registry / kixparadigm-en / 1.3.7

kixparadigm-en@1.3.7

⚠ Under review

kixparadigm-en — English edition of the kix paradigm preset for DeepSeek Harness: resident cognition layer (EN) + kixpower multi-agent orchestration, one-command import (preset + vision-bridge + guard plugins)

Static Scan Results

scanned 19d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 22 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 31 file(s), 756 KB of source, external domains: 127.0.0.1, a.b, api.github.com, evil.example.com, example.com, github.com, open.bigmodel.cn, x.example

Source & flagged code

15 flagged

package.jsonView file

Lines 12-52json

12 "ai-agent",

13 "deepseek-harness",

14 "dsh",

15 "agent-preset",

16 "multi-agent",

17 "coding-agent",

18 "english"

19 ],

20 "bin": {

21 "kixparadigm-en": "bin/kixparadigm-en.js"

22 },

23 "files": [

24 "bin/",

25 "scripts/",

26 "preset-classic-en/",

27 "bridge/",

28 "README.md",

29 "LICENSE"

30 ],

31 "scripts": {

32 "postinstall": "node scripts/install-lib.js --quiet",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L32

33 "test:installer": "node --test scripts/install-lib.test.js",

34 "test:consistency": "node scripts/check-consistency.cjs",

35 "test:vision": "node --test bridge/test.js",

36 "test": "npm run test:installer && node scripts/check-consistency.cjs && node --test bridge/test.js && cd preset-classic-en/plugins && node --test"

37 },

38 "engines": {

39 "node": ">=20.16.0"

40 },

41 "kixparadigm": {

42 "variants": [

43 { "id": "kixparadigm-classic-en", "dir": "preset-classic-en" }

44 ],

45 "bridgeDir": "bridge"

46 },

47 "repository": {

48 "type": "git",

49 "github": "olicesx/kixparadigm",

50 "url": "git+https://github.com/olicesx/kixparadigm.git"

51 },

52 "bugs": {

scripts/install-lib.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

2'use strict'

3// kixparadigm — 跨平台安装器（preset 同步 + vision-bridge 挂载 + 卸载/自检）

4//

5// 由 npm postinstall 自动调用（--quiet），也可手动执行：

6// kixparadigm install [--preset-only] 一键导入（preset + vision-bridge）

7// kixparadigm uninstall 卸载本包安装的全部内容

8// kixparadigm doctor 自检安装状态

9// kixparadigm copilot （可选）导入 VS Code Copilot 侧

10//

bin/kixparadigm-en.jsView file

Lines 1-5javascript

1#!/usr/bin/env node

2'use strict'

3// kixparadigm-en CLI — English edition, installs the kixparadigm-en preset

4require('../scripts/install-lib.js').cli(process.argv.slice(2))

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/kixparadigm-en.jsView on unpkg · L3

preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1View file

•path = preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1 kind = payload_in_excluded_dir sizeBytes = 55675 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1View on unpkg

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.9 matchedPath = preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1 matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1View on unpkg

•path = preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1 kind = build_helper sizeBytes = 55675 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1

preset-classic-en/plugins/kix-discipline.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

preset-classic-en/plugins/kix-discipline.js#virtual:normalized:round1View on unpkg

bridge/index.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.9 matchedPath = bridge/index.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/index.jsView on unpkg

bridge/test.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.9 matchedPath = bridge/test.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/test.jsView on unpkg

preset-classic-en/plugins/kix-browser.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.9 matchedPath = preset-classic-en/plugins/kix-browser.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

preset-classic-en/plugins/kix-browser.jsView on unpkg

preset-classic-en/plugins/kix-commands.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.9 matchedPath = preset-classic-en/plugins/kix-commands.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

preset-classic-en/plugins/kix-commands.jsView on unpkg

preset-classic-en/plugins/kix-browser.test.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.9 matchedPath = preset-classic-en/plugins/kix-browser.test.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

preset-classic-en/plugins/kix-browser.test.jsView on unpkg

preset-classic-en/plugins/kix-guards.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = kixparadigm-en@1.3.13 matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.13 similarity = 0.538 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

preset-classic-en/plugins/kix-guards.jsView on unpkg

Source & flagged code

15 flagged · loading source

package.jsonView file

kixparadigm-en@1.3.7

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code