registry / phantomx-tool-client / 1.1.5

phantomx-tool-client@1.1.5

Self-hosted tool-server client that connects to a remote orchestration server and executes tools locally

Static Scan Results

scanned 13d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 9 file(s), 193 KB of source, external domains: api.github.com, github.com

Source & flagged code

5 flagged

dist/githubOperationsHanlder.jsView file

Lines 734-774javascript

734 return {

735 repoName,

736 branchName: currentBranch,

737 commitHash,

738 commitsAhead,

739 pushedAt: new Date().toISOString()

740 };

741 }

742 finally {

743 }

744 }); // end withRepoLock

745 }

746 /**

747 * Check repository status

748 */

749 async checkRepositoryStatus(repoName, socket) {

750 const repoPath = `${tool_server_1.folderPath}/${repoName}`;

751 const installationToken = await fetchInstallationToken();

752 const gitOrgName = await getGithubOrganizationName();

753 // const repoPath = 'mnt/f/PhantomX-workspace/93943752-2576-44ee-9b57-4b6fb3130fe4/AI_CODER_REMOTE'

754 // const installationToken = "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";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/githubOperationsHanlder.jsView on unpkg · L754

Critical

Secret Pattern

GitHub personal access token in dist/githubOperationsHanlder.js

dist/githubOperationsHanlder.jsView on unpkg · L754

755 // const gitOrgName = "AI-PLAYGROUNDS";

756 return withRepoLock(repoName, async () => {

757 try {

758 logger.info('Checking repository status', { repoName });

759 // Combine all git commands into a single SSH call

760 // Remove any stale .git/config.lock before touching remote config

761 // (a crashed/interrupted previous run can leave this lock behind).

762 // Also avoid sudo for git remote set-url so the lock file is never

763 // created as root-owned, which would block subsequent cleanup.

764 const combinedCommand = `

765 cd ${repoPath} &&

766 rm -f .git/config.lock &&

767 BRANCH=$(sudo git rev-parse --abbrev-ref HEAD) &&

768 git remote set-url origin https://x-access-token:${installationToken}@github.com/${gitOrgName}/${repoName}.git &&

769 sudo git fetch origin &&

770 git remote set-url origin https://github.com/${gitOrgName}/${repoName}.git &&

771 BEHIND=$(sudo git rev-list --count HEAD..origin/$BRANCH 2>/dev/null || echo 0) &&

772 AHEAD=$(sudo git rev-list --count origin/$BRANCH..HEAD 2>/dev/null || echo 0) &&

773 STATUS=$(sudo git status --porcelain) &&

774 CURRENT_HASH=$(sudo git rev-parse HEAD) &&

•matchType = previous_version_dangerous_delta matchedPackage = phantomx-tool-client@1.1.3 matchedIdentity = npm:cGhhbnRvbXgtdG9vbC1jbGllbnQ:1.1.3 similarity = 0.778 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/githubOperationsHanlder.jsView on unpkg

bin/tool-server.jsView file

Lines 1-17javascript

1#!/usr/bin/env node

3'use strict';

5// Load environment variables from .env if present (works both globally installed and locally)

6const path = require('path');

7const fs =

package.jsonView file

Lines 1-35json

2 "name": "phantomx-tool-client",

3 "version": "1.1.5",

4 "description": "Self-hosted tool-server client that connects to a remote orchestration server and executes tools locally",

5 "main": "dist/tool-server.js",

Source & flagged code

5 flagged · loading source

dist/githubOperationsHanlder.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code