OpenAI 兼容 API 的 base URL（必填） ... L502: try { L503: const raw = JSON.parse(readFileSync(this.configPath, "utf-8")); L504: return ConfigSchema.parse(raw); ... L4859: // src/tools/builtin/bash.ts L4860: import { spawn } from "child_process"; L4861: import { existsSync as existsSync5, readdirSync as readdirSync2, statSync as statSync2 } from "fs";

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/electron-server.jsView on unpkg · L89

64Detached bundled service listener: dist/electron-server.js launches a Node helper and exposes a broad-bound HTTP listener. L64: import express from "express"; L65: import { createServer } from "http"; L66: import { WebSocketServer } from "ws"; ... L250: denyPorts: z.array(z.number().int().min(1).max(65535)).default([]), L251: allowPrivateNetwork: z.boolean().default(false), L252: tools: z.object({ ... L404: if (fixedEnvVar && fixedEnvVar !== dynamicEnvVar) { L405: const fixedVal = process.env[fixedEnvVar]; L406: const dynVal = process.env[dynamicEnvVar]; L407: if (fixedVal && dynVal && fixedVal !== dynVal) { L408: process.stderr.write(`[warn] env var collision: ${fixedEnvVar} and ${dynamicEnvVar} have different values for provider "${providerId}". Using ${fixedEnvVar}. L409: `);

dist/web/client/vendor/tailwind.jsView file

Lines 1-21javascript

1(()=>{var qv=Object.create;var Hi=Object.defineProperty;var $v=Object.getOwnPropertyDescriptor;var Lv=Object.getOwnPropertyNames;var Mv=Object.getPrototypeOf,Nv=Object.prototype.hasOwnProperty;var df=r=>Hi(r,"__esModule",{value:!

dist/chunk-VHY6NVMQ.jsView file

Lines 7-47javascript

7 atomicWriteFileSync

8} from "./chunk-6BUTA5VW.js";

10// src/memory/chat-index.ts

11import fs from "fs";

12import path from "path";

13import os from "os";

14import crypto from

dist/chunk-BYQEWWA4.jsView file

Lines 676-716javascript

676 }

677 /** 获取激活技能的 prompt 内容（null 表示无激活技能） */

678 getActivePromptContent() {

679 return this.activeSkill?.content ?? null;

680 }

681 /** 获取激活技能的工具白名单 Set（null 表示无限制） */

682 getActiveToolFilter() {

683 if (

dist/wasm/tree-sitter-go.wasmView file

•path = dist/wasm/tree-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/wasm/tree-sitter-go.wasmView on unpkg

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = jinzd-ai-cli@0.4.220 matchedIdentity = npm:amluemQtYWktY2xp:0.4.220 similarity = 0.975 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

Source & flagged code

10 flagged · loading source

dist/web/client/vendor/highlight.min.jsView file

132;const e=this.regexes.map((e=>e[1]));this.matcherRe=n(h(e,{joinWith:"|" L133: }),!0),this.lastIndex=0}exec(e){this.matcherRe.lastIndex=this.lastIndex L134: ;const n=this.matcherRe.exec(e);if(!n)return null

High

Child Process

Package source references child process execution.

dist/web/client/vendor/highlight.min.jsView on unpkg · L132

dist/electron-server.jsView file

High

Shell

Package source references shell execution.

dist/electron-server.jsView on unpkg · L729

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/electron-server.jsView on unpkg · L89

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

dist/electron-server.jsView on unpkg · L64

64import express from "express"; L65: import { createServer } from "http"; L66: import { WebSocketServer } from "ws"; ... L250: denyPorts: z.array(z.number().int().min(1).max(65535)).default([]), L251: allowPrivateNetwork: z.boolean().default(false), L252: tools: z.object({ ... L404: if (fixedEnvVar && fixedEnvVar !== dynamicEnvVar) { L405: const fixedVal = process.env[fixedEnvVar]; L406: const dynVal = process.env[dynamicEnvVar]; L407: if (fixedVal && dynVal && fixedVal !== dynVal) { L408: process.stderr.write(`[warn] env var collision: ${fixedEnvVar} and ${dynamicEnvVar} have different values for provider "${providerId}". Using ${fixedEnvVar}. L409: `);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/electron-server.jsView on unpkg · L64

dist/web/client/vendor/tailwind.jsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/web/client/vendor/tailwind.jsView on unpkg · L1

dist/chunk-VHY6NVMQ.jsView file

27{ kind: "anthropic-key", regex: /(sk-ant-[a-zA-Z0-9_-]{90,})/g }, L28: // L6 (v0.4.108): Zhipu / GLM API keys — `<24+ hex/base64-ish>.<32+>` L29: // Two segments separated by a dot, each safely identifiable by length ... L52: { kind: "bearer", regex: /\b(Authorization:\s*Bearer\s+)([a-zA-Z0-9_\-.=]{20,500})/g }, L53: // Private key PEM blocks — catch the header+footer together L54: { kind: "private-key", regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g } ... L135: function memoryIndexDir() { L136: return path.join(os.homedir(), ".aicli", MEMORY_DIR_NAME); L137: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-VHY6NVMQ.jsView on unpkg · L27

dist/chunk-BYQEWWA4.jsView file

696package = jinzd-ai-cli; repositoryIdentity = ai-cli; dependency = undici L696: try { L697: const { ProxyAgent, setGlobalDispatcher } = await import("undici"); L698: setGlobalDispatcher(new ProxyAgent({ uri: proxyUrl }));

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/chunk-BYQEWWA4.jsView on unpkg · L696

dist/wasm/tree-sitter-go.wasmView file

•path = dist/wasm/tree-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/wasm/tree-sitter-go.wasmView on unpkg

dist/index.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

Findings

6 High6 Medium7 Low

HighChild Processdist/web/client/vendor/highlight.min.js

HighShelldist/electron-server.js

HighRemote Agent Bridgedist/electron-server.js

HighCopied Package Dependency Bridgedist/chunk-BYQEWWA4.js

HighSpawned Bundled Service Listenerdist/electron-server.js

HighPrevious Version Dangerous Deltadist/index.js

MediumDynamic Requiredist/web/client/vendor/tailwind.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/electron-server.js

MediumShips Wasm Moduledist/wasm/tree-sitter-go.wasm

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/chunk-VHY6NVMQ.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

10 flagged

dist/web/client/vendor/highlight.min.jsView file

Lines 112-152javascript

112e.scope&&"object"==typeof e.scope&&null!==e.scope&&(e.beginScope=e.scope,

113delete e.scope)})(e),"string"==typeof e.beginScope&&(e.beginScope={

114_wrap:e.beginScope}),"string"==typeof e.endScope&&(e.endScope={_wrap:e.endScope

115}),(e=>{if(Array.isArray(e.begin)){

116if(e.skip||e.excludeBegin||e.returnBegin)throw K("skip, excludeBegin, returnBegin not compatible with beginScope: {}"),

117G

118;if("object"!=typeof e.beginScope||null===e.beginScope)throw K("beginScope must be object"),

119G;Z(e,e.begin,{key:"beginScope"}),e.begin=h(e.begin,{joinWith:""})}})(e),(e=>{

120if(Array.isArray(e.end)){

121if(e.skip||e.excludeEnd||e.returnEnd)throw K("skip, excludeEnd, returnEnd not compatible with endScope: {}"),

122G

123;if("object"!=typeof e.endScope||null===e.endScope)throw K("endScope must be object"),

124G;Z(e,e.end,{key:"endScope"}),e.end=h(e.end,{joinWith:""})}})(e)}function Q(e){

125function n(n,t){

126return RegExp(c(n),"m"+(e.case_insensitive?"i":"")+(e.unicodeRegex?"u":"")+(t?"g":""))

127}class t{constructor(){

128this.matchIndexes={},this.regexes=[],this.matchAt=1,this.position=0}

129addRule(e,n){

130n.position=this.position++,this.matchIndexes[this.matchAt]=n,this.regexes.push([n,e]),

131this.matchAt+=p(e)+1}compile(){0===this.regexes.length&&(this.exec=()=>null)

132;const e=this.regexes.map((e=>e[1]));this.matcherRe=n(h(e,{joinWith:"|"

133}),!0),this.lastIndex=0}exec(e){this.matcherRe.lastIndex=this.lastIndex

134;const n=this.matcherRe.exec(e);if(!n)return null

High

Child Process

Package source references child process execution.

dist/web/client/vendor/highlight.min.jsView on unpkg · L132

135;const t=n.findIndex(((e,n)=>n>0&&void 0!==e)),a=this.matchIndexes[t]

136;return n.splice(0,t),Object.assign(n,a)}}class i{constructor(){

137this.rules=[],this.multiRegexes=[],

138this.count=0,this.lastIndex=0,this.regexIndex=0}getMatcher(e){

139if(this.multiRegexes[e])return this.multiRegexes[e];const n=new t

140;return this.rules.slice(e).forEach((([e,t])=>n.addRule(e,t))),

141n.compile(),this.multiRegexes[e]=n,n}resumingScanAtSamePosition(){

142return 0!==this.regexIndex}considerAll(){this.regexIndex=0}addRule(e,n){

143this.rules.push([e,n]),"begin"===n.type&&this.count++}exec(e){

144const n=this.getMatcher(this.regexIndex);n.lastIndex=this.lastIndex

145;let t=n.exec(e)

146;if(this.resumingScanAtSamePosition())if(t&&t.index===this.lastIndex);else{

147const n=this.getMatcher(0);n.lastIndex=this.lastIndex+1,t=n.exec(e)}

148return t&&(this.regexIndex+=t.position+1,

149this.regexIndex===this.count&&this.considerAll()),t}}

150if(e.compilerExtensions||(e.compilerExtensions=[]),

151e.contains&&e.contains.includes("self"))throw Error("ERR: contains `self` is not supported at the top-level of a language. See documentation.")

152;return e.classNameAliases=a(e.classNameAliases||{}),function t(r,s){const o=r

dist/electron-server.jsView file

High

Shell

Package source references shell execution.

dist/electron-server.jsView on unpkg · L729

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/electron-server.jsView on unpkg · L89

dist/web/client/vendor/tailwind.jsView file

Lines 1-21javascript

dist/chunk-VHY6NVMQ.jsView file

Lines 7-47javascript

7 atomicWriteFileSync

8} from "./chunk-6BUTA5VW.js";

10// src/memory/chat-index.ts

11import fs from "fs";

12import path from "path";

13import os from "os";

14import crypto from

dist/chunk-BYQEWWA4.jsView file

Lines 676-716javascript

676 }

677 /** 获取激活技能的 prompt 内容（null 表示无激活技能） */

678 getActivePromptContent() {

679 return this.activeSkill?.content ?? null;

680 }

681 /** 获取激活技能的工具白名单 Set（null 表示无限制） */

682 getActiveToolFilter() {

683 if (

dist/wasm/tree-sitter-go.wasmView file

•path = dist/wasm/tree-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/wasm/tree-sitter-go.wasmView on unpkg

dist/index.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg