registry / madarx / 2.63.3

madarx@2.63.3

⚠ Under review

Madarx OS — Next.js product with SQLite-backed runtime, scheduled cron daemon, and approval-gated local runners.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 20 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,194 file(s), 8.70 MB of source, external domains: 127.0.0.1, a.klaviyo.com, accounts.google.com, analyticsdata.googleapis.com, api-inference.huggingface.co, api.agentmail.to, api.amadeus.com, api.anthropic.com, api.arcads.ai, api.aviationstack.com, api.coingecko.com, api.company-information.service.gov.uk, api.creatify.ai, api.deepseek.com, api.dev.runwayml.com, api.elevenlabs.io, api.firecrawl.dev, api.fireworks.ai, api.flair.ai, api.github.com, api.groq.com, api.hautech.ai, api.hedra.com, api.heygen.com, api.hubapi.com, api.ideogram.ai, api.klingai.com, api.ltx.studio, api.magnific.ai, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.omnisend.com, api.openai.com, api.openmagic.ai, api.opensanctions.org, api.osv.dev, api.piccopilot.com, api.pika.art, api.rendernet.ai, api.replicate.com, api.resend.com, api.sakana.ai, api.search.brave.com, api.slack.com, api.supabase.com, api.telegram.org, api.together.xyz, api.vercel.com, api.viggle.ai

Source & flagged code

10 flagged

package.jsonView file

Lines 33-73json

33 "jsconfig.json",

34 "components.json",

35 "postcss.config.mjs",

36 ".next/standalone/",

37 ".next/static/",

38 "CLAUDE.md",

39 "CHANGELOG.md",

40 "RELEASE_NOTES.md"

41 ],

42 "scripts": {

43 "predev": "node --no-warnings scripts/clean-sync-dups.mjs",

44 "dev": "next dev --webpack -p 8787 -H 127.0.0.1",

45 "madarx": "node bin/madarx.mjs",

46 "prepublishOnly": "npm run build && node --no-warnings scripts/prepack-guard.mjs && node --no-warnings scripts/assert-no-dev-mode-leak.mjs",

47 "prepack": "node --no-warnings scripts/prepack-guard.mjs",

48 "clean:dist-data": "node --no-warnings scripts/prepack-guard.mjs",

49 "build:cloud-schema": "node --no-warnings scripts/build-cloud-schema.mjs",

50 "prebuild": "node --no-warnings scripts/clean-sync-dups.mjs && node --no-warnings scripts/build-cloud-schema.mjs",

51 "build": "NODE_OPTIONS=--no-warnings next build --webpack",

52 "postbuild": "node --no-warnings scripts/postbuild-standalone.mjs",

53 "postinstall": "node --no-warnings scripts/postinstall-splash.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L53

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L53

54 "splash": "MADARX_FORCE_SPLASH=1 FORCE_COLOR=1 node --no-warnings scripts/postinstall-splash.mjs",

55 "banner": "FORCE_COLOR=1 node --no-warnings scripts/preview-banner.mjs",

56 "start": "node --no-warnings scripts/start-standalone.mjs",

57 "start:next": "next start -p 8787 -H 127.0.0.1",

58 "stop": "bash scripts/kill-madarx.sh",

59 "stop:force": "bash scripts/kill-madarx.sh --force",

60 "test": "node --no-warnings --test tests/*.test.js",

61 "typecheck": "tsc --noEmit -p tsconfig.typecheck.json",

62 "coverage": "node --no-warnings --test --experimental-test-coverage tests/*.test.js",

63 "coverage:critical": "node --no-warnings --test --experimental-test-coverage --test-coverage-include=lib/tools/safety.js --test-coverage-include=lib/migrations/** --test-coverage-include=lib/security/** --test-coverage-include=lib/observability/** --test-coverage-include=lib/ssrf-policy.js --test-coverage-include=lib/audit-chain.js --test-coverage-include=lib/validation/** --test-coverage-include=lib/mcp/** --test-coverage-include=lib/agent-core/** --test-coverage-include=lib/process/** --test-coverage-include=lib/tools/adapters/** --test-coverage-lines=80 --test-coverage-functions=60 --te ...

64 "daemon": "node --no-warnings --env-file-if-exists=.env.local scripts/cron-daemon.mjs",

65 "daemon:once": "CRON_DAEMON_ONCE=1 node --no-warnings --env-file-if-exists=.env.local scripts/cron-daemon.mjs",

66 "heartbeat:worker": "node --no-warnings --env-file-if-exists=.env.local scripts/heartbeat-worker.mjs",

67 "heartbeat:once": "HEARTBEAT_WORKER_ONCE=1 node --no-warnings --env-file-if-exists=.env.local scripts/heartbeat-worker.mjs",

68 "hermes:job": "node --no-warnings --env-file-if-exists=.env.local scripts/hermes-job-runner.mjs",

69 "whatsapp:bridge": "node --no-warnings --env-file-if-exists=.env.local scripts/whatsapp-daemon.mjs",

70 "whatsapp:once": "WHATSAPP_DAEMON_ONCE=1 node --no-warnings --env-file-if-exists=.env.local scripts/whatsapp-daemon.mjs",

71 "whatsapp:reset": "node --no-warnings --env-file-if-exists=.env.local scripts/whatsapp-reset.mjs",

72 "inbox:daemon": "node --no-warnings --env-file-if-exists=.env.local scripts/inbox-daemon.mjs",

73 "inbox:once": "INBOX_DAEMON_ONCE=1 node --no-warnings --env-file-if-exists=.env.local scripts/inbox-daemon.mjs",

Long lines were clipped for display.

app/api/fs/pick-folder/route.jsView file

Lines 1-21javascript

1import { spawn } from 'node:child_process';

2import os from 'node:os';

High

Child Process

Package source references child process execution.

app/api/fs/pick-folder/route.jsView on unpkg · L1

3import fs from 'node:fs';

4import path from 'node:path';

scripts/google-oauth-mint.mjsView file

Lines 1-40javascript

1#!/usr/bin/env node

2// Mint a Google OAuth refresh token for the Gmail/Calendar/Drive read scopes.

3//

4// Zero dependencies. Starts a localhost loopback server, opens the Google

5// consent screen in your browser, catches the authorization code on the

6// redirect, exchanges it for tokens, and prints the refresh token.

7//

8// Usage:

9// node scripts/google-oauth-mint.mjs # embedded madarX client (when shipped)

10// GOOGLE_OAUTH_CLIENT_ID=... GOOGLE_OAUTH_CLIENT_SECRET=... node scripts/google-oauth-mint.mjs

11// node scripts/google-oauth-mint.mjs --client-id=... --client-secret=...

lib/artifact-format.jsView file

Lines 1-29javascript

1import { micromark } from 'micromark';

2import { gfm, gfmHtml } from 'micromark-extension-gfm';

3import { getDesignStyle } from './agent-config.js';

4import { getBrandProfile } from './brand.js';

5import { resolveColorRoles, resolveFontRoles, validateCssColor } from './brand-tokens.js';

.next/standalone/scripts/hermes-command.pyView file

•path = .next/standalone/scripts/hermes-command.py kind = payload_in_excluded_dir sizeBytes = 5803 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/standalone/scripts/hermes-command.pyView on unpkg

•path = .next/standalone/scripts/hermes-command.py kind = build_helper sizeBytes = 5803 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.next/standalone/scripts/hermes-command.pyView on unpkg

.next/standalone/.next/static/media/99dcf268bda04fe5-s.woff2View file

•path = .next/standalone/.[redacted]-s.woff2 kind = high_entropy_blob sizeBytes = 8848 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/standalone/.next/static/media/99dcf268bda04fe5-s.woff2View on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node --no-warnings scripts/postinstall-splash.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node --no-warnings scripts/postinstall-splash.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

app/api/fs/pick-folder/route.jsView file

1import { spawn } from 'node:child_process'; L2: import os from 'node:os';

High

Child Process

Package source references child process execution.

app/api/fs/pick-folder/route.jsView on unpkg · L1

scripts/google-oauth-mint.mjsView file

20L21: import http from 'node:http'; L22: import { spawn } from 'node:child_process'; L23: import { randomBytes } from 'node:crypto'; ... L33: L34: let CLIENT_ID = arg('client-id') || process.env.GOOGLE_OAUTH_CLIENT_ID || process.env.GOOGLE_CLIENT_ID; L35: let CLIENT_SECRET = arg('client-secret') || process.env.GOOGLE_OAUTH_CLIENT_SECRET || process.env.GOOGLE_CLIENT_SECRET; ... L55: 'https://accounts.google.com/o/oauth2/v2/auth?' + L56: new URLSearchParams({ L57: client_id: CLIENT_ID, ... L68: function openBrowser(url) { L69: const cmd = process.platform === 'darwin' ? 'open'

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

scripts/google-oauth-mint.mjsView on unpkg · L20

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/google-oauth-mint.mjsView on unpkg · L20

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/google-oauth-mint.mjsView on unpkg · L20

lib/artifact-format.jsView file

9contains invisible/control Unicode U+200D (zero width joiner) const ZERO_WIDTH_JOINER = /<U+200D>/g;

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

lib/artifact-format.jsView on unpkg · L9

.next/standalone/scripts/hermes-command.pyView file

•path = .next/standalone/scripts/hermes-command.py kind = payload_in_excluded_dir sizeBytes = 5803 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/standalone/scripts/hermes-command.pyView on unpkg

•path = .next/standalone/scripts/hermes-command.py kind = build_helper sizeBytes = 5803 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.next/standalone/scripts/hermes-command.pyView on unpkg

.next/standalone/.next/static/media/99dcf268bda04fe5-s.woff2View file

•path = .next/standalone/.[redacted]-s.woff2 kind = high_entropy_blob sizeBytes = 8848 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/standalone/.next/static/media/99dcf268bda04fe5-s.woff2View on unpkg

Findings

2 Critical7 High6 Medium5 Low

CriticalCommand Output Exfiltrationscripts/google-oauth-mint.mjs

CriticalTrojan Source Unicodelib/artifact-format.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processapp/api/fs/pick-folder/route.js

HighShell

HighSame File Env Network Executionscripts/google-oauth-mint.mjs

HighSandbox Evasion Gated Capabilityscripts/google-oauth-mint.mjs

HighShips High Entropy Blob.next/standalone/.next/static/media/99dcf268bda04fe5-s.woff2

HighPayload In Excluded Dir.next/standalone/scripts/hermes-command.py

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Require

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helper.next/standalone/scripts/hermes-command.py

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings