registry / replicas-engine / 0.1.980

replicas-engine@0.1.980

⚠ Under review

Lightweight API server for Replicas workspaces

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 23 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 27 file(s), 3.59 MB of source, external domains: 127.0.0.1, agent-plugins.org, api.asterlab.ai, api.example.com, api.githubcopilot.com, api.ipify.org, api.replicas.dev, app.replicas.dev, aws.amazon.com, checkip.amazonaws.com, docs.replicas.dev, docs.slack.dev, example.com, files.slack.com, github.com, github.com.usehttppath, icanhazip.com, json-schema.org, mcp.context7.com, mcp.deepwiki.com, mcp.notion.com, models.dev, news.ycombinator.com, opencode.ai, raw.githubusercontent.com, replicas.dev, search.parallel.ai, slack.com, team.slack.com, uploads.linear.app, www.greptile.com

Source & flagged code

14 flagged

dist/src/chunk-KY6CIXSR.jsView file

25// src/managers/codex-asp/app-server-process.ts L26: import { spawn } from "child_process"; L27: import { EventEmitter as EventEmitter2 } from "events";

High

Child Process

Package source references child process execution.

dist/src/chunk-KY6CIXSR.jsView on unpkg · L25

dist/src/chunk-BMC4R5IZ.jsView file

407const result = spawnSync(value.slice(1), { L408: shell: true, L409: encoding: "utf8",

High

Shell

Package source references shell execution.

dist/src/chunk-BMC4R5IZ.jsView on unpkg · L407

•matchType = normalized_sha256 matchedPackage = replicas-engine@0.1.804 matchedPath = dist/src/chunk-BMC4R5IZ.js matchedIdentity = npm:cmVwbGljYXMtZW5naW5l:0.1.804 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/chunk-BMC4R5IZ.jsView on unpkg

dist/src/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = replicas-engine@0.1.962 matchedIdentity = npm:cmVwbGljYXMtZW5naW5l:0.1.962 similarity = 0.893 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/src/index.jsView on unpkg

49126function envKillSwitch(name) { L49127: const value = process.env[name]?.trim().toLowerCase(); L49128: if (!value) return void 0; ... L49139: // ../node_modules/.bun/pi-mcp-adapter@2.32.1+04b0d7b0bc944965/node_modules/pi-mcp-adapter/ui-session.ts L49140: import { execFile as execFile6 } from "child_process"; L49141: import { randomUUID as randomUUID9 } from "crypto"; L49142: import net from "net"; L49143:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/src/index.jsView on unpkg · L49126

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/src/index.js: import { mkdir, readFile, rename, unlink, writeFile } from "fs/promises"; async function atomicWriteFile(path7, data, options) { await writeFile(tmpFile, data, { encoding: "utf-8", mode: options?.mode }); await atomicWriteFile(filePath, content, { mode: 384 }); await atomicWriteFile(helperPath, buildGitCredentialHelperScript(credentialsPath), { mode: 448 }); await atomicWriteFile(STATE_FILE, JSON.stringify(nextState, null, 2)); headers: { Authorization: `Bearer ${token}` }, async fetchFreshCredentials(failureReason, failureKind = "rejected", failedCredential = ENGINE_ENV.REPLICAS_AGENT_CREDENTIALS.claude, allowedMeth

scripts/engine-watchdog.shView file

•path = scripts/engine-watchdog.sh kind = build_helper sizeBytes = 3671 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/engine-watchdog.shView on unpkg

dist/src/chunk-MH7ZFBXK.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/src/chunk-MH7ZFBXK.jsView on unpkg

scripts/gh.cjsView file

•matchType = normalized_sha256 matchedPackage = replicas-engine@0.1.804 matchedPath = scripts/gh.cjs matchedIdentity = npm:cmVwbGljYXMtZW5naW5l:0.1.804 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/gh.cjsView on unpkg

dist/src/chunk-UHBYG6JY.jsView file

•matchType = normalized_sha256 matchedPackage = replicas-engine@0.1.804 matchedPath = dist/src/chunk-UHBYG6JY.js matchedIdentity = npm:cmVwbGljYXMtZW5naW5l:0.1.804 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/chunk-UHBYG6JY.jsView on unpkg

replicas-engine@0.1.980

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code