registry / memgrep / 1.5.4

memgrep@1.5.4

Local agent memory, coding loop, Cursor from Telegram, scheduled playbooks, and MCP tools.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 149 file(s), 613 KB of source, external domains: 127.0.0.1, api.openai.com, api.producthunt.com, api.telegram.org, app.posthog.com, cloudresourcemanager.googleapis.com, compute.googleapis.com, console.neon.tech, cursor.com, github.com, id.atlassian.com, logging.googleapis.com, t.me, www.googleapis.com, your-domain.atlassian.net

Source & flagged code

1 flagged

dist/telegram/launchd.jsView file

Lines 1-23javascript

1import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';

2import { homedir } from 'node:os';

3import path from 'node:path';

4import { spawnSync }

Source & flagged code

1 flagged · loading source

dist/telegram/launchd.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code