registry / prjct-cli / 3.44.0

prjct-cli@3.44.0

Project memory and workflow context for AI coding agents.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 20 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 7 file(s), 3.68 MB of source, external domains: 127.0.0.1, ai.google.dev, api.openai.com, api.voyageai.com, bun.sh, cli-api.prjct.app, cli.github.com, cli.prjct.app, cursor.com, docs.anthropic.com, docs.windsurf.com, gemini.google.com, geminicli.com, git-scm.com, github.com, keepachangelog.com, mcp.atlassian.com, mcp.linear.app, nodejs.org, openai.com, openrouter.ai, prjct.app, raw.githubusercontent.com, registry.npmjs.org, semver.org, windsurf.com, www.anthropic.com, www.prjct.app

Source & flagged code

11 flagged

bin/prjct.cjsView file

Lines 1-30javascript

1#!/usr/bin/env node

3/**

4 * Portable package-manager entry point for prjct.

5 *

6 * npm/pnpm/yarn/bun generate Windows shims correctly for node shebangs, but

7 * not for the historical bin/prjct POSIX shell launcher. Keep this file tiny

8 * and dependency-free so global installs work on macOS, Linux, and Windows.

9 */

11const childProcess = require('node:child_process')

12const fs = require('node:fs')

High

Child Process

Package source references child process execution.

bin/prjct.cjsView on unpkg · L10

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/prjct.cjsView on unpkg · L10

13const os = require('node:os')

14const path = require('node:path')

15const url = require('node:url')

17const SCRIPT_PATH = fs.realpathSync(__filename)

18const SCRIPT_DIR = path.dirname(SCRIPT_PATH)

19const ROOT_DIR = path.resolve(SCRIPT_DIR, '..')

20const HOME = process.env.HOME || process.env.USERPROFILE || os.homedir()

21const CLI_HOME = process.env.PRJCT_CLI_HOME

22 ? path.resolve(process.env.PRJCT_CLI_HOME)

23 : path.join(HOME, '.prjct-cli')

24const SETUP_STAMP_PATH = path.join(CLI_HOME, 'state', 'setup-version.json')

26function pathEntries() {

27 return (process.env.PATH || '').split(path.delimiter).filter(Boolean)

28}

30function executableCandidates(command) {

dist/bin/prjct-hooks.mjsView file

9`;await Ze.writeFile(t,s,"utf-8")})}async function lt(t,e=""){try{return await Ze.readFile(t,"utf-8")}catch(n){if(X(n))return e;throw n}}async function pn(t,e){await Lc(t,"file",as... L10: `).map(a=>a.replace(/^\s*-\s*['"]?|['"]?\s*$/g,"")).filter(Boolean))}else if(e==="npm"||e==="lerna"){let s=Xe.join(t,"package.json"),i=JSON.parse(await Tr.readFile(s,"utf-8"));if(A... L11: -- =======================================================================

High

Shell

Package source references shell execution.

dist/bin/prjct-hooks.mjsView on unpkg · L9

8var ji=Object.defineProperty;var uR=Object.getOwnPropertyDescriptor;var dR=Object.getOwnPropertyNames;var pR=Object.prototype.hasOwnProperty;var o=(t,e)=>ji(t,"name",{value:e,confi... L9: `;await Ze.writeFile(t,s,"utf-8")})}async function lt(t,e=""){try{return await Ze.readFile(t,"utf-8")}catch(n){if(X(n))return e;throw n}}async function pn(t,e){await Lc(t,"file",as... L10: `).map(a=>a.replace(/^\s*-\s*['"]?|['"]?\s*$/g,"")).filter(Boolean))}else if(e==="npm"||e==="lerna"){let s=Xe.join(t,"package.json"),i=JSON.parse(await Tr.readFile(s,"utf-8"));if(A... L11: -- =======================================================================

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin/prjct-hooks.mjsView on unpkg · L8

dist/bin/prjct-core.mjsView file

5var __filename = __fileURLToPath(import.meta.url); L6: var __dirname = __pathDirname(__filename); L7: var yF=Object.create;var Sa=Object.defineProperty;var wF=Object.getOwnPropertyDescriptor;var kF=Object.getOwnPropertyNames;var EF=Object.getPrototypeOf,vF=Object.prototype.hasOwnPr... L8: `,"utf-8"),ou=n,Pf=zS(au())}function en(n){return Nf()[n]}function YS(){return Nf()}function Ye(n,e){let t=Nf();e===void 0?delete t[n]:t[n]=e,AF(t)}function QS(n){Ye(n,void 0)}func... L9: `)}catch{}return o}async function lu(){try{let n=new AbortController,e=setTimeout(()=>n.abort(),6e3),t=await fetch(IF,{signal:n.signal});if(clearTimeout(e),!t.ok)return null;let r=... L10: `)}catch{}}var sT,oT,DF,iT,HF,Lf=h(()=>{"use strict";Rr();xr();cu();Df();sT=OF(NF),oT=a(()=>_a.join(Ct(),"state"),"stateDir"),DF=a(()=>_a.join(oT(),"auto-update.log"),"logPath"),iT... ... L13: `)} L14: `}function gT(n){return`${["","# p/ \u2014 Context layer for AI agents","","Skills auto-activate for: work, intent, ship, sync, guar... L15: `)} ... L19: alwaysApply: true`),"buildCursorRule"),ET=a(()=>wT(`trigger: always_on L20: description: "prjct \u2014 pull project memory +

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/bin/prjct-core.mjsView on unpkg · L5

5Cross-file remote execution chain: dist/bin/prjct-core.mjs spawns dist/daemon/entry.mjs; helper contains network access plus dynamic code execution. L5: var __filename = __fileURLToPath(import.meta.url); L6: var __dirname = __pathDirname(__filename); L7: var yF=Object.create;var Sa=Object.defineProperty;var wF=Object.getOwnPropertyDescriptor;var kF=Object.getOwnPropertyNames;var EF=Object.getPrototypeOf,vF=Object.prototype.hasOwnPr... L8: `,"utf-8"),ou=n,Pf=zS(au())}function en(n){return Nf()[n]}function YS(){return Nf()}function Ye(n,e){let t=Nf();e===void 0?delete t[n]:t[n]=e,AF(t)}function QS(n){Ye(n,void 0)}func... L9: `)}catch{}return o}async function lu(){try{let n=new AbortController,e=setTimeout(()=>n.abort(),6e3),t=await fetch(IF,{signal:n.signal});if(clearTimeout(e),!t.ok)return null;let r=... L10: `)}catch{}}var sT,oT,DF,iT,HF,Lf=h(()=>{"use strict";Rr();xr();cu();Df();sT=OF(NF),oT=a(()=>_a.join(Ct(),"state"),"stateDir"),DF=a(()=>_a.join(oT(),"auto-update.log"),"logPath"),iT... ... L13: `)} L14: `}function gT(n){return`${["","# p/ \u2014 Context layer for AI agents","","Skills auto-activate for: work, intent, ship, sync, g…

dist/bin/prjct.mjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2import{connect}from"node:net";import{existsSync}from"node:fs";import{createHash,randomUUID}from"node:crypto";import{homedir}from"node:os";import{join,resolve}from"node:path";

3const cliHome=process.env.PRJCT_CLI_HOME?resolve(process.env.PRJCT_CLI_HOME

dist/daemon/entry.mjsView file

6var __filename = __fileURLToPath(import.meta.url); L7: var __dirname = __pathDirname(__filename); L8: var ic=Object.defineProperty;var a0=Object.getOwnPropertyDescriptor;var c0=Object.getOwnPropertyNames;var l0=Object.prototype.hasOwnProperty;var a=(n,e)=>ic(n,"name",{value:e,confi... L9: `)}function y0(){lc({})}async function iE(n){try{await n()}catch{y0()}}function aE(n,e=8){let t=ac(n.replace(/([a-z0-9])([A-Z])/g,"$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g,"$1 $2"))... L10: \u2026 [truncated]`){if(n.length<=e)return n;let r=Math.max(0,e-t.length),s=n.charCodeAt(r-1);return s>=55296&&s<=56319&&(r-=1),n.slice(0,Math.max(0,r))+t}function hp(n,e){if(!e)re... L11: `;await Ot.writeFile(n,s,"utf-8")})}async function Qt(n,e=""){try{return await Ot.readFile(n,"utf-8")}catch(t){if(Q(t))return e;throw t}}async function fr(n,e){await Sp(n,"file",as... L12: `).map(i=>i.replace(/^\s*-\s*['"]?|['"]?\s*$/g,"")).filter(Boolean))}else if(e==="npm"||e==="lerna"){let s=vt.join(n,"package.json"),o=JSON.parse(await Bs.readFile(s,"utf-8"));if(A... L13: -- ======================================================================= ... L1370: `).trim()}var Cm=h(()=>{"use strict";hi();Vs();pe();a(Tm,"breakI

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/daemon/entry.mjsView on unpkg · L6

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 17075 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg

Source & flagged code

11 flagged · loading source

bin/prjct.cjsView file

10L11: const childProcess = require('node:child_process') L12: const fs = require('node:fs')

High

Child Process

Package source references child process execution.

bin/prjct.cjsView on unpkg · L10

10L11: const childProcess = require('node:child_process') L12: const fs = require('node:fs')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/prjct.cjsView on unpkg · L10

dist/bin/prjct-hooks.mjsView file

High

Shell

Package source references shell execution.

dist/bin/prjct-hooks.mjsView on unpkg · L9

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin/prjct-hooks.mjsView on unpkg · L8

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bin/prjct-hooks.mjsView on unpkg · L9

dist/bin/prjct-core.mjsView file

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/bin/prjct-core.mjsView on unpkg · L5

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/bin/prjct-core.mjsView on unpkg · L5

2558`,"utf-8"),await un.writeFile(o,Bl(i),"utf-8"),await un.writeFile(gt.join(t,"latest-comparison.json"),`${JSON.stringify(i,null,2)} L2559: `,"utf-8"),i}function kf(n){let e=n.repo.replace(/[^a-zA-Z0-9_.-]+/g,"-").replace(/^-+|-+$/g,"")||"unknown";return gt.join(Ct(),"evals",e)}async function nS(n){try{return Zb.parse(... L2560: Project: \`${s.projectId}\`

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/bin/prjct-core.mjsView on unpkg · L2558

dist/bin/prjct.mjsView file

2import{connect}from"node:net";import{existsSync}from"node:fs";import{createHash,randomUUID}from"node:crypto";import{homedir}from"node:os";import{join,resolve}from"node:path"; L3: const cliHome=process.env.PRJCT_CLI_HOME?resolve(process.env.PRJCT_CLI_HOME):join(homedir(),".prjct-cli"); L4: const namedPipe=process.platform==="win32"; L5: const sockPath=namedPipe?"\\.\pipe\prjct-"+createHash("sha1").update(resolve(cliHome)).digest("hex").slice(0,16)+"-daemon":join(cliHome,"run","daemon.sock"); ... L20: const sock=connect(sockPath);let buf="",done=false; L21: const soft=()=>{if(!done){done=true;clearTimeout(t);sock.destroy();process.stdout.write("{}\n");process.exit(0)}}; L22: const t=setTimeout(soft,5000); L23: sock.on("connect",()=>sock.write(msg)); L24: sock.on("data",c=>{buf+=c.toString();const n=buf.indexOf("\n");if(n!==-1){const r=JSON.parse(buf.slice(0,n));if(r.retry){soft();return}done=true;clearTimeout(t);sock.end();if(r.std... L25: sock.on("error",soft);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/bin/prjct.mjsView on unpkg · L2

dist/daemon/entry.mjsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/daemon/entry.mjsView on unpkg · L6

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 17075 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg

Findings

7 High6 Medium7 Low

HighChild Processbin/prjct.cjs

HighShelldist/bin/prjct-hooks.mjs

HighSame File Env Network Executiondist/bin/prjct-hooks.mjs

HighCommand Output Exfiltrationdist/bin/prjct-hooks.mjs

HighSandbox Evasion Gated Capabilitydist/daemon/entry.mjs

HighObfuscated Payload Loaderdist/bin/prjct-core.mjs

HighCross File Remote Execution Contextdist/bin/prjct-core.mjs

MediumDynamic Requirebin/prjct.cjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/install.sh

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/bin/prjct-core.mjs

LowWeak Cryptodist/bin/prjct.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

11 flagged

bin/prjct.cjsView file

Lines 1-30javascript

1#!/usr/bin/env node

3/**

4 * Portable package-manager entry point for prjct.

5 *

6 * npm/pnpm/yarn/bun generate Windows shims correctly for node shebangs, but

7 * not for the historical bin/prjct POSIX shell launcher. Keep this file tiny

8 * and dependency-free so global installs work on macOS, Linux, and Windows.

9 */

11const childProcess = require('node:child_process')

12const fs = require('node:fs')

High

Child Process

Package source references child process execution.

bin/prjct.cjsView on unpkg · L10

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/prjct.cjsView on unpkg · L10

13const os = require('node:os')

14const path = require('node:path')

15const url = require('node:url')

17const SCRIPT_PATH = fs.realpathSync(__filename)

18const SCRIPT_DIR = path.dirname(SCRIPT_PATH)

19const ROOT_DIR = path.resolve(SCRIPT_DIR, '..')

20const HOME = process.env.HOME || process.env.USERPROFILE || os.homedir()

21const CLI_HOME = process.env.PRJCT_CLI_HOME

22 ? path.resolve(process.env.PRJCT_CLI_HOME)

23 : path.join(HOME, '.prjct-cli')

24const SETUP_STAMP_PATH = path.join(CLI_HOME, 'state', 'setup-version.json')

26function pathEntries() {

27 return (process.env.PATH || '').split(path.delimiter).filter(Boolean)

28}

30function executableCandidates(command) {

dist/bin/prjct-hooks.mjsView file

High

Shell

Package source references shell execution.

dist/bin/prjct-hooks.mjsView on unpkg · L9

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin/prjct-hooks.mjsView on unpkg · L8

dist/bin/prjct-core.mjsView file

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/bin/prjct-core.mjsView on unpkg · L5

dist/bin/prjct.mjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2import{connect}from"node:net";import{existsSync}from"node:fs";import{createHash,randomUUID}from"node:crypto";import{homedir}from"node:os";import{join,resolve}from"node:path";

3const cliHome=process.env.PRJCT_CLI_HOME?resolve(process.env.PRJCT_CLI_HOME

dist/daemon/entry.mjsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/daemon/entry.mjsView on unpkg · L6

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 17075 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg