registry / openzoo / 0.50.42

openzoo@0.50.42

Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.

Static Scan Results

scanned 26d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 16 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 53 file(s), 947 KB of source, external domains: 127.0.0.1, api.search.brave.com, api.stripe.com, api.x.com, arb1.arbitrum.io, basescan.org, buy-sandbox.moonpay.com, buy.moonpay.com, claude.ai, developer.x.com, eu.fluxrpc.com, github.com, mainnet.base.org, mainnet.optimism.io, mobile.twitter.com, mobile.x.com, my.telegram.org, openzoo.fun, rpc.mainnet.chain.robinhood.com, solscan.io, twitter.com, whop.com, worldchain-mainnet.gateway.tenderly.co, www.npmjs.com, x.com, x402-tokens.fly.dev, zoo.openzoo.fun

Source & flagged code

10 flagged

bin/claude-zoo.jsView file

Lines 1-69javascript

1#!/usr/bin/env node

2/**

3 * `claude` — the openzoo-backed Claude Code command.

4 *

5 * Replaces the raw occ launcher. Same binary, but every request goes through

6 * the local openzoo proxy on :8402 (x402 per-call payment, no Anthropic

7 * subscription, no login):

8 *

9 * - starts the proxy if it is not already listening

10 * - applies claudeZooEnv(): ANTHROPIC_BASE_URL=localhost:PORT/v1,

11 * AUTH_TOKEN=sk-openzoo, ANTHROPIC_API_KEY deleted, compaction disabled

12 * (the proxy binds the prefix), 1M-token ceiling restored

13 * - execs occ (open-claude-code) with your original argv

14 *

15 * The old direct-to-Anthropic-capable launcher is preserved as

16 * `claude-code-cli` (same directory, symlinked to occ).

17 */

18import { spawn } from 'node:child_process';

19import { existsSync, readdirSync as fsReaddir } from 'node:fs';

High

Child Process

Package source references child process execution.

bin/claude-zoo.jsView on unpkg · L17

20import { homedir, platform } from 'node:os';

21import { dirname, join, sep } from 'node:path';

22import { fileURLToPath } from 'node:url';

24const here = dirname(fileURLToPath(import.meta.url));

25const shimRoot = dirname(here);

27// occ lives beside us (nvm bin/occ) or, if this wrapper is copied elsewhere,

28// we fall back to searching the nvm tree we were installed from.

29function findOcc() {

30 const candidate = join(here, 'occ');

31 if (existsSync(candidate)) return candidate;

32 {

33 const versions = join(homedir(), '.nvm', 'versions', 'node');

34 try {

35 for (const v of fsReaddir(versions).sort().reverse()) {

36 const p = join(versions, v, 'bin', 'occ');

37 if (existsSync(p)) return p;

38 }

39 } catch { /* fall through */ }

40 }

41 return null;

42}

44const occ = findOcc();

45if (!occ) {

46 console.error('claude: cannot find occ (open-claude-code) next to this wrapper.');

47 process.exit(1);

48}

50const PROXY_PORT = Number(process.env.OPENZOO_PROXY_PORT || 8402);

51const PROXY_URL = `http://localhost:${PROXY_PORT}/v1`;

53async function proxyUp() {

54 try {

55 const r = await fetch(`http://localhost:${PROXY_PORT}/v1/info`, { signal: AbortSignal.timeout(1500) });

56 return r.ok;

57 } catch { return false; }

58}

60async function ensureProxy() {

61 if (await proxyUp()) return PROXY_URL;

62 console.error(`claude: starting openzoo proxy on :${PROXY_PORT} ...`);

63 const entry = join(shimRoot, 'bin', 'openzoo.js');

64 const child = spawn(process.execPath, [entry, 'proxy'], {

65 detached: true,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/claude-zoo.jsView on unpkg · L49

66 stdio: 'ignore',

67 env: process.env,

68 });

69 child.unref();

lib/hosts.jsView file

Lines 148-188javascript

148 // This block predates Grok Bot existing, so it never knew to warn.

149 if (!process.env.OPENZOO_FORCE_BLOCK && fs.existsSync('/Applications/Grok Bot.app')) {

150 console.log('');

151 console.log('REFUSING to block the editor backend: Grok Bot is installed.'

lib/xbot.jsView file

Lines 6-46javascript

6 * would have cost on OpenRouter. That receipt is the product — a reply that

7 * just answers is a worse @grok, a reply that prices itself is the pitch.

8 *

9 * WHY THE COMPARISON IS AGAINST A NAMED

lib/cursorcfg.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 10

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/cursorcfg.js#virtual:normalized:round1View on unpkg

lib/tunnel.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/tunnel.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/tunnel.jsView on unpkg

lib/claudecode.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/claudecode.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/claudecode.jsView on unpkg

lib/livestatus.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/livestatus.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/livestatus.jsView on unpkg

lib/spendProof.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/spendProof.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/spendProof.jsView on unpkg

lib/grokbotweb.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = openzoo@0.51.29 matchedIdentity = npm:b3Blbnpvbw:0.51.29 similarity = 0.472 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/grokbotweb.jsView on unpkg

openzoo@0.50.42

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code