67import { a as resolveOutboundTarget, o as resolveSessionDeliveryTarget, u as normalizePollInput } from "./message-WGbfuXbW.js";
L68: import { i as [redacted], s as verifyDeviceSignature, t as deriveDeviceIdFromPublicKey } from "./device-identity-G_i0ZOeK.js";
L69: import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-BPpiicLt.js";
L70: import { $ as validateNodePairListParams, A as [redacted], At as ErrorCodes, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb...
L71: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-DU6W52HB.js";
...
L97: import "./rich-BqQpwgLN.js";
L98: import { D as flushGraphEventOutbox, S as setPrivateMode, _ as isAudioMuted, v as isPrivateMode, w as flushGraphPreviewOutbox, x as s
CriticalCommand Output Exfiltration
Source executes local commands and sends command output to an external endpoint.
dist/gateway-cli-B-ReA6L4.jsView on unpkg · L67 67import { a as resolveOutboundTarget, o as resolveSessionDeliveryTarget, u as normalizePollInput } from "./message-WGbfuXbW.js";
L68: import { i as [redacted], s as verifyDeviceSignature, t as deriveDeviceIdFromPublicKey } from "./device-identity-G_i0ZOeK.js";
L69: import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-BPpiicLt.js";
L70: import { $ as validateNodePairListParams, A as [redacted], At as ErrorCodes, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb...
L71: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-DU6W52HB.js";
...
L97: import "./rich-BqQpwgLN.js";
L98: import { D as flushGraphEventOutbox, S as setPrivateMode, _ as isAudioMuted, v as isPrivateMode, w as flushGraphPreviewOutbox, x as s
CriticalRemote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/gateway-cli-B-ReA6L4.jsView on unpkg · L67 67Trigger-reachable chain: manifest.main -> dist/index.js -> dist/register.subclis-dOAIsOEb.js -> dist/gateway-cli-B-ReA6L4.js
L67: import { a as resolveOutboundTarget, o as resolveSessionDeliveryTarget, u as normalizePollInput } from "./message-WGbfuXbW.js";
L68: import { i as [redacted], s as verifyDeviceSignature, t as deriveDeviceIdFromPublicKey } from "./device-identity-G_i0ZOeK.js";
L69: import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-BPpiicLt.js";
L70: import { $ as validateNodePairListParams, A as [redacted], At as ErrorCodes, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb...
L71: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-DU6W52HB.js";
...
L97: import "./rich-BqQpwgLN.js";
L98: import {
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/gateway-cli-B-ReA6L4.jsView on unpkg · L67 69import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-BPpiicLt.js";
L70: import { $ as validateNodePairListParams, A as [redacted], At as ErrorCodes, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb...
L71: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-DU6W52HB.js";
67import { a as resolveOutboundTarget, o as resolveSessionDeliveryTarget, u as normalizePollInput } from "./message-WGbfuXbW.js";
L68: import { i as [redacted], s as verifyDeviceSignature, t as deriveDeviceIdFromPublicKey } from "./device-identity-G_i0ZOeK.js";
L69: import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-BPpiicLt.js";
L70: import { $ as validateNodePairListParams, A as [redacted], At as ErrorCodes, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb...
L71: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-DU6W52HB.js";
...
L97: import "./rich-BqQpwgLN.js";
L98: import { D as flushGraphEventOutbox, S as setPrivateMode, _ as isAudioMuted, v as isPrivateMode, w as flushGraphPreviewOutbox, x as s
HighSandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/gateway-cli-B-ReA6L4.jsView on unpkg · L67 67Cross-file remote execution chain: dist/gateway-cli-B-ReA6L4.js spawns dist/deliver-lZoUwxpQ.js; helper contains network access plus dynamic code execution.
L67: import { a as resolveOutboundTarget, o as resolveSessionDeliveryTarget, u as normalizePollInput } from "./message-WGbfuXbW.js";
L68: import { i as [redacted], s as verifyDeviceSignature, t as deriveDeviceIdFromPublicKey } from "./device-identity-G_i0ZOeK.js";
L69: import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-BPpiicLt.js";
L70: import { $ as validateNodePairListParams, A as [redacted], At as ErrorCodes, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb...
L71: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-DU6W52HB.js";
...
L97: import "./
HighCross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/gateway-cli-B-ReA6L4.jsView on unpkg · L67 2333if (!fresh) return;
L2334: import("./needle-reflex-BGoRlPcf.js").then((m) => {
L2335: for (const sentence of fresh.split(/(?<=[.!?])\s+/)) m.reflex(sentence, "reply");
MediumDynamic Require
Package source references dynamic require/import behavior.
dist/gateway-cli-B-ReA6L4.jsView on unpkg · L2333 67import { a as resolveOutboundTarget, o as resolveSessionDeliveryTarget, u as normalizePollInput } from "./message-WGbfuXbW.js";
L68: import { i as [redacted], s as verifyDeviceSignature, t as deriveDeviceIdFromPublicKey } from "./device-identity-G_i0ZOeK.js";
L69: import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-BPpiicLt.js";
L70: import { $ as validateNodePairListParams, A as [redacted], At as ErrorCodes, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb...
L71: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-DU6W52HB.js";
...
L97: import "./rich-BqQpwgLN.js";
L98: import { D as flushGraphEventOutbox, S as setPrivateMode, _ as isAudioMuted, v as isPrivateMode, w as flushGraphPreviewOutbox, x as s
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/gateway-cli-B-ReA6L4.jsView on unpkg · L67 67import { a as resolveOutboundTarget, o as resolveSessionDeliveryTarget, u as normalizePollInput } from "./message-WGbfuXbW.js";
L68: import { i as [redacted], s as verifyDeviceSignature, t as deriveDeviceIdFromPublicKey } from "./device-identity-G_i0ZOeK.js";
L69: import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-BPpiicLt.js";
L70: import { $ as validateNodePairListParams, A as [redacted], At as ErrorCodes, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb...
L71: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-DU6W52HB.js";
...
L97: import "./rich-BqQpwgLN.js";
L98: import { D as flushGraphEventOutbox, S as setPrivateMode, _ as isAudioMuted, v as isPrivateMode, w as flushGraphPreviewOutbox, x as s
LowWeak Crypto
Package source references weak cryptographic algorithms.
dist/gateway-cli-B-ReA6L4.jsView on unpkg · L67