registry / netcontrol-agent / 1.0.2

netcontrol-agent@1.0.2

A Node agent that collects system metrics like CPU, RAM, disk, network usage, and uptime to a remote server.

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 28.5 KB of source, external domains: 192.168.1.100, github.com

Source & flagged code

8 flagged

netcontrol-agent.jsView file

Lines 1-54javascript

1#!/usr/bin/env node

2/**

3 * netcontrol-agent.js v4.0 — Hybrid self-installing agent

4 *

5 * USAGE:

6 * Run manually:

7 * NC_SERVER_URL=http://server:4000 node netcontrol-agent.js

8 *

9 * Install as a permanent service (runs on boot, auto-restarts):

10 * Linux: sudo NC_SERVER_URL=http://server:4000 node netcontrol-agent.js --install

11 * Windows: (run PowerShell as Administrator)

12 * $env:NC_SERVER_URL="http://server:4000"; node netcontrol-agent.js --install

High

Shell

Package source references shell execution.

netcontrol-agent.jsView on unpkg · L10

13 *

14 * Uninstall service:

15 * Linux: sudo node netcontrol-agent.js --uninstall

16 * Windows: node netcontrol-agent.js --uninstall (as Administrator)

17 *

18 * ENV VARS:

19 * NC_SERVER_URL — required: http(s)://host:port of your NetControl server

20 * NC_REG_SECRET — required for first-time registration: must match the

21 * server's AGENT_REGISTRATION_SECRET (see backend .env).

22 * Not needed on subsequent runs once credentials are

23 * cached, unless the agent has to re-register (e.g. the

24 * credentials file was deleted or the key was rejected).

25 * NC_INTERVAL — metrics push interval seconds (default 5, min 3)

26 * NC_CRED_FILE — override credential storage path

27 */

28'use strict';

30const os = require('os');

31const fs = require('fs');

32const path = require('path');

33const http = require('http');

34const https = require('https');

35const { execSync, spawnSync, spawn } = require('child_process');

High

Child Process

Package source references child process execution.

netcontrol-agent.jsView on unpkg · L34

37// ── Config ─────────────────────────────────────────────────────────────────────

38const SERVER_URL = (process.env.NC_SERVER_URL || '').replace(/\/$/, '');

39const REG_SECRET = process.env.NC_REG_SECRET || '';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

netcontrol-agent.jsView on unpkg · L32

40const INTERVAL_SEC = Math.max(3, parseInt(process.env.NC_INTERVAL || '5', 10));

41const IS_WINDOWS = os.platform() === 'win32';

42const AGENT_PATH = path.resolve(process.argv[1]);

44const CRED_FILE = process.env.NC_CRED_FILE || (

45 IS_WINDOWS

46 ? path.join(process.env.PROGRAMDATA || 'C:\\ProgramData', 'NetControl', 'agent.json')

47 : process.getuid?.() === 0

48 ? '/etc/netcontrol-agent.json'

49 : path.join(os.homedir(), '.netcontrol-agent.json')

50);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

netcontrol-agent.jsView on unpkg · L6

52// ── Install/Uninstall handlers ─────────────────────────────────────────────────

53if (process.argv.includes('--install')) {

54 installService();

Lines 185-225javascript

185 }

186 } else {

187 try {

188 execSync('systemctl stop netcontrol-agent 2>/dev/null || true');

189 execSync('systemctl disable netcontrol-agent 2>/dev/null || true');

190 try { fs.unlinkSync('/etc/systemd/system/netcontrol-agent.service'); }

netcontrol-agent-1.0.0.tgzView file

•path = netcontrol-agent-1.0.0.tgz kind = high_entropy_blob sizeBytes = 8618 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

netcontrol-agent-1.0.0.tgzView on unpkg

•path = netcontrol-agent-1.0.0.tgz kind = compressed_blob sizeBytes = 8618 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

netcontrol-agent-1.0.0.tgzView on unpkg

•path = netcontrol-agent-1.0.0.tgz kind = nested_archive_needs_inspection sizeBytes = 8618 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

netcontrol-agent-1.0.0.tgzView on unpkg

Source & flagged code

8 flagged · loading source

netcontrol-agent.jsView file

34const https = require('https'); L35: const { execSync, spawnSync, spawn } = require('child_process'); L36:

High

Child Process

Package source references child process execution.

netcontrol-agent.jsView on unpkg · L34

10* Linux: sudo NC_SERVER_URL=http://server:4000 node netcontrol-agent.js --install L11: * Windows: (run PowerShell as Administrator) L12: * $env:NC_SERVER_URL="http://server:4000"; node netcontrol-agent.js --install

High

Shell

Package source references shell execution.

netcontrol-agent.jsView on unpkg · L10

32const path = require('path'); L33: const http = require('http'); L34: const https = require('https'); L35: const { execSync, spawnSync, spawn } = require('child_process'); L36: L37: // ── Config ───────────────────────────────────────────────────────────────────── L38: const SERVER_URL = (process.env.NC_SERVER_URL || '').replace(/\/$/, ''); L39: const REG_SECRET = process.env.NC_REG_SECRET || '';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

netcontrol-agent.jsView on unpkg · L32

205console.log('[Agent] Installing systeminformation…'); L206: execSync('npm install systeminformation --save --loglevel=error', { L207: cwd: path.dirname(AGENT_PATH),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

netcontrol-agent.jsView on unpkg · L205

6* Run manually: L7: * NC_SERVER_URL=http://server:4000 node netcontrol-agent.js L8: * ... L10: * Linux: sudo NC_SERVER_URL=http://server:4000 node netcontrol-agent.js --install L11: * Windows: (run PowerShell as Administrator) L12: * $env:NC_SERVER_URL="http://server:4000"; node netcontrol-agent.js --install ... L37: // ── Config ───────────────────────────────────────────────────────────────────── L38: const SERVER_URL = (process.env.NC_SERVER_URL || '').replace(/\/$/, ''); L39: const REG_SECRET = process.env.NC_REG_SECRET || ''; ... L48: ? '/etc/netcontrol-agent.json' L49: : path.join(os.homedir(), '.netcontrol-agent.json') L50: );

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

netcontrol-agent.jsView on unpkg · L6

netcontrol-agent-1.0.0.tgzView file

•path = netcontrol-agent-1.0.0.tgz kind = high_entropy_blob sizeBytes = 8618 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

netcontrol-agent-1.0.0.tgzView on unpkg

•path = netcontrol-agent-1.0.0.tgz kind = compressed_blob sizeBytes = 8618 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

netcontrol-agent-1.0.0.tgzView on unpkg

•path = netcontrol-agent-1.0.0.tgz kind = nested_archive_needs_inspection sizeBytes = 8618 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

netcontrol-agent-1.0.0.tgzView on unpkg

Findings

5 High5 Medium5 Low

HighChild Processnetcontrol-agent.js

HighShellnetcontrol-agent.js

HighSame File Env Network Executionnetcontrol-agent.js

HighRuntime Package Installnetcontrol-agent.js

HighShips High Entropy Blobnetcontrol-agent-1.0.0.tgz

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencenetcontrol-agent.js

MediumShips Compressed Blobnetcontrol-agent-1.0.0.tgz

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNested Archive Needs Inspectionnetcontrol-agent-1.0.0.tgz

Source & flagged code

8 flagged

netcontrol-agent.jsView file

Lines 1-54javascript

1#!/usr/bin/env node

2/**

3 * netcontrol-agent.js v4.0 — Hybrid self-installing agent

4 *

5 * USAGE:

6 * Run manually:

7 * NC_SERVER_URL=http://server:4000 node netcontrol-agent.js

8 *

9 * Install as a permanent service (runs on boot, auto-restarts):

10 * Linux: sudo NC_SERVER_URL=http://server:4000 node netcontrol-agent.js --install

11 * Windows: (run PowerShell as Administrator)

12 * $env:NC_SERVER_URL="http://server:4000"; node netcontrol-agent.js --install

High

Shell

Package source references shell execution.

netcontrol-agent.jsView on unpkg · L10

13 *

14 * Uninstall service:

15 * Linux: sudo node netcontrol-agent.js --uninstall

16 * Windows: node netcontrol-agent.js --uninstall (as Administrator)

17 *

18 * ENV VARS:

19 * NC_SERVER_URL — required: http(s)://host:port of your NetControl server

20 * NC_REG_SECRET — required for first-time registration: must match the

21 * server's AGENT_REGISTRATION_SECRET (see backend .env).

22 * Not needed on subsequent runs once credentials are

23 * cached, unless the agent has to re-register (e.g. the

24 * credentials file was deleted or the key was rejected).

25 * NC_INTERVAL — metrics push interval seconds (default 5, min 3)

26 * NC_CRED_FILE — override credential storage path

27 */

28'use strict';

30const os = require('os');

31const fs = require('fs');

32const path = require('path');

33const http = require('http');

34const https = require('https');

35const { execSync, spawnSync, spawn } = require('child_process');

High

Child Process

Package source references child process execution.

netcontrol-agent.jsView on unpkg · L34

38const SERVER_URL = (process.env.NC_SERVER_URL || '').replace(/\/$/, '');

39const REG_SECRET = process.env.NC_REG_SECRET || '';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

netcontrol-agent.jsView on unpkg · L32

40const INTERVAL_SEC = Math.max(3, parseInt(process.env.NC_INTERVAL || '5', 10));

41const IS_WINDOWS = os.platform() === 'win32';

42const AGENT_PATH = path.resolve(process.argv[1]);

44const CRED_FILE = process.env.NC_CRED_FILE || (

45 IS_WINDOWS

46 ? path.join(process.env.PROGRAMDATA || 'C:\\ProgramData', 'NetControl', 'agent.json')

47 : process.getuid?.() === 0

48 ? '/etc/netcontrol-agent.json'

49 : path.join(os.homedir(), '.netcontrol-agent.json')

50);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

netcontrol-agent.jsView on unpkg · L6

52// ── Install/Uninstall handlers ─────────────────────────────────────────────────

53if (process.argv.includes('--install')) {

54 installService();

Lines 185-225javascript

185 }

186 } else {

187 try {

188 execSync('systemctl stop netcontrol-agent 2>/dev/null || true');

189 execSync('systemctl disable netcontrol-agent 2>/dev/null || true');

190 try { fs.unlinkSync('/etc/systemd/system/netcontrol-agent.service'); }

netcontrol-agent-1.0.0.tgzView file

•path = netcontrol-agent-1.0.0.tgz kind = high_entropy_blob sizeBytes = 8618 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

netcontrol-agent-1.0.0.tgzView on unpkg

•path = netcontrol-agent-1.0.0.tgz kind = compressed_blob sizeBytes = 8618 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

netcontrol-agent-1.0.0.tgzView on unpkg

•path = netcontrol-agent-1.0.0.tgz kind = nested_archive_needs_inspection sizeBytes = 8618 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

netcontrol-agent-1.0.0.tgzView on unpkg