registry / replicas-engine / 0.1.971

replicas-engine@0.1.971

⚠ Under review

Lightweight API server for Replicas workspaces

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 23 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 27 file(s), 3.58 MB of source, external domains: 127.0.0.1, agent-plugins.org, api.asterlab.ai, api.example.com, api.githubcopilot.com, api.ipify.org, api.replicas.dev, app.replicas.dev, aws.amazon.com, checkip.amazonaws.com, docs.replicas.dev, docs.slack.dev, example.com, files.slack.com, github.com, github.com.usehttppath, icanhazip.com, json-schema.org, mcp.context7.com, mcp.deepwiki.com, mcp.notion.com, models.dev, news.ycombinator.com, opencode.ai, raw.githubusercontent.com, replicas.dev, search.parallel.ai, slack.com, team.slack.com, uploads.linear.app, www.greptile.com

Source & flagged code

14 flagged

dist/src/chunk-BMC4R5IZ.jsView file

Lines 298-338javascript

298}

299function readPiConfig() {

300 const dir = process.env.PI_PACKAGE_DIR?.trim();

301 if (!dir) return void 0;

302 try {

303 const manifest = JSON.parse(readFileSync(join(resolve(dir), "package.json"), "utf8"));

304 return manifest.piConfig;

305 } catch {

306 return void 0;

307 }

308}

309function getAppName() {

310 const name = readPiConfig()?.name;

311 return typeof name === "string" && name.trim() ? name.trim() : "pi";

312}

313function getAppClientUri() {

314 const uri = readPiConfig()?.clientUri;

315 return typeof uri === "string" && uri.trim() ? uri.trim() : void 0;

316}

317

318// ../node_modules/.bun/pi-mcp-adapter@2.32.1+04b0d7b0bc944965/node_modules/pi-mcp-adapter/utils.ts

319import { spawnSync } from "child_process";

320import { homedir as homedir2, platform } from "os";

High

Child Process

Package source references child process execution.

dist/src/chunk-BMC4R5IZ.jsView on unpkg · L318

321import { extname, isAbsolute, join as join2 } from "path";

322async function execOpen(pi, target, browser, signal) {

323 const os2 = platform();

324 if (os2 === "darwin") {

325 if (browser) {

326 return isAbsolute(browser) && extname(browser).toLowerCase() !== ".app" ? pi.exec(browser, [target], signal ? { signal } : {}) : pi.exec("open", ["-a", browser, target], signal ? { signal } : {});

327 }

328 return pi.exec("open", [target], signal ? { signal } : {});

329 }

330 if (os2 === "win32") {

331 return browser ? pi.exec("cmd", ["/c", "start", "", browser, target], signal ? { signal } : {}) : pi.exec("cmd", ["/c", "start", "", target], signal ? { signal } : {});

332 }

333 return browser ? pi.exec(browser, [target], signal ? { signal } : {}) : pi.exec("xdg-open", [target], signal ? { signal } : {});

334}

335async function openUrl(pi, url, browser, signal) {

336 const result = await execOpen(pi, url, browser, signal);

337 if (result.code !== 0) {

338 throw new Error(result.stderr || `Failed to open browser (exit code ${result.code})`);

Lines 387-427javascript

387 }

388 return Object.keys(result).length > 0 ? result : void 0;

389}

390function interpolateSecretExpression(value, environment

•matchType = normalized_sha256 matchedPackage = replicas-engine@0.1.804 matchedPath = dist/src/chunk-BMC4R5IZ.js matchedIdentity = npm:cmVwbGljYXMtZW5naW5l:0.1.804 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/chunk-BMC4R5IZ.jsView on unpkg

dist/src/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = replicas-engine@0.1.962 matchedIdentity = npm:cmVwbGljYXMtZW5naW5l:0.1.962 similarity = 0.929 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/src/index.jsView on unpkg

49074function envKillSwitch(name) { L49075: const value = process.env[name]?.trim().toLowerCase(); L49076: if (!value) return void 0; ... L49087: // ../node_modules/.bun/pi-mcp-adapter@2.32.1+04b0d7b0bc944965/node_modules/pi-mcp-adapter/ui-session.ts L49088: import { execFile as execFile6 } from "child_process"; L49089: import { randomUUID as randomUUID9 } from "crypto"; L49090: import net from "net"; L49091:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/src/index.jsView on unpkg · L49074

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/src/index.js: import { mkdir, readFile, rename, unlink, writeFile } from "fs/promises"; async function atomicWriteFile(path7, data, options) { await writeFile(tmpFile, data, { encoding: "utf-8", mode: options?.mode }); await atomicWriteFile(filePath, content, { mode: 384 }); await atomicWriteFile(helperPath, buildGitCredentialHelperScript(credentialsPath), { mode: 448 }); await atomicWriteFile(STATE_FILE, JSON.stringify(nextState, null, 2)); headers: { Authorization: `Bearer ${token}` }, async fetchFreshCredentials(failureReason, failureKind = "rejected", failedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.claude, allowedMeth

scripts/engine-watchdog.shView file

•path = scripts/engine-watchdog.sh kind = build_helper sizeBytes = 3671 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/engine-watchdog.shView on unpkg

dist/src/chunk-2OEKOWPM.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/src/chunk-2OEKOWPM.jsView on unpkg

scripts/gh.cjsView file

•matchType = normalized_sha256 matchedPackage = replicas-engine@0.1.804 matchedPath = scripts/gh.cjs matchedIdentity = npm:cmVwbGljYXMtZW5naW5l:0.1.804 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/gh.cjsView on unpkg

dist/src/chunk-UHBYG6JY.jsView file

•matchType = normalized_sha256 matchedPackage = replicas-engine@0.1.804 matchedPath = dist/src/chunk-UHBYG6JY.js matchedIdentity = npm:cmVwbGljYXMtZW5naW5l:0.1.804 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/chunk-UHBYG6JY.jsView on unpkg

replicas-engine@0.1.971

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code