registry / kaijibot / 2026.7.4

kaijibot@2026.7.4

⚠ Under review

Proactive cognitive AI assistant — learns your interests, pushes insights, evolves skills autonomously

Static Scan Results

scanned 4mo ago · by rust-scanner

Static analysis flagged 27 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

Manifest

WildcardDependency

scanned 2,549 file(s), 21.7 MB of source, external domains: 127.0.0.1, 169.254.169.254, accounts.google.com, accounts.openai.com, ai-gateway.vercel.sh, ai.azure.com, aiplatform.googleapis.com, aistudio.google.com, angular.io, api.ant-ling.com, api.anthropic.com, api.arcee.ai, api.cerebras.ai, api.chutes.ai, api.cloudflare.com, api.copilot.example, api.deepinfra.com, api.deepseek.com, api.dev.runwayml.com, api.exa.ai, api.example.com, api.fireworks.ai, api.github.com, api.gradium.ai, api.groq.com, api.individual.githubcopilot.com, api.kilo.ai, api.kimi.com, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.openai.com, api.perplexity.ai, api.push.apple.com, api.sandbox.push.apple.com, api.stepfun.ai, api.stepfun.com, api.tavily.com, api.together.ai, api.together.xyz, api.venice.ai, api.voyageai.com, api.x.ai, api.xiaomimimo.com, api.z.ai, ark.ap-southeast.bytepluses.com, ark.cn-beijing.volces.com, auth.openai.com

Oversized source lightweight scan

dist/extensions/diffs/assets/viewer-runtime.js9.41 MB file, sampled 256 KB

Source & flagged code

15 flagged

package.jsonView file

•scripts.postinstall = node scripts/postinstall-bundled-plugins.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/control-ui/assets/index-T9pDybqW.jsView file

973contains invisible/control Unicode U+200D (zero width joiner) `}var Ky=50,qy=class{constructor(){this.items=[],this.cursor=-1}push(e){let t=e.trim();t&&this.items[this.items.length-1]!==t&&(this.items.push(t),this.items.length>Ky&&this.items.shift(),this.cursor=-1)}up(){return this.items.length===0?

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/control-ui/assets/index-T9pDybqW.jsView on unpkg · L973

974`);return F(t,-1)?``:e.slice(t)}function BT(e){return e.replace(/^[ \t\r\f\v]+/,``)}function VT(e){let t=BT(e);return t.startsWith(IT)?VT(RT(t.slice(2))):t.startsWith(FT)?VT(zT(t.s... L975: `)?UT(e,VT(t)):e.startsWith(` `)?UT(e,t):UT(e,HT(t))}[...[...NT,`_`,`$`],...PT],[...PT];function GT(e){return F(e,``)?[]:[e.slice(0,1),e.slice(1)]}function KT(e,t){return I(e,(e,n)... L976: \r `.includes(e[o]);)o++};return l()};e.parse=o}))(),cP=new Set([`"`,`\\`,`/`,`b`,`f`,`n`,`r`,`t`,`u`]);function lP(e){let t=e.codePointAt(0);return t!==void 0&&t>=0&&t<=31}functio...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/control-ui/assets/index-T9pDybqW.jsView on unpkg · L974

dist/completion-cli-BPHhye7n.jsView file

2import { d as pathExists } from "./utils-BZpzHE8U.js"; L3: import { c as routeLogsToStderr } from "./subsystem-vYBF7nSn.js"; L4: import { t as formatDocsLink } from "./links-DG6HlfoL.js"; ... L42: "bash", L43: "powershell", L44: "fish" ... L48: } L49: function resolveShellFromEnv(env = process.env) { L50: const shellPath = normalizeOptionalString(env.SHELL) ?? ""; ... L63: function resolveCompletionCacheDir(env = process.env) { L64: const stateDir = resolveStateDir(env, os.homedir); L65: return path.join(stateDir, "completions");

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/completion-cli-BPHhye7n.jsView on unpkg · L2

skills/video-frames/scripts/frame.shView file

•path = skills/video-frames/scripts/frame.sh kind = build_helper sizeBytes = 1347 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/video-frames/scripts/frame.shView on unpkg

dist/extensions/diffs/assets/viewer-runtime.jsView file

•path = [redacted]-runtime.js kind = oversized_source_file sizeBytes = 9867326 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/extensions/diffs/assets/viewer-runtime.jsView on unpkg

docs/install/macos-vm.mdView file

219patternName = generic_password severity = medium line = 219 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/install/macos-vm.md

docs/install/macos-vm.mdView on unpkg · L219

docs/help/faq.mdView file

2691patternName = generic_password severity = medium line = 2691 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/help/faq.md

docs/help/faq.mdView on unpkg · L2691

docs/gateway/tailscale.mdView file

90patternName = generic_password severity = medium line = 90 matchedText = auth: { ..." },

Medium

Secret Pattern

Hardcoded password in docs/gateway/tailscale.md

docs/gateway/tailscale.mdView on unpkg · L90

docs/gateway/configuration-reference.mdView file

714patternName = generic_password severity = medium line = 714 matchedText = password...D}",

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L714

2843patternName = generic_password severity = medium line = 2843 matchedText = // passw...WORD

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L2843

2870patternName = generic_password severity = medium line = 2870 matchedText = // passw...rd",

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L2870

docs/channels/bluebubbles.mdView file

44patternName = generic_password severity = medium line = 44 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/channels/bluebubbles.md

docs/channels/bluebubbles.mdView on unpkg · L44

docs/channels/matrix.mdView file

140patternName = generic_password severity = medium line = 140 matchedText = password...cret

Medium

Secret Pattern

Hardcoded password in docs/channels/matrix.md

docs/channels/matrix.mdView on unpkg · L140

docs/channels/irc.mdView file

203patternName = generic_password severity = medium line = 203 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/channels/irc.md

docs/channels/irc.mdView on unpkg · L203

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-bundled-plugins.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/control-ui/assets/index-T9pDybqW.jsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/control-ui/assets/index-T9pDybqW.jsView on unpkg · L973

Findings

1 Critical2 High17 Medium7 Low

CriticalTrojan Source Unicodedist/control-ui/assets/index-T9pDybqW.js

HighInstall Time Lifecycle Scriptspackage.json

HighOversized Source Filedist/extensions/diffs/assets/viewer-runtime.js

MediumDynamic Requiredist/control-ui/assets/index-T9pDybqW.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/completion-cli-BPHhye7n.js

MediumProtestware

MediumShips Build Helperskills/video-frames/scripts/frame.sh

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

MediumSecret Patterndocs/install/macos-vm.md

MediumSecret Pattern

Affected versions and remediation

This report applies to kaijibot@2026.7.4.

See all versions of kaijibot for other recorded verdicts.

Review the evidence and your use of kaijibot@2026.7.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-07-04 12:49:56.336Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.