1Source sends the broad process environment to a literal external destination.
L1: import{createRequire as Ml}from"node:module";var Dl=Object.create;var{getPrototypeOf:gl,defineProperty:_M,getOwnPropertyNames:Fl}=Object;var Gl=Object.prototype.hasOwnProperty;func...
L2: `)}displayWidth(A){return rW(A).length}styleTitle(A){return A}styleUsage(A){return A.split(" ").map((B)=>{if(B==="[options]")return this.styleOptionText(B);if(B==="[command]")retur...
...
L12: (Did you mean one of ${I.join(", ")}?)`;if(I.length===1)return`
L13: (Did you mean ${I[0]}?)`;return""}kl.suggestSimilar=Tl});var QV=tB((pl)=>{var bl=XQ("node:events").EventEmitter,SM=XQ("node:child_process"),_0=XQ("node:path"),C9=XQ("node:fs"),UQ=X...
L14: - specify the name in Command constructor or using .name()`);if(B=B||{},B.isDef
CriticalHardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/cli.jsView on unpkg · L1 •matchType = previous_version_dangerous_delta
matchedPackage = min-agent@0.7.1
matchedIdentity = npm:bWluLWFnZW50:0.7.1
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg 12(Did you mean one of ${I.join(", ")}?)`;if(I.length===1)return`
L13: (Did you mean ${I[0]}?)`;return""}kl.suggestSimilar=Tl});var QV=tB((pl)=>{var bl=XQ("node:events").EventEmitter,SM=XQ("node:child_process"),_0=XQ("node:path"),C9=XQ("node:fs"),UQ=X...
L14: - specify the name in Command constructor or using .name()`);if(B=B||{},B.isDefault)this._defaultCommandName=A._name;if(B.noHelp||B.hidden)A._hidden=!0;return this._registerCommand...
25Expecting one of '${Q.join("', '")}'`);let I=`${A}Help`;return this.on(I,(C)=>{let g;if(typeof B==="function")g=B({error:C.error,command:C.command});else g=B;if(g)C.write(`${g}
L26: `)}),this}_outputHelpIfRequested(A){let B=this._getHelpOption();if(B&&A.find((I)=>B.is(I)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function BV(A){...
L27: `),Q=zV().map((C)=>`(subpath ${MV(YQ.resolve(C))})`).join(`
...
L39: `}function _V(){if(w8("/usr/bin/bwrap"))return"/usr/bin/bwrap";return"/usr/local/bin/bwrap"}function OV(A,B,Q){let I=["--die-with-parent","--ro-bind","/","/","--dev","/dev","--proc...
L40: ${$V}`:ZV,G}function sG(A){return A==="off"?"off":A==="strict"?"strict":"workspace"}function fV(A){return A==="deny"?"network denied":"network allowed"}function tG(A=
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.jsView on unpkg · L25 24`),this._exit(0,"commander.version",A)}),this}description(A,B){if(A===void 0&&B===void 0)return this._description;if(this._description=A,B)this._argsDescription=B;return this}summa...
L25: Expecting one of '${Q.join("', '")}'`);let I=`${A}Help`;return this.on(I,(C)=>{let g;if(typeof B==="function")g=B({error:C.error,command:C.command});else g=B;if(g)C.write(`${g}
L26: `)}),this}_outputHelpIfRequested(A){let B=this._getHelpOption();if(B&&A.find((I)=>B.is(I)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function BV(A){...
L27: `),Q=zV().map((C)=>`(subpath ${MV(YQ.resolve(C))})`).join(`
...
L39: `}function _V(){if(w8("/usr/bin/bwrap"))return"/usr/bin/bwrap";return"/usr/local/bin/bwrap"}function OV(A,B,Q){let I=["--die-with-parent","--ro-bind","/","/","--dev",
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/cli.jsView on unpkg · L24 24Trigger-reachable command-output exfiltration chain: manifest.bin -> bin/min-agent.js -> dist/cli.js
L24: `),this._exit(0,"commander.version",A)}),this}description(A,B){if(A===void 0&&B===void 0)return this._description;if(this._description=A,B)this._argsDescription=B;return this}summa...
L25: Expecting one of '${Q.join("', '")}'`);let I=`${A}Help`;return this.on(I,(C)=>{let g;if(typeof B==="function")g=B({error:C.error,command:C.command});else g=B;if(g)C.write(`${g}
L26: `)}),this}_outputHelpIfRequested(A){let B=this._getHelpOption();if(B&&A.find((I)=>B.is(I)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function BV(A){...
L27: `),Q=zV().map((C)=>`(subpath ${MV(YQ.resolve(C))})`).join(`
...
L39: `}function _V(){if(w8("/usr/bin/bwrap"))return"/usr/bin/bwrap";re
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/cli.jsView on unpkg · L24 101`)});var h_={};eB(h_,{runWriteConfig:()=>ws});async function ws(A){let B=[],Q=!0;if(A.sandbox!==void 0||A.network!==void 0){let I=d9({positionals:[],flagMode:A.sandbox,flagNetwork:...
L102: `)),!Q)process.exitCode=1}var m_=v(()=>{sZ();tZ();eZ();A$()});function t9(A,B,Q){let I=A==="openai"?"openai":A==="ollama"?"ollama":zs(B)??"provider";return qs(I,Q)}function e9(A){l...
L103:
MediumDynamic Require
Package source references dynamic require/import behavior.
dist/cli.jsView on unpkg · L101