registry / orlithra-coding-agent / 0.0.2

orlithra-coding-agent@0.0.2

⚠ Under review

Secure coding agent CLI with session management

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 18 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

Manifest

NoLicense

scanned 12 file(s), 3.24 MB of source, external domains: api.orlithra.com, codeload.github.com, developer.couchbase.com, docs.microsoft.com, example.com, gist.githubusercontent.com, github.com, juliadocs.github.io, nodejs.org, support.office.com, tc39.es, web.archive.org, www.gnu.org, www.ibm.com, www.php.net, www.postgresql.org, www.w3.org, yaml.org

Oversized source lightweight scan

dist/bundle/chunk-4YZZGUGQ.js2.76 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsCryptoShellObfuscatedHighEntropyStringsUrlStringsapi.orlithra.com

Source & flagged code

7 flagged

dist/core/export-html/vendor/highlight.min.jsView file

132;const e=this.regexes.map((e=>e[1]));this.matcherRe=n(h(e,{joinWith:"|" L133: }),!0),this.lastIndex=0}exec(e){this.matcherRe.lastIndex=this.lastIndex L134: ;const n=this.matcherRe.exec(e);if(!n)return null

High

Child Process

Package source references child process execution.

dist/core/export-html/vendor/highlight.min.jsView on unpkg · L132

dist/bundle/chunk-4YZZGUGQ.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = orlithra-coding-agent@0.0.1 matchedIdentity = npm:b3JsaXRocmEtY29kaW5nLWFnZW50:0.0.1 similarity = 0.933 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bundle/chunk-4YZZGUGQ.jsView on unpkg

14977const daemonArgs = [ L14978: ...process.execArgv, L14979: entrypoint,

High

Shell

Package source references shell execution.

dist/bundle/chunk-4YZZGUGQ.jsView on unpkg · L14977

43827var import_extract_zip = __toESM(require_extract_zip(), 1); L43828: import { spawnSync as spawnSync4 } from "child_process"; L43829: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync13, mkdirSync as mkdirSync9, readdirSync as readdirSync6, renameSync as renameSync5, rmSync as rmSync7 ... ... L43837: var COMMAND_TIMEOUT_MS = 5e3; L43838: var RIPGREP_INSTALL_URL = "https://github.com/BurntSushi/ripgrep#installation"; L43839: function isOfflineModeEnabled2() { L43840: const value = process.env.ORLITHRA_CODE_OFFLINE; L43841: if (!value)

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bundle/chunk-4YZZGUGQ.jsView on unpkg · L43827

463Cross-file remote execution chain: dist/bundle/chunk-4YZZGUGQ.js spawns dist/bundle/chunk-H32BGHSS.js; helper contains network access plus dynamic code execution. L463: }; L464: var onexit = function(exitCode) { L465: callback.call(stream, exitCode ? new Error("exited with error code: " + exitCode) : null); ... L778: self.pend.go(function(cb) { L779: fs5.write(self.fd, buffer, offset, length, position, function(err, written, buffer2) { L780: cb(); ... L1712: var destroyed = false; L1713: var inflateFilter = zlib.createInflateRaw(); L1714: readStream.on("error", function(err2) { ... L2089: provider: "orlithra-gateway", L2090: baseUrl: "https://api.orlithra.com", L2091: reasoning: false,

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/bundle/chunk-4YZZGUGQ.jsView on unpkg · L463

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bundle/chunk-4YZZGUGQ.jsView on unpkg

dist/bundle/jiti-static-CY6V476M.jsView file

1import { createRequire as __piBundleCreateRequire } from 'node:module'; const require = __piBundleCreateRequire(import.meta.url); L2: import {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bundle/jiti-static-CY6V476M.jsView on unpkg · L1

Source & flagged code

7 flagged · loading source

dist/core/export-html/vendor/highlight.min.jsView file

High

Child Process

Package source references child process execution.

dist/core/export-html/vendor/highlight.min.jsView on unpkg · L132

dist/bundle/chunk-4YZZGUGQ.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bundle/chunk-4YZZGUGQ.jsView on unpkg

Findings

1 Critical5 High4 Medium8 Low

CriticalPrevious Version Dangerous Deltadist/bundle/chunk-4YZZGUGQ.js

HighChild Processdist/core/export-html/vendor/highlight.min.js

HighShelldist/bundle/chunk-4YZZGUGQ.js

HighSame File Env Network Executiondist/bundle/chunk-4YZZGUGQ.js

HighCross File Remote Execution Contextdist/bundle/chunk-4YZZGUGQ.js

HighSemantic Analysis Limiteddist/bundle/chunk-4YZZGUGQ.js

MediumDynamic Requiredist/bundle/jiti-static-CY6V476M.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

Affected versions and remediation

This report applies to orlithra-coding-agent@0.0.2.

See all versions of orlithra-coding-agent for other recorded verdicts.

Review the evidence and your use of orlithra-coding-agent@0.0.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-09 18:44:52.430Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.