scanned 6 file(s), 4.55 MB of source, external domains: 127.0.0.1, access.redhat.com, api.momentic.ai, atelierbram.github.io, avatars.githubusercontent.com, bit.ly, chriskempson.com, cloudflare-ipfs.com, clrs.cc, commonmark.org, cscorley.github.io, developer.mozilla.org, docs.mongodb.com, docs.sentry.io, en.wikipedia.org, err.47ng.com, ethanschoonover.com, example.com, fakerjs.dev, github.com, google.com, hart-dev.com, hosted-run-viewer-files.s3.us-east-2.amazonaws.com, i.ytimg.com, json-schema.org, loremflickr.com, momentic.ai, picsum.photos, playwright.dev, radix-ui.com, railscasts.com, react.dev, redux-toolkit.js.org, redux.js.org, regex101.com, remarkable-hackwork.info, semver.org, sethawright.com, slow-timer.info, stackoverflow.com, temp-mail.org, tybenz.com, via.placeholder.com, www.monokai.nl, www.terrible-idea.com, www.w3.org, www.youtube-nocookie.com, yandex.com, yarnpkg.com
13import xX from 'truncate-json';
L14: import Gl, { supportsColorStderr, supportsColor, Chalk } from 'chalk';
L15: import kDe from 'safe-stable-stringify';
...
L30: import MB, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L31: import * as Nlt from 'child_process';
L32: import { execFile, execSync, exec, execFileSync, spawn as spawn$1 } from 'child_process';
...
L37: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L38: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L39: import { resourceFromAttributes } from '@opentelemetry/resources';
...
L171: Original error: ${n}
L172: `}async function b4({dryRun:e,operation:t}){try{return await t()}catch(n){throw new Error(gke({err:n,dryRun:e}),{cause:n})}}function Zr
CriticalBrowser Credential Phishing
Source appears to collect browser login credentials for exfiltration.
bin/cli.jsView on unpkg · L13 13Trigger-reachable chain: manifest.bin -> bin/cli.js
L13: import xX from 'truncate-json';
L14: import Gl, { supportsColorStderr, supportsColor, Chalk } from 'chalk';
L15: import kDe from 'safe-stable-stringify';
...
L30: import MB, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L31: import * as Nlt from 'child_process';
L32: import { execFile, execSync, exec, execFileSync, spawn as spawn$1 } from 'child_process';
...
L37: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L38: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L39: import { resourceFromAttributes } from '@opentelemetry/resources';
...
L171: Original error: ${n}
L172: `}async function b4({dryRun:e,operation:t}){try{return await t()}catch(n){throw new
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
bin/cli.jsView on unpkg · L13 173L174: What the agent did: ${o}`:t}var ev=Ra.extend({type:z$1.literal("AI_ACTION_DYNAMIC"),text:z$1.string(),effort:mt.optional(),retries:z$1.number().optional(),version:rU.optional(),cac...
L175: `).map((o,r)=>r>0?`${n}${o}`:o).join(`
...
L178: `)),i(" ",n(d));}}setMinLevel(t){typeof t=="string"?this.minLogLevel=Ov[t]:this.minLogLevel=t;}setOutputStream(t){this.forcedStream=t;}log(...t){this.logWithLevel(30,Gl.reset,...t...
L179: `),i=r===-1?o:o.slice(0,r),s=r===-1?"":o.slice(r+1),a=[];i&&a.push({email:i,githubLogin:c$(i)}),a.push(...yUe(s)),t.push(a);}return t}function bUe(e){return (e.githubLogin??(e.emai...
L180: `)){let[o,r]=n.trim().split(/\s+/,2);if(!o||!r)continue;let i=Number.parseInt(r,10);Number.isFinite(i)&&(t[o]=i);}return t}function _je(e,t){let n,o,r;for(let i of t.sp
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.jsView on unpkg · L173 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/cli.js:
import no__default, { statSync, mkdirSync, readFileSync, existsSync, readdir, readdirSync, createReadStream, writeFileSync, appendFileSync, rmSync, unlinkSync, renameSync } from 'f...
import { mkdirSync as mkdirSync$1, writeFileSync as writeFileSync$1, promises } from 'node:fs';
import t2, { writeFile, cp as cp$1, rm, readFile as readFile$1, mkdir, readdir as readdir$1, mkdtemp, stat, unlink } from 'fs/promises';
import Nit from 'readline';
What the agent did: ${o}`:t}var ev=Ra.extend({type:z$1.literal("AI_ACTION_DYNAMIC"),text:z$1.string(),effort:mt.optional(),retries:z$1.number().optional(),version:rU.optional(),cac...
`)
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
bin/cli.jsView on unpkg 171Original error: ${n}
L172: `}async function b4({dryRun:e,operation:t}){try{return await t()}catch(n){throw new Error(gke({err:n,dryRun:e}),{cause:n})}}function Zr(e){return e instanceof Error?e:new Error(z(e...
L173:
...
L175: `).map((o,r)=>r>0?`${n}${o}`:o).join(`
L176: `)}logWithLevelHelper(t,n,...o){if(t<this.minLogLevel)return;let r=this.forcedStream??(t>=40?"stderr":"stdout"),i=(...u)=>{let d=e.redactedValues.length===0?u:u.map(m=>typeof m=="s...
L177: `).map((m,p)=>p>0?` ${m}`:m).join(`
L178: `)),i(" ",n(d));}}setMinLevel(t){typeof t=="string"?this.minLogLevel=Ov[t]:this.minLogLevel=t;}setOutputStream(t){this.forcedStream=t;}log(...t){this.logWithLevel(30,Gl.reset,...t...
L179: `),i=r===-1?o:o.slice(0,r),s=r===-1?"":o.slice(r+1),a=[];i&&a.push({email:i,githubLogin:c$(i)}),a.
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
bin/cli.jsView on unpkg · L171 30import MB, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L31: import * as Nlt from 'child_process';
L32: import { execFile, execSync, exec, execFileSync, spawn as spawn$1 } from 'child_process';
...
L163: `,detailedDescription:Ct`
L164: Use this only after the available tools cannot establish a defensible root cause. Do not use OTHER while targeted current-run step results, container screenshots, or required past-...
L165: `,action:"fail"}],WMe="warn",qMe="pull-request",ib=(o=>(o.COMMIT_TO_SOURCE="commit-to-source",o.ROUTE_TO_OWNER="route-to-owner",o.ALREADY_FIXED="already-fixed",o))(ib||{}),KMe=["co...
...
L173:
L174: What the agent did: ${o}`:t}var ev=Ra.extend({type:z$1.literal("AI_ACTION_DYNAMIC"),text:z$1.string(),effort:mt.optional(),retries:z$1.number(
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
bin/cli.jsView on unpkg · L30 13Trigger-reachable credential exfiltration chain: manifest.bin -> bin/cli.js
L13: import xX from 'truncate-json';
L14: import Gl, { supportsColorStderr, supportsColor, Chalk } from 'chalk';
L15: import kDe from 'safe-stable-stringify';
...
L30: import MB, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L31: import * as Nlt from 'child_process';
L32: import { execFile, execSync, exec, execFileSync, spawn as spawn$1 } from 'child_process';
...
L37: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L38: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L39: import { resourceFromAttributes } from '@opentelemetry/resources';
...
L171: Original error: ${n}
L172: `}async function b4({dryRun:e,operation:t}){try{return awai
HighTrigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
bin/cli.jsView on unpkg · L13 171Trigger-reachable command-output exfiltration chain: manifest.bin -> bin/cli.js
L171: Original error: ${n}
L172: `}async function b4({dryRun:e,operation:t}){try{return await t()}catch(n){throw new Error(gke({err:n,dryRun:e}),{cause:n})}}function Zr(e){return e instanceof Error?e:new Error(z(e...
L173:
...
L175: `).map((o,r)=>r>0?`${n}${o}`:o).join(`
L176: `)}logWithLevelHelper(t,n,...o){if(t<this.minLogLevel)return;let r=this.forcedStream??(t>=40?"stderr":"stdout"),i=(...u)=>{let d=e.redactedValues.length===0?u:u.map(m=>typeof m=="s...
L177: `).map((m,p)=>p>0?` ${m}`:m).join(`
L178: `)),i(" ",n(d));}}setMinLevel(t){typeof t=="string"?this.minLogLevel=Ov[t]:this.minLogLevel=t;}setOutputStream(t){this.forcedStream=t;}log(...t){this.logWithLevel(30,Gl.reset,...t...
L179: `),i=r===-1?o:o.sl
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
bin/cli.jsView on unpkg · L171 173L174: What the agent did: ${o}`:t}var ev=Ra.extend({type:z$1.literal("AI_ACTION_DYNAMIC"),text:z$1.string(),effort:mt.optional(),retries:z$1.number().optional(),version:rU.optional(),cac...
L175: `).map((o,r)=>r>0?`${n}${o}`:o).join(`
...
L181: `)){let s=i.indexOf(":");if(s===-1)continue;let a=i.slice(0,s),l=i.slice(s+1).trim();if(a==="Name"&&(n=l),a==="PPid"&&(o=Number.parseInt(l,10)),a==="VmRSS"){let c=Number.parseInt(l...
L182: `).find(o=>o.startsWith("cpu "));if(!t)return;let n=t.trim().split(/\s+/).slice(1).slice(0,8).map(o=>Number.parseInt(o,10));if(!(n.length===0||n.some(o=>!Number.isFinite(o))))retur...
L183: `):void 0}};function Xee(e){let t=globalThis.console,n=new fj;globalThis.console=n;try{e();}finally{let o=n.flushed();o&&process.stdout.write(`${o}
HighRuntime Package Install
Package source invokes a package manager install command at runtime.
bin/cli.jsView on unpkg · L173 13import xX from 'truncate-json';
L14: import Gl, { supportsColorStderr, supportsColor, Chalk } from 'chalk';
L15: import kDe from 'safe-stable-stringify';
...
L30: import MB, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L31: import * as Nlt from 'child_process';
L32: import { execFile, execSync, exec, execFileSync, spawn as spawn$1 } from 'child_process';
...
L37: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L38: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L39: import { resourceFromAttributes } from '@opentelemetry/resources';
...
L171: Original error: ${n}
L172: `}async function b4({dryRun:e,operation:t}){try{return await t()}catch(n){throw new Error(gke({err:n,dryRun:e}),{cause:n})}}function Zr
LowWeak Crypto
Package source references weak cryptographic algorithms.
bin/cli.jsView on unpkg · L13