Loading npm security reports…
The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools
LPM treats this as warn-only first-party agent extension lifecycle risk. A guarded runtime updater can replace the installed agent plugin and run dependency installation in the OpenCode configuration directory. This establishes an extension lifecycle risk, without a confirmed malicious attack.
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/tools.jsView on unpkgSource appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L110Source downloads or fetches remote code and executes it.
dist/index.jsView on unpkg · L110A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
This report applies to opencode-matrixx@2.6.16.
See version security history for other recorded verdicts.
Evidence last updated: .
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkgSource reaches cloud instance metadata or link-local credential endpoints.
dist/index.jsView on unpkg · L110Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.jsView on unpkg · L110Source exposes local file and command tools to a remote model endpoint.
dist/index.jsView on unpkg · L26260A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/index.jsView on unpkg · L110A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.jsView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/tools.jsView on unpkgSource appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L110Source downloads or fetches remote code and executes it.
dist/index.jsView on unpkg · L110A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkgSource reaches cloud instance metadata or link-local credential endpoints.
dist/index.jsView on unpkg · L110Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.jsView on unpkg · L110Source exposes local file and command tools to a remote model endpoint.
dist/index.jsView on unpkg · L26260A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/index.jsView on unpkg · L110A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.jsView on unpkg