registry / neokai / 0.39.2

neokai@0.39.2

HyperNeo - Claude Agent SDK Web Interface

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVars

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 1.32 KB of source

Source & flagged code

2 flagged

bin/hyperneo.jsView file

Lines 1-52javascript

1#!/usr/bin/env node

3/**

4 * HyperNeo CLI launcher.

5 * Detects the current platform and spawns the correct compiled binary

6 * from the matching @neokai/cli-{platform} optional dependency.

7 */

9const { spawnSync } = require('child_process');

High

Child Process

Package source references child process execution.

bin/hyperneo.jsView on unpkg · L8

11const PLATFORM_MAP = {

12 'darwin-arm64': '@neokai/cli-darwin-arm64',

13 'darwin-x64': '@neokai/cli-darwin-x64',

14 'linux-x64': '@neokai/cli-linux-x64',

15 'linux-arm64': '@neokai/cli-linux-arm64',

16};

18const platformKey = `${process.platform}-${process.arch}`;

19const packageName = PLATFORM_MAP[platformKey];

21if (!packageName) {

22 console.error(

23 `Error: HyperNeo does not support ${process.platform} ${process.arch}.\n` +

24 `Supported platforms: ${Object.keys(PLATFORM_MAP).join(', ')}`

25 );

26 process.exit(1);

27}

29let binaryPath;

30try {

31 binaryPath = require.resolve(`${packageName}/bin/hyperneo`);

32} catch {

33 console.error(

34 `Error: Could not find HyperNeo binary for ${platformKey}.\n` +

35 `The package ${packageName} may not be installed.\n` +

36 `Try reinstalling: npm install -g hyperneo`

37 );

38 process.exit(1);

39}

41const result = spawnSync(binaryPath, process.argv.slice(2), {

42 stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/hyperneo.jsView on unpkg · L35

43 env: process.env,

44});

46if (result.error) {

47 console.error(`Error: Failed to execute HyperNeo binary: ${result.error.message}`);

48 process.exit(1);

49}

51process.exit(result.status ?? 1);

Source & flagged code

2 flagged · loading source

bin/hyperneo.jsView file

8L9: const { spawnSync } = require('child_process'); L10:

High

Child Process

Package source references child process execution.

bin/hyperneo.jsView on unpkg · L8

35`The package ${packageName} may not be installed.\n` + L36: `Try reinstalling: npm install -g hyperneo` L37: ); ... L40: L41: const result = spawnSync(binaryPath, process.argv.slice(2), { L42: stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/hyperneo.jsView on unpkg · L35

Findings

2 High1 Medium

HighChild Processbin/hyperneo.js

HighRuntime Package Installbin/hyperneo.js

MediumEnvironment Vars

Source & flagged code

2 flagged

bin/hyperneo.jsView file

Lines 1-52javascript

1#!/usr/bin/env node

3/**

4 * HyperNeo CLI launcher.

5 * Detects the current platform and spawns the correct compiled binary

6 * from the matching @neokai/cli-{platform} optional dependency.

7 */

9const { spawnSync } = require('child_process');

High

Child Process

Package source references child process execution.

bin/hyperneo.jsView on unpkg · L8

11const PLATFORM_MAP = {

12 'darwin-arm64': '@neokai/cli-darwin-arm64',

13 'darwin-x64': '@neokai/cli-darwin-x64',

14 'linux-x64': '@neokai/cli-linux-x64',

15 'linux-arm64': '@neokai/cli-linux-arm64',

16};

18const platformKey = `${process.platform}-${process.arch}`;

19const packageName = PLATFORM_MAP[platformKey];

21if (!packageName) {

22 console.error(

23 `Error: HyperNeo does not support ${process.platform} ${process.arch}.\n` +

24 `Supported platforms: ${Object.keys(PLATFORM_MAP).join(', ')}`

25 );

26 process.exit(1);

27}

29let binaryPath;

30try {

31 binaryPath = require.resolve(`${packageName}/bin/hyperneo`);

32} catch {

33 console.error(

34 `Error: Could not find HyperNeo binary for ${platformKey}.\n` +

35 `The package ${packageName} may not be installed.\n` +

36 `Try reinstalling: npm install -g hyperneo`

37 );

38 process.exit(1);

39}

41const result = spawnSync(binaryPath, process.argv.slice(2), {

42 stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/hyperneo.jsView on unpkg · L35

43 env: process.env,

44});

46if (result.error) {

47 console.error(`Error: Failed to execute HyperNeo binary: ${result.error.message}`);

48 process.exit(1);

49}

51process.exit(result.status ?? 1);