registry / openzoo / 0.51.4

openzoo@0.51.4

Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental. `openzoo build|

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 29 finding(s) at 97.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 92 file(s), 2.04 MB of source, external domains: 127.0.0.1, api.devnet.solana.com, api.github.com, api.search.brave.com, api.stripe.com, api.testnet.solana.com, api.x.com, api2.cursor.sh, arb1.arbitrum.io, basescan.org, buy-sandbox.moonpay.com, buy.moonpay.com, chatgpt.com, claude.ai, developer.x.com, eu.fluxrpc.com, github.com, gitlab.com, html.duckduckgo.com, hub.local, mainnet.base.org, mainnet.optimism.io, mobile.twitter.com, mobile.x.com, my.telegram.org, openzoo.fun, raw.githubusercontent.com, release.anza.xyz, rpc.mainnet.chain.robinhood.com, solscan.io, twitter.com, whop.com, worldchain-mainnet.gateway.tenderly.co, www.npmjs.com, x.com, x402-tokens.fly.dev, zoo.openzoo.fun, zoo.sol

Source & flagged code

22 flagged

bin/claude-zoo.jsView file

Lines 1-85javascript

1#!/usr/bin/env node

2/**

3 * `claude` — the openzoo-backed Claude Code command.

4 *

5 * Replaces the raw occ launcher. Same binary, but every request goes through

6 * the local openzoo proxy on :8402 (x402 per-call payment, no Anthropic

7 * subscription, no login):

8 *

9 * - starts the proxy if it is not already THIS version on :8402 (steals stale)

10 * - applies claudeZooEnv(): ANTHROPIC_BASE_URL=localhost:PORT/v1,

11 * AUTH_TOKEN=sk-openzoo, ANTHROPIC_API_KEY deleted, compaction disabled

12 * (the proxy binds the prefix), 1M-token ceiling restored

13 * - execs occ (open-claude-code) with your original argv

14 *

15 * The old direct-to-Anthropic-capable launcher is preserved as

16 * `claude-code-cli` (same directory, symlinked to occ).

17 */

18import { spawn } from 'node:child_process';

19import { existsSync, readdirSync as fsReaddir, readFileSync } from 'node:fs';

High

Child Process

Package source references child process execution.

bin/claude-zoo.jsView on unpkg · L17

20import { execSync } from 'node:child_process';

21import { homedir, platform } from 'node:os';

22import { dirname, join, sep } from 'node:path';

23import { fileURLToPath } from 'node:url';

25const here = dirname(fileURLToPath(import.meta.url));

26const shimRoot = dirname(here);

28// occ lives beside us (nvm bin/occ) or, if this wrapper is copied elsewhere,

29// we fall back to searching the nvm tree we were installed from.

30function findOcc() {

31 const candidate = join(here, 'occ');

32 if (existsSync(candidate)) return candidate;

33 {

34 const versions = join(homedir(), '.nvm', 'versions', 'node');

35 try {

36 for (const v of fsReaddir(versions).sort().reverse()) {

37 const p = join(versions, v, 'bin', 'occ');

38 if (existsSync(p)) return p;

39 }

40 } catch { /* fall through */ }

41 }

42 return null;

43}

45const occ = findOcc();

46if (!occ) {

47 console.error('claude: cannot find occ (open-claude-code) next to this wrapper.');

48 process.exit(1);

49}

51const PROXY_PORT = Number(process.env.OPENZOO_PROXY_PORT || 8402);

52const PROXY_URL = `http://localhost:${PROXY_PORT}/v1`;

54function mineVersion() {

55 try {

56 return JSON.parse(readFileSync(join(shimRoot, 'package.json'), 'utf8')).version;

57 } catch { return ''; }

58}

60function stealPort(port) {

61 const n = Number(port);

62 for (const cmd of [

63 `lsof -t -iTCP:${n} -sTCP:LISTEN | xargs kill -9`,

64 `fuser -k ${n}/tcp`,

65 ]) {

66 try { execSync(cmd, { stdio: 'ignore', timeout: 2000, shell: true }); } catch { /* missing */ }

67 }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/claude-zoo.jsView on unpkg · L50

High

Shell

Package source references shell execution.

bin/claude-zoo.jsView on unpkg · L65

68}

70async function proxyUp() {

71 try {

72 const r = await fetch(`http://localhost:${PROXY_PORT}/v1/info`, { signal: AbortSignal.timeout(1500) });

73 if (!r.ok) return false;

74 const j = await r.json().catch(() => ({}));

75 const mine = mineVersion();

76 if (mine && String(j.version || '') !== mine) {

77 console.error(`claude: stale proxy v${j.version || '?'} on :${PROXY_PORT} — stealing for v${mine}`);

78 stealPort(PROXY_PORT);

79 return false;

80 }

81 return true;

82 } catch { return false; }

83}

85async function ensureProxy() {

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = bin/claude-zoo.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/claude-zoo.jsView on unpkg

transmute/lib/eligibility.jsView file

Lines 99-139javascript

99 'undefined', 'NaN', 'Infinity', 'Math', 'JSON', 'Object', 'Array', 'Number', 'String', 'Boolean', 'parseInt', 'parseFloat',

100 'isNaN'

lib/xbot.jsView file

Lines 6-46javascript

6 * would have cost on OpenRouter. That receipt is the product — a reply that

7 * just answers is a worse @grok, a reply that prices itself is the pitch.

8 *

9 * WHY THE COMPARISON IS AGAINST A NAMED

lib/worktree.mjsView file

Lines 110-150javascript

110 }

111}

112

113export function githubRepoFromOrigin(originUrl) {

114 const m = /github\.com[:/]([^/]+)

bin/openzoo.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

2// NODE >=18 OR NOTHING — AND HEAL IT IF WE CAN.

3//

4// package.json says engines >=18 but npm only WARNS, so an old node walked

5// straight in and died somewhere useless: there is no global `fetch` before 18,

6// so the very first probe threw, a bare `catch` swallowed it, and the user was

7// left staring at "starting the proxy in the background..." forever with no

8// error to report. Reported from the wild on macOS.

9//

10// Detect-and-exit is not enough when the machine usually HAS a good node sitting

lib/chatgpt.jsView file

Lines 202-242javascript

202 else throw new Error('need bsdtar (libarchive) or ar (binutils) to unpack a .deb');

203 const data = fs.readdirSync(outer).find((n) => /^data

transmute/prebuilt/zoo_vm.v0.soView file

•path = transmute/prebuilt/zoo_vm.v0.so kind = native_binary sizeBytes = 313584 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

transmute/prebuilt/zoo_vm.v0.soView on unpkg

lib/aoe.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 12

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/aoe.js#virtual:normalized:round1View on unpkg

lib/cursorbackend.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/cursorbackend.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/cursorbackend.jsView on unpkg

lib/aoe.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/aoe.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/aoe.jsView on unpkg

lib/grokbotweb.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/grokbotweb.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/grokbotweb.jsView on unpkg

lib/grokcli.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/grokcli.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/grokcli.jsView on unpkg

lib/grokui.mjsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/grokui.mjs matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/grokui.mjsView on unpkg

lib/launch.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/launch.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/launch.jsView on unpkg

lib/setup.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/setup.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/setup.jsView on unpkg

lib/tunnel.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/tunnel.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/tunnel.jsView on unpkg

transmute/lib/build.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = transmute/lib/build.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

transmute/lib/build.jsView on unpkg

lib/grokbotFetch.jsView file

•matchType = normalized_sha256 matchedPackage = openzoo@0.51.3 matchedPath = lib/grokbotFetch.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/grokbotFetch.jsView on unpkg

lib/proxy.jsView file

•matchType = token_shingles matchedPackage = openzoo@0.51.3 matchedPath = lib/proxy.js matchedIdentity = npm:b3Blbnpvbw:0.51.3 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/proxy.jsView on unpkg

openzoo@0.51.4

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code