Loading npm security reports…

perchai-cli@2.4.84: Suspicious npm security report (Warn) | LPM Firewall

registry / perchai-cli / 2.4.84

perchai-cli@2.4.84

Perch AI command-line interface

AI Security Review

scanned 3d ago · by lpm-firewall-ai

When a manual internal Grok model is selected, the CLI reads a foreign Grok credential and configures it for a fixed proxy. This occurs during normal CLI execution, not installation.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Run the CLI with an internal Grok manual-model selection.

Impact

Exposure and misuse of a Grok API credential.

Mechanism

foreign OAuth credential harvesting and proxy submission

Rationale

Source confirms a reachable foreign-credential read followed by use as an API-key override for a fixed proxy. The absence of install hooks limits the trigger but does not remove the credential-exfiltration behavior. Product guard normalized a non-low false-positive publish_block request to warn-only suspicious.

Evidence

package.jsonbin/perchdist/perch.mjs~/.grok/auth.json

Network endpoints1

cli-chat-proxy.grok.com/v1

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence as Malware with medium false-positive risk.

Evidence for warning

The executable bin imports the bundled runtime.

Source & flagged code

12 flagged · loading source

dist/perch.mjsView file

4var VTt=Object.create;var aW=Object.defineProperty;var KTt=Object.getOwnPropertyDescriptor;var $Tt=Object.getOwnPropertyNames;var YTt=Object.getPrototypeOf,XTt=Object.prototype.has... L5: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\xC7\xFC\xE9\xE2\xE4\xE0\xE5\xE7\xEA\xEB\xE8\xEF\xEE... L6: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\xC7\xFC\xE9\xE2\xE4\xE0\u0105\xE7\xEA\xEB\xE8\xEF\x... ... L35: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\xC4\xC5\xC7\xC9\xD1\xD6\xDC\xE1\xE0\xE2\xE4\xE3\xE5... L36: \v\f\r\x1B !"#$%&'()*

Critical

Clipboard Crypto Hijack

Source reads and rewrites clipboard contents matching cryptocurrency wallet addresses.

dist/perch.mjsView on unpkg · L4

316Trigger-reachable chain: manifest.bin -> bin/perch -> dist/perch.mjs L316: `)} L317: `}function OWt(e){let t=H8(String(e??""));return/[",\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}function Q8(e){return new Intl.NumberFormat("en-US",{style:"currency",currency:"USD",... L318: `).trim()}var uO,TQe,FQe=ue(()=>{"use strict";uO=na(lW()),TQe=na(SQe())});async function sue(e){let t=await RQe(e);return await LWt(t.html,t.pdf)||DQe(t.pdf,e),t}async function LWt... L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=JWt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa... L320: `,"utf8")}function Wue(e,t){return!Number.isFinite(e)||!e||e<=0?t:Math.min(500,Math.floor(e))}function gHe(e){return`${e.from}|${e.to}|${e.type}`

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/perch.mjsView on unpkg · L316

318`).trim()}var uO,TQe,FQe=ue(()=>{"use strict";uO=na(lW()),TQe=na(SQe())});async function sue(e){let t=await RQe(e);return await LWt(t.html,t.pdf)||DQe(t.pdf,e),t}async function LWt... L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=JWt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa... L320: `,"utf8")}function Wue(e,t){return!Number.isFinite(e)||!e||e<=0?t:Math.min(500,Math.floor(e))}function gHe(e){return`${e.from}|${e.to}|${e.type}`}function AHe(e){return e?{low:1,me...

High

Child Process

Package source references child process execution.

dist/perch.mjsView on unpkg · L318

317`}function OWt(e){let t=H8(String(e??""));return/[",\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}function Q8(e){return new Intl.NumberFormat("en-US",{style:"currency",currency:"USD",... L318: `).trim()}var uO,TQe,FQe=ue(()=>{"use strict";uO=na(lW()),TQe=na(SQe())});async function sue(e){let t=await RQe(e);return await LWt(t.html,t.pdf)||DQe(t.pdf,e),t}async function LWt... L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=JWt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa... ... L326: `),r=!1;return t.map(n=>/^\s*```/.test(n)?(r=!r,n):r||/^\s*>/.test(n)?n:Qzt(n)).join(` L327: `)}function Qzt(e){let t="",r=!1,n=!1,o=!1;for(let i=0;i<e.length;i+=1){let a=e[i],s=i>0?e[i-1]:"";if(a==="`"){o=!o,t+=a;contin

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/perch.mjsView on unpkg · L317

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/perch.mjs: var VTt=Object.create;var aW=Object.defineProperty;var KTt=Object.getOwnPropertyDescriptor;var $Tt=Object.getOwnPropertyNames;var YTt=Object.getPrototypeOf,XTt=Object.prototype.has... \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8A\x8B\x8C... `)}function GTt(ft){var Ot={};return Qt(Ot,ft),Ot}function qoe(ft,Ot,Et,It){var Ut=It&&It.unsafe;Ut||Qt(ft);var Ht=!Ut&&Io.find(ft,Ot);if(!Ht){var Hr=ft.FullPaths[0];Ot.slice(0,Hr.... `),U.bookType=="fods"?ce.push("</office:document>"):ce.push("</office:docum

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/perch.mjsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/perch.mjs: var VTt=Object.create;var aW=Object.defineProperty;var KTt=Object.getOwnPropertyDescriptor;var $Tt=Object.getOwnPropertyNames;var YTt=Object.getPrototypeOf,XTt=Object.prototype.has... \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8A\x8B\x8C... `)}function GTt(ft){var Ot={};return Qt(Ot,ft),Ot}function qoe(ft,Ot,Et,It){var Ut=It&&It.unsafe;Ut||Qt(ft);var Ht=!Ut&&Io.find(ft,Ot);if(!Ht){var Hr=ft.FullPaths[0];Ot.slice(0,Hr.... `),U.bookType=="fods"?ce.push("</office:document>"):ce.push("</office:document-content>"),ce.joi

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/perch.mjsView on unpkg

316`)} L317: `}function OWt(e){let t=H8(String(e??""));return/[",\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}function Q8(e){return new Intl.NumberFormat("en-US",{style:"currency",currency:"USD",... L318: `).trim()}var uO,TQe,FQe=ue(()=>{"use strict";uO=na(lW()),TQe=na(SQe())});async function sue(e){let t=await RQe(e);return await LWt(t.html,t.pdf)||DQe(t.pdf,e),t}async function LWt... L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=JWt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa... L320: `,"utf8")}function Wue(e,t){return!Number.isFinite(e)||!e||e<=0?t:Math.min(500,Math.floor(e))}function gHe(e){return`${e.from}|${e.to}|${e.type}`}function AHe(e){return e?{low:1,me... ... L326: `),r=!1;return t.map

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/perch.mjsView on unpkg · L316

35\v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\xC4\xC5\xC7\xC9\xD1\xD6\xDC\xE1\xE0\xE2\xE4\xE3\xE5... L36: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8A\x8B\x8C... L37: `)+`\r ... L318: `).trim()}var uO,TQe,FQe=ue(()=>{"use strict";uO=na(lW()),TQe=na(SQe())});async function sue(e){let t=await RQe(e);return await LWt(t.html,t.pdf)||DQe(t.pdf,e),t}async function LWt... L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=JWt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa... L320: `,"utf8")}function W

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/perch.mjsView on unpkg · L35

316Trigger-reachable command-output exfiltration chain: manifest.bin -> bin/perch -> dist/perch.mjs L316: `)} L317: `}function OWt(e){let t=H8(String(e??""));return/[",\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}function Q8(e){return new Intl.NumberFormat("en-US",{style:"currency",currency:"USD",... L318: `).trim()}var uO,TQe,FQe=ue(()=>{"use strict";uO=na(lW()),TQe=na(SQe())});async function sue(e){let t=await RQe(e);return await LWt(t.html,t.pdf)||DQe(t.pdf,e),t}async function LWt... L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=JWt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa... L320: `,"utf8")}function Wue(e,t){return!Number.isFinite(e)||!e||e<=0?t:Math.min(500,Math.floor(e))}function gHe(e){return`

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/perch.mjsView on unpkg · L316

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/perch.mjsView on unpkg

•path = dist/perch.mjs kind = oversized_source_file sizeBytes = 7519381 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/perch.mjsView on unpkg

•path = dist/perch.mjs kind = oversized_cli_entrypoint sizeBytes = 7519381 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/perch.mjsView on unpkg

Source & flagged code

12 flagged

dist/perch.mjsView file

4var VTt=Object.create;var aW=Object.defineProperty;var KTt=Object.getOwnPropertyDescriptor;var $Tt=Object.getOwnPropertyNames;var YTt=Object.getPrototypeOf,XTt=Object.prototype.has... L5: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\xC7\xFC\xE9\xE2\xE4\xE0\xE5\xE7\xEA\xEB\xE8\xEF\xEE... L6: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\xC7\xFC\xE9\xE2\xE4\xE0\u0105\xE7\xEA\xEB\xE8\xEF\x... ... L35: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\xC4\xC5\xC7\xC9\xD1\xD6\xDC\xE1\xE0\xE2\xE4\xE3\xE5... L36: \v\f\r\x1B !"#$%&'()*

Critical

Clipboard Crypto Hijack

Source reads and rewrites clipboard contents matching cryptocurrency wallet addresses.

dist/perch.mjsView on unpkg · L4

316Trigger-reachable chain: manifest.bin -> bin/perch -> dist/perch.mjs L316: `)} L317: `}function OWt(e){let t=H8(String(e??""));return/[",\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}function Q8(e){return new Intl.NumberFormat("en-US",{style:"currency",currency:"USD",... L318: `).trim()}var uO,TQe,FQe=ue(()=>{"use strict";uO=na(lW()),TQe=na(SQe())});async function sue(e){let t=await RQe(e);return await LWt(t.html,t.pdf)||DQe(t.pdf,e),t}async function LWt... L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=JWt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa... L320: `,"utf8")}function Wue(e,t){return!Number.isFinite(e)||!e||e<=0?t:Math.min(500,Math.floor(e))}function gHe(e){return`${e.from}|${e.to}|${e.type}`

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/perch.mjsView on unpkg · L316

318`).trim()}var uO,TQe,FQe=ue(()=>{"use strict";uO=na(lW()),TQe=na(SQe())});async function sue(e){let t=await RQe(e);return await LWt(t.html,t.pdf)||DQe(t.pdf,e),t}async function LWt... L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=JWt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa... L320: `,"utf8")}function Wue(e,t){return!Number.isFinite(e)||!e||e<=0?t:Math.min(500,Math.floor(e))}function gHe(e){return`${e.from}|${e.to}|${e.type}`}function AHe(e){return e?{low:1,me...

High

Child Process

Package source references child process execution.

dist/perch.mjsView on unpkg · L318

317`}function OWt(e){let t=H8(String(e??""));return/[",\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}function Q8(e){return new Intl.NumberFormat("en-US",{style:"currency",currency:"USD",... L318: `).trim()}var uO,TQe,FQe=ue(()=>{"use strict";uO=na(lW()),TQe=na(SQe())});async function sue(e){let t=await RQe(e);return await LWt(t.html,t.pdf)||DQe(t.pdf,e),t}async function LWt... L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=JWt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa... ... L326: `),r=!1;return t.map(n=>/^\s*```/.test(n)?(r=!r,n):r||/^\s*>/.test(n)?n:Qzt(n)).join(` L327: `)}function Qzt(e){let t="",r=!1,n=!1,o=!1;for(let i=0;i<e.length;i+=1){let a=e[i],s=i>0?e[i-1]:"";if(a==="`"){o=!o,t+=a;contin

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/perch.mjsView on unpkg · L317

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/perch.mjs: var VTt=Object.create;var aW=Object.defineProperty;var KTt=Object.getOwnPropertyDescriptor;var $Tt=Object.getOwnPropertyNames;var YTt=Object.getPrototypeOf,XTt=Object.prototype.has... \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8A\x8B\x8C... `)}function GTt(ft){var Ot={};return Qt(Ot,ft),Ot}function qoe(ft,Ot,Et,It){var Ut=It&&It.unsafe;Ut||Qt(ft);var Ht=!Ut&&Io.find(ft,Ot);if(!Ht){var Hr=ft.FullPaths[0];Ot.slice(0,Hr.... `),U.bookType=="fods"?ce.push("</office:document>"):ce.push("</office:docum

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/perch.mjsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/perch.mjs: var VTt=Object.create;var aW=Object.defineProperty;var KTt=Object.getOwnPropertyDescriptor;var $Tt=Object.getOwnPropertyNames;var YTt=Object.getPrototypeOf,XTt=Object.prototype.has... \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8A\x8B\x8C... `)}function GTt(ft){var Ot={};return Qt(Ot,ft),Ot}function qoe(ft,Ot,Et,It){var Ut=It&&It.unsafe;Ut||Qt(ft);var Ht=!Ut&&Io.find(ft,Ot);if(!Ht){var Hr=ft.FullPaths[0];Ot.slice(0,Hr.... `),U.bookType=="fods"?ce.push("</office:document>"):ce.push("</office:document-content>"),ce.joi

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/perch.mjsView on unpkg

316`)} L317: `}function OWt(e){let t=H8(String(e??""));return/[",\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}function Q8(e){return new Intl.NumberFormat("en-US",{style:"currency",currency:"USD",... L318: `).trim()}var uO,TQe,FQe=ue(()=>{"use strict";uO=na(lW()),TQe=na(SQe())});async function sue(e){let t=await RQe(e);return await LWt(t.html,t.pdf)||DQe(t.pdf,e),t}async function LWt... L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=JWt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa... L320: `,"utf8")}function Wue(e,t){return!Number.isFinite(e)||!e||e<=0?t:Math.min(500,Math.floor(e))}function gHe(e){return`${e.from}|${e.to}|${e.type}`}function AHe(e){return e?{low:1,me... ... L326: `),r=!1;return t.map

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/perch.mjsView on unpkg · L316

35\v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\xC4\xC5\xC7\xC9\xD1\xD6\xDC\xE1\xE0\xE2\xE4\xE3\xE5... L36: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8A\x8B\x8C... L37: `)+`\r ... L318: `).trim()}var uO,TQe,FQe=ue(()=>{"use strict";uO=na(lW()),TQe=na(SQe())});async function sue(e){let t=await RQe(e);return await LWt(t.html,t.pdf)||DQe(t.pdf,e),t}async function LWt... L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=JWt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa... L320: `,"utf8")}function W

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/perch.mjsView on unpkg · L35

316Trigger-reachable command-output exfiltration chain: manifest.bin -> bin/perch -> dist/perch.mjs L316: `)} L317: `}function OWt(e){let t=H8(String(e??""));return/[",\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}function Q8(e){return new Intl.NumberFormat("en-US",{style:"currency",currency:"USD",... L318: `).trim()}var uO,TQe,FQe=ue(()=>{"use strict";uO=na(lW()),TQe=na(SQe())});async function sue(e){let t=await RQe(e);return await LWt(t.html,t.pdf)||DQe(t.pdf,e),t}async function LWt... L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=JWt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa... L320: `,"utf8")}function Wue(e,t){return!Number.isFinite(e)||!e||e<=0?t:Math.min(500,Math.floor(e))}function gHe(e){return`

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/perch.mjsView on unpkg · L316

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/perch.mjsView on unpkg

•path = dist/perch.mjs kind = oversized_source_file sizeBytes = 7519381 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/perch.mjsView on unpkg

•path = dist/perch.mjs kind = oversized_cli_entrypoint sizeBytes = 7519381 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/perch.mjsView on unpkg