1Source sends the broad process environment to a literal external destination.
L1: #!/usr/bin/env node
L2: var P4=Object.create;var vI=Object.defineProperty;var q4=Object.getOwnPropertyDescriptor;var O4=Object.getOwnPropertyNames;var F4=Object.getPrototypeOf,A4=Object.prototype.hasOwnPr...
L3: `);return}typeof t=="string"?process.stdout.write(t+`
...
L7: `),r&&process.stderr.write(`Hint: ${r}
L8: `)}};SI.exports={CoderContext:Gf,DEFAULT_BASE_URL:wI}});var Bf=q((iIe,_I)=>{"use strict";function j4(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function z4({defaults...
L9: `);xI.exports={CODER_RUNTIME_PROMPT:N4}});var va=q((cIe,qI)=>{"use strict";var M4=require("os"),qr=require("path");function $o(){let o=process.env.COWORK_HOME||process.env.CODER_DA...
L10: `;try{s.write(d),br&&(br
CriticalHardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/coder.jsView on unpkg · L1 30\u671F\u671B ${r.sha256}
L31: \u5B9E\u9645 ${s}`),!1)}_readInstalledAppVersion(){let t=ot.join(Bs,"Contents","Info.plist");if(!Oe.existsSync(t))return null;try{return tg("plutil",["-extract","CFBundleShortVersi...
L32: entry=${a}
...
L35: `;Oe.writeFileSync(`${g}.conf`,d),Oe.writeFileSync(ot.join(this.userData,"claude-code",t,".verified"),""),process.env.CODER_DEBUG&&console.log(`[claude app] shim \u5B89\u88C5 -> ${...
L36: [debug]`),console.log(` claude.app: ${Bs}`),console.log(` requiredVersion: ${t||"(\u63A2\u6D4B\u5931\u8D25)"}`),console.log(` deploymentMode: ${r||"(\u672A\u8BBE\u7F6E)"}`...
L37: \u671F\u671B ${r.sha256}
...
L45: \u5B9E\u9645 ${c}`),1;process.env.CODER_DEBUG&&console.error("[coder app] sha256 \u6821\u9A8C\u901A\u8FC7")}let d=rn("hdiutil",["attach",n,"-nob
CriticalRemote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/coder.jsView on unpkg · L30 1Trigger-reachable chain: manifest.main -> dist/coder.js
L1: #!/usr/bin/env node
L2: var P4=Object.create;var vI=Object.defineProperty;var q4=Object.getOwnPropertyDescriptor;var O4=Object.getOwnPropertyNames;var F4=Object.getPrototypeOf,A4=Object.prototype.hasOwnPr...
L3: `);return}typeof t=="string"?process.stdout.write(t+`
...
L7: `),r&&process.stderr.write(`Hint: ${r}
L8: `)}};SI.exports={CoderContext:Gf,DEFAULT_BASE_URL:wI}});var Bf=q((iIe,_I)=>{"use strict";function j4(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function z4({defaults...
L9: `);xI.exports={CODER_RUNTIME_PROMPT:N4}});var va=q((cIe,qI)=>{"use strict";var M4=require("os"),qr=require("path");function $o(){let o=process.env.COWORK_HOME||process.env.CODER_DA...
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/coder.jsView on unpkg · L1 7`),r&&process.stderr.write(`Hint: ${r}
L8: `)}};SI.exports={CoderContext:Gf,DEFAULT_BASE_URL:wI}});var Bf=q((iIe,_I)=>{"use strict";function j4(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function z4({defaults...
L9: `);xI.exports={CODER_RUNTIME_PROMPT:N4}});var va=q((cIe,qI)=>{"use strict";var M4=require("os"),qr=require("path");function $o(){let o=process.env.COWORK_HOME||process.env.CODER_DA...
HighChild Process
Package source references child process execution.
dist/coder.jsView on unpkg · L7 1#!/usr/bin/env node
L2: var P4=Object.create;var vI=Object.defineProperty;var q4=Object.getOwnPropertyDescriptor;var O4=Object.getOwnPropertyNames;var F4=Object.getPrototypeOf,A4=Object.prototype.hasOwnPr...
L3: `);return}typeof t=="string"?process.stdout.write(t+`
...
L7: `),r&&process.stderr.write(`Hint: ${r}
L8: `)}};SI.exports={CoderContext:Gf,DEFAULT_BASE_URL:wI}});var Bf=q((iIe,_I)=>{"use strict";function j4(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function z4({defaults...
L9: `);xI.exports={CODER_RUNTIME_PROMPT:N4}});var va=q((cIe,qI)=>{"use strict";var M4=require("os"),qr=require("path");function $o(){let o=process.env.COWORK_HOME||process.env.CODER_DA...
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/coder.jsView on unpkg · L1 1#!/usr/bin/env node
L2: var P4=Object.create;var vI=Object.defineProperty;var q4=Object.getOwnPropertyDescriptor;var O4=Object.getOwnPropertyNames;var F4=Object.getPrototypeOf,A4=Object.prototype.hasOwnPr...
L3: `);return}typeof t=="string"?process.stdout.write(t+`
...
L7: `),r&&process.stderr.write(`Hint: ${r}
L8: `)}};SI.exports={CoderContext:Gf,DEFAULT_BASE_URL:wI}});var Bf=q((iIe,_I)=>{"use strict";function j4(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function z4({defaults...
L9: `);xI.exports={CODER_RUNTIME_PROMPT:N4}});var va=q((cIe,qI)=>{"use strict";var M4=require("os"),qr=require("path");function $o(){let o=process.env.COWORK_HOME||process.env.CODER_DA...
L10: `;try{s.write(d),br&&(br.bytes+=Buffer.byteLength(d,"utf8"))}catch{}}function hh(o,t,r,a){let s=a3[o.t
HighHost Fingerprint Exfiltration
Source collects local host identity data and sends it to an external endpoint.
dist/coder.jsView on unpkg · L1 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/coder.js:
var P4=Object.create;var vI=Object.defineProperty;var q4=Object.getOwnPropertyDescriptor;var O4=Object.getOwnPropertyNames;var F4=Object.getPrototypeOf,A4=Object.prototype.hasOwnPr...
`)}};SI.exports={CoderContext:Gf,DEFAULT_BASE_URL:wI}});var Bf=q((iIe,_I)=>{"use strict";function j4(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function z4({defaults...
`))}_getBunPlatformPackage(){let t=process.platform,r=process.arch;return{"darwin-arm64":"@oven-sh/bun-darwin-aarch64","darwin-x64":"@oven-sh/bun-darwin-x64","linux-arm64":"@oven-s...
\u8BF7\u68C0\u67E5\u7F51\u7EDC\uFF1A${mh}`),1;let g=this._ensureClaudeAppIns
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/coder.jsView on unpkg 1#!/usr/bin/env node
L2: var P4=Object.create;var vI=Object.defineProperty;var q4=Object.getOwnPropertyDescriptor;var O4=Object.getOwnPropertyNames;var F4=Object.getPrototypeOf,A4=Object.prototype.hasOwnPr...
L3: `);return}typeof t=="string"?process.stdout.write(t+`
...
L7: `),r&&process.stderr.write(`Hint: ${r}
L8: `)}};SI.exports={CoderContext:Gf,DEFAULT_BASE_URL:wI}});var Bf=q((iIe,_I)=>{"use strict";function j4(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function z4({defaults...
L9: `);xI.exports={CODER_RUNTIME_PROMPT:N4}});var va=q((cIe,qI)=>{"use strict";var M4=require("os"),qr=require("path");function $o(){let o=process.env.COWORK_HOME||process.env.CODER_DA...
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/coder.jsView on unpkg · L1 1#!/usr/bin/env node
L2: var P4=Object.create;var vI=Object.defineProperty;var q4=Object.getOwnPropertyDescriptor;var O4=Object.getOwnPropertyNames;var F4=Object.getPrototypeOf,A4=Object.prototype.hasOwnPr...
L3: `);return}typeof t=="string"?process.stdout.write(t+`
...
L7: `),r&&process.stderr.write(`Hint: ${r}
L8: `)}};SI.exports={CoderContext:Gf,DEFAULT_BASE_URL:wI}});var Bf=q((iIe,_I)=>{"use strict";function j4(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function z4({defaults...
L9: `);xI.exports={CODER_RUNTIME_PROMPT:N4}});var va=q((cIe,qI)=>{"use strict";var M4=require("os"),qr=require("path");function $o(){let o=process.env.COWORK_HOME||process.env.CODER_DA...
L10: `;try{s.write(d),br&&(br.bytes+=Buffer.byteLength(d,"utf8"))}catch{}}function hh(o,t,r,a){let s=a3[o.t
HighSandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/coder.jsView on unpkg · L1 1951package = makecoder; repositoryIdentity = coder; dependency = commander
L1951: `).map(w=>w.replace(/^\s*[-*]\s*/,"").trim()).filter(w=>w.length>=4),v=0,b=0;for(let w of y){let S=oh.insertCandidate({sessionId:r,workspacePath:a,content:w,sourceFromSequence:g,so...
L1952: ${y.replace(v,"").trim()}`,{marker:v}).status==="saved"&&c++}}for(let f of g)nI.markPromoted(f);for(let f of d)nI.markDiscarded(f);return Jke.info(Xke,`promoted ${c}, deduped ${d.l...
L1953: `)),i.option("--format <fmt>","\u8F93\u51FA\u683C\u5F0F\uFF1Atext\uFF08\u9ED8\u8BA4\uFF09| json"),i.option("--apikey <key>","\u4E34\u65F6\u63D0\u4F9B API Key"),i.option("--install-...
HighCopied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/coder.jsView on unpkg · L1951 •Runtime or CLI code links a write operation to an explicit external AI-agent control path:
.stop_reason==="max_tokens"?"max_turns":"completed";default:break}return o.stop_reason==="max_tokens"?"max_turns":"completed"}function hq(){return process.env.coder_claude_stub?{cmd:process.execpath,args:[process.env.coder_claude_stub]}:{cmd:process.execpath,args:[process.argv[1]]}}async function*jq({sessionid:o,text:t,model:r,workspace:a,permissionmode:s,systemprompt:i,env:n={},resumeclisessionid:e,onclisessionid:g,onpermissionrequest:d,oninitcapabilities:m,mcpconfig:c,adddirs:f,allowedtools:y,providerenv:v,signal:b}){let w=hq();if(!w){yield cr("error","\u627e\u4e0d\u5230 coder \u53ef\u6267\u884c\u6587\u4ef6\uff0c\u8bf7\u786e\u8ba4\u5df2\u5b89\u88c5");return}let s=typeof d=="function",p=["claude","-
HighExternal Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/coder.jsView on unpkg 1Cross-file remote execution chain: dist/coder.js spawns dist/cowork.js; helper contains network access plus dynamic code execution.
L1: #!/usr/bin/env node
L2: var P4=Object.create;var vI=Object.defineProperty;var q4=Object.getOwnPropertyDescriptor;var O4=Object.getOwnPropertyNames;var F4=Object.getPrototypeOf,A4=Object.prototype.hasOwnPr...
L3: `);return}typeof t=="string"?process.stdout.write(t+`
...
L7: `),r&&process.stderr.write(`Hint: ${r}
L8: `)}};SI.exports={CoderContext:Gf,DEFAULT_BASE_URL:wI}});var Bf=q((iIe,_I)=>{"use strict";function j4(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function z4({defaults...
L9: `);xI.exports={CODER_RUNTIME_PROMPT:N4}});var va=q((cIe,qI)=>{"use strict";var M4=require("os"),qr=require("path");function $o(){let o=process.env.COWORK_HOME|
HighCross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/coder.jsView on unpkg · L1 1Trigger-reachable command-output exfiltration chain: manifest.main -> dist/coder.js
L1: #!/usr/bin/env node
L2: var P4=Object.create;var vI=Object.defineProperty;var q4=Object.getOwnPropertyDescriptor;var O4=Object.getOwnPropertyNames;var F4=Object.getPrototypeOf,A4=Object.prototype.hasOwnPr...
L3: `);return}typeof t=="string"?process.stdout.write(t+`
...
L7: `),r&&process.stderr.write(`Hint: ${r}
L8: `)}};SI.exports={CoderContext:Gf,DEFAULT_BASE_URL:wI}});var Bf=q((iIe,_I)=>{"use strict";function j4(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function z4({defaults...
L9: `);xI.exports={CODER_RUNTIME_PROMPT:N4}});var va=q((cIe,qI)=>{"use strict";var M4=require("os"),qr=require("path");function $o(){let o=process.env.COWORK_HOME||process.env.CODER_DA...
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/coder.jsView on unpkg · L1 1Trigger-reachable persistence chain: manifest.main -> dist/coder.js
L1: #!/usr/bin/env node
L2: var P4=Object.create;var vI=Object.defineProperty;var q4=Object.getOwnPropertyDescriptor;var O4=Object.getOwnPropertyNames;var F4=Object.getPrototypeOf,A4=Object.prototype.hasOwnPr...
L3: `);return}typeof t=="string"?process.stdout.write(t+`
...
L7: `),r&&process.stderr.write(`Hint: ${r}
L8: `)}};SI.exports={CoderContext:Gf,DEFAULT_BASE_URL:wI}});var Bf=q((iIe,_I)=>{"use strict";function j4(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function z4({defaults...
L9: `);xI.exports={CODER_RUNTIME_PROMPT:N4}});var va=q((cIe,qI)=>{"use strict";var M4=require("os"),qr=require("path");function $o(){let o=process.env.COWORK_HOME||process.env.CODER_DA...
L10: `;try{s.write(d),br&&(br.bytes+=Bu
HighTrigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/coder.jsView on unpkg · L1 •stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 6
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/coder.jsView on unpkg 1#!/usr/bin/env node
L2: var P4=Object.create;var vI=Object.defineProperty;var q4=Object.getOwnPropertyDescriptor;var O4=Object.getOwnPropertyNames;var F4=Object.getPrototypeOf,A4=Object.prototype.hasOwnPr...
L3: `);return}typeof t=="string"?process.stdout.write(t+`
...
L7: `),r&&process.stderr.write(`Hint: ${r}
L8: `)}};SI.exports={CoderContext:Gf,DEFAULT_BASE_URL:wI}});var Bf=q((iIe,_I)=>{"use strict";function j4(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function z4({defaults...
L9: `);xI.exports={CODER_RUNTIME_PROMPT:N4}});var va=q((cIe,qI)=>{"use strict";var M4=require("os"),qr=require("path");function $o(){let o=process.env.COWORK_HOME||process.env.CODER_DA...
L10: `;try{s.write(d),br&&(br.bytes+=Buffer.byteLength(d,"utf8"))}catch{}}function hh(o,t,r,a){let s=a3[o.t
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/coder.jsView on unpkg · L1 1#!/usr/bin/env node
L2: var P4=Object.create;var vI=Object.defineProperty;var q4=Object.getOwnPropertyDescriptor;var O4=Object.getOwnPropertyNames;var F4=Object.getPrototypeOf,A4=Object.prototype.hasOwnPr...
L3: `);return}typeof t=="string"?process.stdout.write(t+`
...
L7: `),r&&process.stderr.write(`Hint: ${r}
L8: `)}};SI.exports={CoderContext:Gf,DEFAULT_BASE_URL:wI}});var Bf=q((iIe,_I)=>{"use strict";function j4(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function z4({defaults...
L9: `);xI.exports={CODER_RUNTIME_PROMPT:N4}});var va=q((cIe,qI)=>{"use strict";var M4=require("os"),qr=require("path");function $o(){let o=process.env.COWORK_HOME||process.env.CODER_DA...
L10: `;try{s.write(d),br&&(br.bytes+=Buffer.byteLength(d,"utf8"))}catch{}}function hh(o,t,r,a){let s=a3[o.t
LowWeak Crypto
Package source references weak cryptographic algorithms.
dist/coder.jsView on unpkg · L1