registry / mlclaw / 0.12.2

mlclaw@0.12.2

⚠ Under review

Static Scan Results

scanned 22d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 24 low-signal pattern(s) were surfaced and cleared.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 38 file(s), 2.29 MB of source, external domains: 127.0.0.1, api.openai.com, api.telegram.org, auth.openai.com, evalstate-research-agent-two.hf.space, github.com, hf.co, huggingface.co, raw.githubusercontent.com, react.dev, router.huggingface.co, unyolo.io, www.w3.org

Source & flagged code

17 flagged

dist/hf-state-sync.jsView file

Lines 4927-4967javascript

4927}

4928function remotePath(config, name) {

4929 return `${normalizeBucketPrefix(config.bucketPrefix)}/${name.replace(/^\/+/, "")}`;

4930}

4931function normalizeBucketPrefix(prefix) {

4932 const normalized = (prefix?.trim() || DEFAULT_BUCKET_PREFIX).replace(/^\/+|\/+$/g, "");

4933 return normalized || DEFAULT_BUCKET_PREFIX;

4934}

4935function log(message) {

4936 console.log(`[hf-state-sync] ${message}`);

4937}

4938function logError(message) {

4939 console.error(`[hf-state-sync] ${message}`);

4940}

4941

4942// src/hf-state-sync/restore.ts

4943import fs4 from "node:fs/promises";

4944import os from "node:os";

4945import path4 from "node:path";

4946

4947// src/hf-state-sync/archive.ts

4948import { execFile } from "node:child_process";

4949import { createHash } from "node:crypto";

High

Child Process

Package source references child process execution.

dist/hf-state-sync.jsView on unpkg · L4947

4950import { createReadStream } from "node:fs";

4951import fs3 from "node:fs/promises";

4952import path3 from "node:path";

4953import { pipeline } from "node:stream/promises";

4954import { promisify } from "node:util";

4955

4956// src/hf-state-sync/sqlite.ts

4957import fs2 from "node:fs/promises";

4958import path2 from "node:path";

4959import { DatabaseSync } from "node:sqlite";

4960async function findSqliteFiles(root) {

4961 const found = [];

4962 let entries;

4963 try {

4964 entries = await fs2.readdir(root, { withFileTypes: true, recursive: true });

4965 } catch {

4966 return found;

4967 }

•matchType = normalized_sha256 matchedPackage = mlclaw@0.12.8 matchedPath = dist/hf-state-sync.js matchedIdentity = npm:bWxjbGF3:0.12.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/hf-state-sync.jsView on unpkg

dist/mlclaw.mjsView file

9595// src/mlclaw/hf-cli.ts L9596: import { spawn } from "node:child_process"; L9597: import fs10, { constants as fsConstants } from "node:fs/promises"; ... L9599: import path11 from "node:path"; L9600: var HF_CLI_INSTALL_URL = "https://hf.co/cli/install.sh"; L9601: var HF_ACCOUNT_CREATE_URL = "https://huggingface.co/join"; L9602: var HF_CLI_INSTALL_COMMAND = `curl -LsSf ${HF_CLI_INSTALL_URL} | bash`; L9603: function createSystemHfCli(env = process.env) { L9604: return {

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/mlclaw.mjsView on unpkg · L9595

47Trigger-reachable chain: manifest.bin -> dist/mlclaw.mjs L47: * Constructs the CommanderError class L48: * @param {number} exitCode suggested exit code which could be used with process.exit L49: * @param {string} code an id string representing the error ... L1203: var EventEmitter = __require("node:events").EventEmitter; L1204: var childProcess = __require("node:child_process"); L1205: var path16 = __require("node:path"); ... L1253: this._outputConfiguration = { L1254: writeOut: (str) => process5.stdout.write(str), L1255: writeErr: (str) => process5.stderr.write(str), ... L1295: * @returns {Command[]} L1296: * @private L1297: */

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/mlclaw.mjsView on unpkg · L47

2056} L2057: const execArgv = process5.execArgv ?? []; L2058: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

dist/mlclaw-space-runtime.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = mlclaw@0.12.1 matchedIdentity = npm:bWxjbGF3:0.12.1 similarity = 0.958 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/mlclaw-space-runtime.jsView on unpkg

42Detached bundled service listener: dist/mlclaw-space-runtime.js launches a Node helper and exposes a broad-bound HTTP listener. L42: exports.fullFormats = { L43: // date: http://tools.ietf.org/html/rfc3339#section-5.6 L44: date: fmtDef(date, compareDate), ... L73: // the following formats are used by the openapi specification: https://spec.openapis.org/oas/v3.0.0#data-types L74: // byte: https://github.com/miguelmota/is-base64 L75: byte, ... L308: // src/mlclaw-space-runtime/cli.ts L309: import { spawn as spawn3 } from "node:child_process"; L310: import process2 from "node:process"; ... L1448: const _errs23 = errors; L1449: if (!validate26(data8[i1], { instancePath: instancePath + "/warnings/" + i1, parentData: data8, parentDataProperty: i1, rootData, dynamicAnchors })) { L1450: vErrors =

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

dist/mlclaw-space-runtime.jsView on unpkg · L42

mlclaw.shView file

•matchType = normalized_sha256 matchedPackage = mlclaw@0.12.8 matchedPath = mlclaw.sh matchedIdentity = npm:bWxjbGF3:0.12.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

mlclaw.shView on unpkg

•path = mlclaw.sh kind = build_helper sizeBytes = 3428 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

mlclaw.shView on unpkg

src/hf-state-sync/stage-worker.tsView file

•matchType = normalized_sha256 matchedPackage = mlclaw@0.12.8 matchedPath = src/hf-state-sync/stage-worker.ts matchedIdentity = npm:bWxjbGF3:0.12.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/hf-state-sync/stage-worker.tsView on unpkg

src/hf-state-sync/supervise.tsView file

•matchType = normalized_sha256 matchedPackage = mlclaw@0.12.8 matchedPath = src/hf-state-sync/supervise.ts matchedIdentity = npm:bWxjbGF3:0.12.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/hf-state-sync/supervise.tsView on unpkg

src/hf-state-sync/cli.tsView file

•matchType = normalized_sha256 matchedPackage = mlclaw@0.12.8 matchedPath = src/hf-state-sync/cli.ts matchedIdentity = npm:bWxjbGF3:0.12.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/hf-state-sync/cli.tsView on unpkg

mlclaw.ps1View file

•matchType = normalized_sha256 matchedPackage = mlclaw@0.12.8 matchedPath = mlclaw.ps1 matchedIdentity = npm:bWxjbGF3:0.12.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

mlclaw.ps1View on unpkg

Source & flagged code

17 flagged · loading source

mlclaw@0.12.2

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code