registry / omnirush / 0.10.13

omnirush@0.10.13

⚠ Under review

Omnirush — free daily tokens for the most powerful coding model on earth.

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 17 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 88 file(s), 2.14 MB of source, external domains: github.com, html.duckduckgo.com, json-schema.org, omnirush.ai, pi.dev, raw.githubusercontent.com, registry.npmjs.org

Source & flagged code

9 flagged

package.jsonView file

Lines 1-38json

2 "name": "omnirush",

3 "version": "0.10.13",

4 "description": "Omnirush — free daily tokens for the most powerful coding model on earth.",

5 "license": "Apache-2.0",

6 "type": "module",

7 "bin": {

8 "omnirush": "src/bin.js"

9 },

10 "engines": {

11 "node": ">=22.19.0"

12 },

13 "scripts": {

14 "test": "node --test",

15 "test:bun": "if [ -x .runtime/bin/bun ]; then .runtime/bin/bun test --timeout 300000 test/; else bun test --timeout 300000 test/; fi",

16 "build:mcp": "node scripts/build-mcp-bundle.js",

17 "build:capture-vendor": "node scripts/build-capture-vendor.js",

18 "postinstall": "node scripts/brand-engine.js && node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L18

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L18

19 },

20 "dependencies": {

21 "@earendil-works/pi-coding-agent": "0.86.1"

22 },

23 "repository": {

24 "type": "git",

25 "url": "git+https://github.com/omnirush-ai/omnirush-cli.git"

26 },

27 "keywords": [

28 "omnirush",

29 "ai",

30 "coding-agent",

31 "cli"

32 ],

33 "files": [

34 "src",

35 "assets",

36 "scripts",

37 "README.md"

38 ],

scripts/postinstall.jsView file

Lines 1-31javascript

1// Postinstall runtime fetcher:

2// 1. bun (v1.4.2) — required; the agent core runs on it.

3// 2. fd (v10.5.0) — optional; the agent's file search + autocomplete.

4// 3. rg (v15.2.0) — optional; the agent's content search.

5//

6// Binaries land in .runtime/bin/ (per-platform release packages ship the

7// same layout prebuilt). The launcher copies fd/rg into the agent's

8// managed-bin dir on every run, so the agent never attempts its own

9// GitHub download at startup (which fails on restricted networks and

10// repeats on every launch). fd/rg failures are warnings: search degrades

assets/extensions/omnirush/mcp-client.bundle.jsView file

2953sourceCode = this.opts.code.process(sourceCode, sch); L2954: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L2955: const validate2 = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

assets/extensions/omnirush/mcp-client.bundle.jsView on unpkg · L2953

assets/extensions/omnirush/voice/pvrecorder-worker.cjsView file

Lines 1-26javascript

1// Worker thread for @picovoice/pvrecorder-node (see capture.ts NativeSource).

2// PvRecorder.read() blocks until a 32 ms frame is ready, so it runs here and

3// posts each frame (16 kHz mono int16) to the main thread. Nothing is

4// written to disk; frames are transferred, not kept.

5"use strict";

7const { parentPort, workerData } = require(

src/bin.js#virtual:normalized:round1View file

17// OMNIRUSH_ORIGIN manager origin override (default L18: // https://omnirush.ai/omnirush) L19: // OMNIRUSH_GATEWAY_URL provider base URL override ({origin}/v1) ... L30: // muse-spark-1.1 (`--model gpt-6-sol` or OMNIRUSH_MODEL=gpt-6-sol), refreshed L31: // from the gateway"s GET /v1/models at launch. The sota extension watches every response,\n// refreshes the device token single-flight on 401 (retry once), and\n// warns on stderr... L32: // extensions): <state dir>/agent, or OMNIRUSH_AGENT_DIR. Releases up to L33: // 0.8.x used the core"s upstream default folder; ensureDirs() copies it\n// over once (src/compat.js) and falls back to it for a run whose copy failed.\nconst AGENT = resolveAgent... L34: // folder (src/compat.js ensureEngineLink); null wh

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/bin.js#virtual:normalized:round1View on unpkg · L17

assets/extensions/omnirush/auth.jsView file

Lines 1-29javascript

1// Omnirush device-flow auth core — shared by the CLI (src/bin.js), the

2// extensions (sota guard 401-refresh, session uploader), and node:test.

3//

4// Plain ESM JavaScript on node builtins only: pi extensions are loaded

5// through jiti with a fixed virtual-module set (pi packages + typebox),

6// so this file must never import an npm package. Loaded as a relative

7// import from sibling .ts extensions and directly by node from the repo.

8//

9// Endpoint contract (live-verified 2026-09-22 against

10// https://omnirush.ai/omnirush):

scripts/package.shView file

•path = scripts/package.sh kind = build_helper sizeBytes = 1208 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/package.shView on unpkg

assets/extensions/omnirush/engine-messages.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

assets/extensions/omnirush/engine-messages.ts#virtual:normalized:round1View on unpkg

Source & flagged code

9 flagged · loading source

package.json

omnirush@0.10.13

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code