registry / pantheon-cli / 0.2.85

pantheon-cli@0.2.85

⚠ Under review

Carry agent conscience between AI coding agents. Hand off a conversation in one agent, resume it in another.

Static Scan Results

scanned 23d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 1.73 MB of source, external domains: github.com, json-schema.org, pantheon-ui-web.vercel.app, raw.githubusercontent.com, www.pantheonvault.space

Source & flagged code

2 flagged

dist/pantheon.mjsView file

•matchType = normalized_sha256 matchedPackage = pantheon-cli@0.2.121 matchedPath = dist/pantheon.mjs matchedIdentity = npm:cGFudGhlb24tY2xp:0.2.121 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/pantheon.mjsView on unpkg

2953sourceCode = this.opts.code.process(sourceCode, sch); L2954: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L2955: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/pantheon.mjsView on unpkg · L2953

Source & flagged code

2 flagged · loading source

dist/pantheon.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/pantheon.mjsView on unpkg

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/pantheon.mjsView on unpkg · L2953

Findings

1 High2 Medium5 Low

HighKnown Malware Source Similaritydist/pantheon.mjs

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEvaldist/pantheon.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to pantheon-cli@0.2.85.

See version security history for other recorded verdicts.

Review the evidence and your use of pantheon-cli@0.2.85 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-16 04:41:09.357Z (UTC).