registry / memgrep / 1.5.4

memgrep@1.5.4

Local agent memory, coding loop, Cursor from Telegram, scheduled playbooks, and MCP tools.

Static Scan Results

scanned 58m ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 149 file(s), 613 KB of source, external domains: 127.0.0.1, api.openai.com, api.producthunt.com, api.telegram.org, app.posthog.com, cloudresourcemanager.googleapis.com, compute.googleapis.com, console.neon.tech, cursor.com, github.com, id.atlassian.com, logging.googleapis.com, t.me, www.googleapis.com, your-domain.atlassian.net

Source & flagged code

1 flagged

dist/telegram/launchd.jsView file

Lines 1-23javascript

1import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';

2import { homedir } from 'node:os';

3import path from 'node:path';

4import { spawnSync } from 'node:child_process';

5import { fileURLToPath } from 'node:url';

6import { defaultHome } from '../memory/store.js';

7import { sanitizeTelegramProfile } from './config.js';

8export const LAUNCHD_LABEL = 'com.memgrep.telegram';

9function escapeXml(value) {

10 return value

11 .replace(/&/g, '&')

12 .replace(/</g, '<')

13 .replace(/>/g, '>')

14 .replace(/"/g, '"');

15}

16export function launchAgentsDir(home = homedir()) {

17 return path.join(home, 'Library', 'LaunchAgents');

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/telegram/launchd.jsView on unpkg · L3

18}

19export function launchdPlistPath(agentsDir = launchAgentsDir()) {

20 return path.join(agentsDir, `${LAUNCHD_LABEL}.plist`);

21}

22export function telegramServiceLogPath(home = defaultHome()) {

23 return path.join(home, 'logs', 'telegram-launchd.log');

Source & flagged code

1 flagged · loading source

dist/telegram/launchd.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code