registry / pantheon-cli / 0.2.64

pantheon-cli@0.2.64

⚠ Under review

Carry agent conscience between AI coding agents. Hand off a conversation in one agent, resume it in another.

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 1.69 MB of source, external domains: github.com, json-schema.org, pantheon-ui-web.vercel.app, raw.githubusercontent.com, www.pantheonvault.space

Source & flagged code

2 flagged

dist/pantheon.mjsView file

•matchType = normalized_sha256 matchedPackage = pantheon-cli@0.2.121 matchedPath = dist/pantheon.mjs matchedIdentity = npm:cGFudGhlb24tY2xp:0.2.121 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/pantheon.mjsView on unpkg

2953sourceCode = this.opts.code.process(sourceCode, sch); L2954: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L2955: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/pantheon.mjsView on unpkg · L2953

Source & flagged code

2 flagged · loading source

dist/pantheon.mjsView file

pantheon-cli@0.2.64

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code