registry / omnirush / 0.10.7

omnirush@0.10.7

⚠ Under review

Omnirush — free daily tokens for the most powerful coding model on earth.

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 18 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 85 file(s), 2.06 MB of source, external domains: github.com, html.duckduckgo.com, json-schema.org, omnirush.ai, pi.dev, raw.githubusercontent.com, registry.npmjs.org

Source & flagged code

10 flagged

package.jsonView file

Lines 1-38json

2 "name": "omnirush",

3 "version": "0.10.7",

4 "description": "Omnirush — free daily tokens for the most powerful coding model on earth.",

5 "license": "Apache-2.0",

6 "type": "module",

7 "bin": {

8 "omnirush": "src/bin.js"

9 },

10 "engines": {

11 "node": ">=22.19.0"

12 },

13 "scripts": {

14 "test": "node --test",

15 "test:bun": "if [ -x .runtime/bin/bun ]; then .runtime/bin/bun test --timeout 300000 test/; else bun test --timeout 300000 test/; fi",

16 "build:mcp": "node scripts/build-mcp-bundle.js",

17 "build:capture-vendor": "node scripts/build-capture-vendor.js",

18 "postinstall": "node scripts/brand-engine.js && node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L18

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L18

19 },

20 "dependencies": {

21 "@earendil-works/pi-coding-agent": "0.86.1"

22 },

23 "repository": {

24 "type": "git",

25 "url": "git+https://github.com/omnirush-ai/omnirush-cli.git"

26 },

27 "keywords": [

28 "omnirush",

29 "ai",

30 "coding-agent",

31 "cli"

32 ],

33 "files": [

34 "src",

35 "assets",

36 "scripts",

37 "README.md"

38 ],

scripts/postinstall.jsView file

Lines 1-31javascript

1// Postinstall runtime fetcher:

2// 1. bun (v1.4.2) — required; the agent core runs on it.

3// 2. fd (v10.5.0) — optional; the agent's file search + autocomplete.

4// 3. rg (v15.2.0) — optional; the agent's content search.

5//

6// Binaries land in .runtime/bin/ (per-platform release packages ship the

7// same layout prebuilt). The launcher copies fd/rg into the agent's

8// managed-bin dir on every run, so the agent never attempts its own

9// GitHub download at startup (which fails on restricted networks and

10// repeats on every launch). fd/rg failures are warnings: search degrades

assets/extensions/omnirush/mcp-client.bundle.jsView file

2953sourceCode = this.opts.code.process(sourceCode, sch); L2954: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L2955: const validate2 = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

assets/extensions/omnirush/mcp-client.bundle.jsView on unpkg · L2953

assets/extensions/omnirush/voice/pvrecorder-worker.cjsView file

Lines 1-26javascript

1// Worker thread for @picovoice/pvrecorder-node (see capture.ts NativeSource).

2// PvRecorder.read() blocks until a 32 ms frame is ready, so it runs here and

3// posts each frame (16 kHz mono int16) to the main thread. Nothing is

4// written to disk; frames are transferred, not kept.

5"use strict";

7const { parentPort, workerData } = require(

src/bin.js#virtual:normalized:round1View file

17// OMNIRUSH_ORIGIN manager origin override (default L18: // https://omnirush.ai/omnirush) L19: // OMNIRUSH_GATEWAY_URL provider base URL override ({origin}/v1) ... L30: // muse-spark-1.1 (`--model gpt-6-sol` or OMNIRUSH_MODEL=gpt-6-sol), refreshed L31: // from the gateway"s GET /v1/models at launch. The sota extension watches every response,\n// refreshes the device token single-flight on 401 (retry once), and\n// warns on stderr... L32: // extensions): <state dir>/agent, or OMNIRUSH_AGENT_DIR. Releases up to L33: // 0.8.x used the core"s upstream default folder; ensureDirs() copies it\n// over once (src/compat.js) and falls back to it for a run whose copy failed.\nconst AGENT = resolveAgent... L34: // folder (src/compat.js ensureEngineLink); null wh

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/bin.js#virtual:normalized:round1View on unpkg · L17

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

scripts/package.shView file

•path = scripts/package.sh kind = build_helper sizeBytes = 1208 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/package.shView on unpkg

assets/extensions/omnirush/engine-messages.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

assets/extensions/omnirush/engine-messages.ts#virtual:normalized:round1View on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/brand-engine.js && node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/brand-engine.js && node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.jsView file

11// gracefully without them. A bun failure stays fatal. L12: import { execFileSync } from "node:child_process"; L13: import fs from "node:fs";

High

Child Process

Package source references child process execution.

scripts/postinstall.jsView on unpkg · L11

assets/extensions/omnirush/mcp-client.bundle.jsView file

Low

Eval

Package source references a known benign dynamic code generation pattern.

assets/extensions/omnirush/mcp-client.bundle.jsView on unpkg · L2953

assets/extensions/omnirush/voice/pvrecorder-worker.cjsView file

6L7: const { parentPort, workerData } = require("node:worker_threads"); L8:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

assets/extensions/omnirush/voice/pvrecorder-worker.cjsView on unpkg · L6

src/bin.js#virtual:normalized:round1View file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/bin.js#virtual:normalized:round1View on unpkg · L17

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

src/bin.js#virtual:normalized:round1View on unpkg · L17

17Trigger-reachable command-output exfiltration chain: manifest.bin -> src/bin.js L17: // OMNIRUSH_ORIGIN manager origin override (default L18: // https://omnirush.ai/omnirush) L19: // OMNIRUSH_GATEWAY_URL provider base URL override ({origin}/v1) ... L30: // muse-spark-1.1 (`--model gpt-6-sol` or OMNIRUSH_MODEL=gpt-6-sol), refreshed L31: // from the gateway"s GET /v1/models at launch. The sota extension watches every response,\n// refreshes the device token single-flight on 401 (retry once), and\n// warns on stderr... L32: // extensions): <state dir>/agent, or OMNIRUSH_AGENT_DIR. Releases up to L33: // 0.8.x used the core"s upstream default folder; ensureDirs() copies it\n// over once (src/compat.js) and falls back to it for a run whose copy failed.\nconst

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

src/bin.js#virtual:normalized:round1View on unpkg · L17

scripts/package.shView file

•path = scripts/package.sh kind = build_helper sizeBytes = 1208 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/package.shView on unpkg

assets/extensions/omnirush/engine-messages.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

assets/extensions/omnirush/engine-messages.ts#virtual:normalized:round1View on unpkg

Findings

6 High6 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processscripts/postinstall.js

HighSame File Env Network Executionsrc/bin.js#virtual:normalized:round1

HighCommand Output Exfiltrationsrc/bin.js#virtual:normalized:round1

HighTrigger Reachable Command Output Exfiltrationsrc/bin.js#virtual:normalized:round1

HighSemantic Analysis Limitedassets/extensions/omnirush/engine-messages.ts#virtual:normalized:round1

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requireassets/extensions/omnirush/voice/pvrecorder-worker.cjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/package.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvalassets/extensions/omnirush/mcp-client.bundle.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Affected versions and remediation

This report applies to omnirush@0.10.7.

See version security history for other recorded verdicts.

Review the evidence and your use of omnirush@0.10.7 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-29 04:39:20.181Z (UTC).