registry / openzoo / 0.51.23

openzoo@0.51.23

Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.

Static Scan Results

scanned 28d ago · by rust-scanner

Static analysis flagged 26 finding(s) at 97.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 86 file(s), 1.77 MB of source, external domains: 127.0.0.1, api.github.com, api.search.brave.com, api.stripe.com, api.x.com, api2.cursor.sh, arb1.arbitrum.io, basescan.org, buy-sandbox.moonpay.com, buy.moonpay.com, chatgpt.com, claude.ai, developer.x.com, eat.ag, eu.fluxrpc.com, github.com, gitlab.com, html.duckduckgo.com, mainnet.base.org, mainnet.optimism.io, mobile.twitter.com, mobile.x.com, my.telegram.org, openzoo.fun, persistent.oaistatic.com, polygon-rpc.com, raw.githubusercontent.com, registry.npmjs.org, rpc.mainnet.chain.robinhood.com, solscan.io, twitter.com, whop.com, worldchain-mainnet.gateway.tenderly.co, www.npmjs.com, x.com, x402-tokens.fly.dev, zoo.openzoo.fun

Source & flagged code

19 flagged

launcher/chat-visibility.cjsView file

Lines 1-21javascript

1const { execFile } = require('node:child_process');

2const fs = require('node:fs/promises');

High

Child Process

Package source references child process execution.

launcher/chat-visibility.cjsView on unpkg · L1

3function run(file, args) {

4 return new Promise((resolve, reject) => execFile(file, args, { timeout: 1800, windowsHide: true, maxBuffer: 8192 }, (error, stdout) => error ? reject(error) : resolve(stdout.trim

6async function foregroundApp(platform = process.platform) {

7 if (platform === 'darwin') {

8 return JSON.parse(await run('/usr/bin/osascript', ['-l', 'JavaScript', '-e', 'ObjC.import("AppKit"); var a=$.NSWorkspace.sharedWorkspace.frontmostApplication; JSON.stringify({pid:Number(a.processIdentifier),name:ObjC.unwrap(a.bundleIdentifier)||""});']));

9 }

10 if (platform === 'win32') {

11 const script = 'Add-Type -TypeDefinition \'using System; using System.Runtime.InteropServices; public class OZFocus { [DllImport("user32.dll")] public static extern IntPtr GetForegroundWindow(); [DllImport("user32.dll")] public static extern uint GetWindowThreadProcessId(IntPtr h, out uint p); }\'; [uint32]$foregroundPid=0; [void][OZFocus]::GetWindowThreadProcessId([OZFocus]::GetForegroundWindow(),[ref]$foregroundPid); $p=Get-Process -Id $foregroundPid -ErrorAction Stop; @{pid=$foregroundPid;name=$p.ProcessName}|ConvertTo-Json -Compress';

12 return JSON.parse(await run('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', script]));

13 }

14 const pid = Number(await run('xdotool', ['getactivewindow', 'getwindowpid']));

15 return { pid, name: (await fs.readFile(`/proc/${pid}/comm`, 'utf8')).trim() };

16}

17function isChatApp(app) {

18 return /^(com\.openai\.(chat|chatgpt|codex)|chatgpt|codex)$/i.test(app?.name || '');

19}

20function watchChatVisibility(onChange, { read = foregroundApp, ownPid = process.pid, intervalMs = 750 } = {}) {

21 let active = false, busy = false, stopped = false;

bin/claude-zoo.jsView file

Lines 30-85javascript

30function findOcc() {

31 const candidate = join(here, 'occ');

32 if (existsSync(candidate)) return candidate;

33 {

lib/xbot.jsView file

Lines 7-47javascript

7 * just answers is a worse @grok, a reply that prices itself is the pitch.

8 *

9 * WHY THE COMPARISON IS AGAINST A NAMED MODEL, not against savesVsDirect:

lib/worktree.mjsView file

Lines 110-150javascript

110 }

111}

112

113export function githubRepoFromOrigin(originUrl) {

114 const m = /github\.com[:/]([^/]+)

launcher/runtime.cjsView file

Lines 1-22javascript

1const path = require('node:path');

2const fs = require('node:fs/promises');

3const { spawn } = require

lib/aoe.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/aoe.js#virtual:normalized:round1View on unpkg

lib/cursorbackend.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/cursorbackend.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High