registry / quadwork / 2.4.0

quadwork@2.4.0

⚠ Under review

Unified dashboard for multi-agent coding teams — 4 AI agents, one terminal

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 46 file(s), 1.73 MB of source, external domains: 127.0.0.1, api.telegram.org, cli.github.com, discord.com, discord.gg, github.com, nextjs.org, nodejs.org, raw.githubusercontent.com, react.dev

Source & flagged code

7 flagged

bin/quadwork.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const { execFileSync, spawn } = require("child_process");

4const fs = require("fs");

High

Child Process

Package source references child process execution.

bin/quadwork.jsView on unpkg · L2

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/quadwork.jsView on unpkg · L2

5const path = require("path");

6const os = require("os");

7const readline = require("readline");

8const { injectModeForCommand } = require("../src/lib/injectMode.js");

10// ─── Constants ──────────────────────────────────────────────────────────────

12const CONFIG_DIR = path.join(os.homedir(), ".quadwork");

13const CONFIG_PATH = path.join(CONFIG_DIR, "config.json");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/quadwork.jsView on unpkg · L2

14const TEMPLATES_DIR = path.join(__dirname, "..", "templates");

15const AGENTS = ["head", "re1", "re2", "dev"];

17// ─── Permission Helpers ────────────────────────────────────────────────────

19function ensureSecureDir(dir) {

20 fs.mkdirSync(dir, { recursive: true, mode: 0o700 });

21 try { fs.chmodSync(dir, 0o700); } catch {}

22}

Lines 275-315javascript

275 if (major >= 20) {

276 ok(`Node.js ${nodeVer}`);

277 } else {

278 fail(`Node.js ${nodeVer} — version 20 or newer is required`);

279 log("Update from: https://nodejs.org");

280 allOk = false;

server/routes.jsView file

Lines 1-25javascript

1/**

2 * Migrated Next.js API routes — now served directly from Express.

3 * Routes: config, chat, projects, memory, setup, rename, github/issues, github/prs, telegram

4 */

5const express = require("express");

6const { execFile: _execFileCb, execFileSync, spawn } = require("child_process"

out/_next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2View file

•path = out/_next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2 kind = high_entropy_blob sizeBytes = 6204 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

out/_next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2View on unpkg

Source & flagged code

7 flagged · loading source

bin/quadwork.jsView file

2L3: const { execFileSync, spawn } = require("child_process"); L4: const fs = require("fs");

High

Child Process

Package source references child process execution.

bin/quadwork.jsView on unpkg · L2

2L3: const { execFileSync, spawn } = require("child_process"); L4: const fs = require("fs"); ... L11: L12: const CONFIG_DIR = path.join(os.homedir(), ".quadwork"); L13: const CONFIG_PATH = path.join(CONFIG_DIR, "config.json"); ... L25: L26: const isTTY = process.stdout.isTTY; L27: const c = isTTY ? { ... L51: const id = setInterval(() => { L52: process.stdout.write(`\r ${c.cyan}${frames[i++ % frames.length]}${c.reset} ${msg}`); L53: }, 80);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/quadwork.jsView on unpkg · L2

295log(""); L296: log(` → /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.[redacted].sh)"`); L297: log(""); L298: log("After installing, close and reopen your terminal, then run:"); L299: log(" → npx quadwork init"); L300: console.log("");

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/quadwork.jsView on unpkg · L295

2L3: const { execFileSync, spawn } = require("child_process"); L4: const fs = require("fs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/quadwork.jsView on unpkg · L2

server/routes.jsView file

5const express = require("express"); L6: const { execFile: _execFileCb, execFileSync, spawn } = require("child_process"); L7: const _execFileAsync = require("util").promisify(_execFileCb); ... L23: L24: const CONFIG_DIR = path.join(os.homedir(), ".quadwork"); L25: const CONFIG_PATH = path.join(CONFIG_DIR, "config.json"); ... L91: // rate_limit endpoint is itself exempt — zero budget cost. L92: const { stdout } = await _execFileAsync("gh", [ L93: "api", "rate_limit", "--jq", ... L95: ], { encoding: "utf-8", timeout: 10000 }); L96: const data = JSON.parse(stdout); L97: _rateLimit.limit = data.core.limit;

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

server/routes.jsView on unpkg · L5

2575// path off GraphQL. L2576: await ghJsonExecAsync(["api", `repos/${repo}/issues/${first}`, "--jq", ".number"]); L2577: return "fresh";

High

Shell

Package source references shell execution.

server/routes.jsView on unpkg · L2575

out/_next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2View file

•path = out/_next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2 kind = high_entropy_blob sizeBytes = 6204 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

out/_next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2View on unpkg

Findings

1 Critical5 High4 Medium5 Low

CriticalCommand Output Exfiltrationserver/routes.js

HighChild Processbin/quadwork.js

HighShellserver/routes.js

HighSandbox Evasion Gated Capabilitybin/quadwork.js

HighRuntime Package Installbin/quadwork.js

HighShips High Entropy Blobout/_next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2

MediumDynamic Requirebin/quadwork.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

bin/quadwork.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const { execFileSync, spawn } = require("child_process");

4const fs = require("fs");

High

Child Process

Package source references child process execution.

bin/quadwork.jsView on unpkg · L2

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/quadwork.jsView on unpkg · L2

5const path = require("path");

6const os = require("os");

7const readline = require("readline");

8const { injectModeForCommand } = require("../src/lib/injectMode.js");

12const CONFIG_DIR = path.join(os.homedir(), ".quadwork");

13const CONFIG_PATH = path.join(CONFIG_DIR, "config.json");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/quadwork.jsView on unpkg · L2

14const TEMPLATES_DIR = path.join(__dirname, "..", "templates");

15const AGENTS = ["head", "re1", "re2", "dev"];

17// ─── Permission Helpers ────────────────────────────────────────────────────

19function ensureSecureDir(dir) {

20 fs.mkdirSync(dir, { recursive: true, mode: 0o700 });

21 try { fs.chmodSync(dir, 0o700); } catch {}

22}

Lines 275-315javascript

275 if (major >= 20) {

276 ok(`Node.js ${nodeVer}`);

277 } else {

278 fail(`Node.js ${nodeVer} — version 20 or newer is required`);

279 log("Update from: https://nodejs.org");

280 allOk = false;

server/routes.jsView file

Lines 1-25javascript

1/**

2 * Migrated Next.js API routes — now served directly from Express.

3 * Routes: config, chat, projects, memory, setup, rename, github/issues, github/prs, telegram

4 */

5const express = require("express");

6const { execFile: _execFileCb, execFileSync, spawn } = require("child_process"

out/_next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2View file

•path = out/_next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2 kind = high_entropy_blob sizeBytes = 6204 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

out/_next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2View on unpkg

Lines 2555-2595javascript

2555// GitHub before trusting the snapshot. A soft existence check is

2556// enough — if the first issue genuinely 404s, treat the whole

2557// snapshot as stale (most likely a leftover from a prior

2558// project/repo that was purged) and let the caller drop it. One

2559// gh call per cache miss, wrapped in the existing

2560// BATCH_PROGRESS_TTL_MS cache upstream.

2561//

2562// Returns one of:

2563// "fresh" — first issue resolved, snapshot is trustworthy

2564// "gone" — first issue confirmed 404; snapshot should be dropped

2565// "unknown" — transient error (auth/network/timeout); leave

2566// snapshot alone and let the next cache miss retry

2567async function checkBatchSnapshotFreshness(repo, snapshot) {

2568 if (!snapshot || !Array.isArray(snapshot.issueNumbers) || snapshot.issueNumbers.length === 0) {

2569 return "gone";

2570 }

2571 const first = snapshot.issueNumbers[0];

2572 try {

2573 // #828 P1: REST, not `gh issue view` (GraphQL). We only need existence, so

2574 // the cheap REST issue endpoint suffices and keeps the whole batch-progress

2575 // path off GraphQL.

2576 await ghJsonExecAsync(["api", `repos/${repo}/issues/${first}`, "--jq", ".number"]);

2577 return "fresh";

High

Shell

Package source references shell execution.

server/routes.jsView on unpkg · L2575

2578 } catch (err) {

2579 // gh surfaces a 404 via stderr text on a non-zero exit. Only

2580 // the unambiguous "not found" / "could not resolve" shapes

2581 // count as genuinely gone; anything else (network, auth,

2582 // timeout) is transient and must NOT delete the snapshot.

2583 const msg = String((err && (err.stderr || err.message)) || "").toLowerCase();

2584 if (msg.includes("could not resolve") || msg.includes("not found") || msg.includes("http 404")) {

2585 return "gone";

2586 }

2587 return "unknown";

2588 }

2589}

2590

2591// Decide which batch to render, combining the live parse of

2592// OVERNIGHT-QUEUE.md with the persistent snapshot. The snapshot is

2593// replaced whenever a new batch starts (explicit Batch: N bump OR

2594// the live Active Batch contains items the snapshot doesn't); in

2595// all other cases the snapshot wins, so items Head moved to Done