76import { a as formatTokenCount$2, i as estimateUsageCost, o as formatUsd$1, s as resolveModelCostConfig } from "./transcript-tools-UfIShVfz.js";
L77: import { a as minSecurity, d as resolveExecApprovalsFromFile, i as maxAsk, l as resolveSafeBins, o as recordAllowlistUse, r as evaluateShellAllowlist, s as requiresExecApproval, t ...
L78: import { a as canvasSnapshotTempPath, c as parseCameraClipPayload, d as buildNodeShellCommand, i as parseEnvPairs, l as parseCameraSnapPayload, n as screenRecordTempPath, o as pars...
L79: import { a as browserSnapshot, c as browserStop, d as fetchBrowserJson, i as browserProfiles, l as browserTabs, n as browserFocusTab, o as browserStart, r as browserOpenTab, s as b...
...
L112: import { createInterface } from "node:readline";
L113: import { createSer
CriticalHardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/reply-CFU4p8co.jsView on unpkg · L76 76import { a as formatTokenCount$2, i as estimateUsageCost, o as formatUsd$1, s as resolveModelCostConfig } from "./transcript-tools-UfIShVfz.js";
L77: import { a as minSecurity, d as resolveExecApprovalsFromFile, i as maxAsk, l as resolveSafeBins, o as recordAllowlistUse, r as evaluateShellAllowlist, s as requiresExecApproval, t ...
L78: import { a as canvasSnapshotTempPath, c as parseCameraClipPayload, d as buildNodeShellCommand, i as parseEnvPairs, l as parseCameraSnapPayload, n as screenRecordTempPath, o as pars...
L79: import { a as browserSnapshot, c as browserStop, d as fetchBrowserJson, i as browserProfiles, l as browserTabs, n as browserFocusTab, o as browserStart, r as browserOpenTab, s as b...
...
L112: import { createInterface } from "node:readline";
L113: import { createSer
CriticalCredential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/reply-CFU4p8co.jsView on unpkg · L76 •Remote response is passed to a worker and executed with Node capabilities.
dist/reply-CFU4p8co.js:
import { i as __require, o as __toESM, r as __exportAll, t as __commonJSMin } from "./chunk-D_gEzPfs.js";
import { C as requireActivePluginRegistry, b as normalizeChannelId, p as CHAT_CHANNEL_ORDER, s as defaultRuntime, t as createSubsystemLogger, w as setActivePluginRegistry, y as nor...
import { At as TELEGRAM_COMMAND_NAME_PATTERN, B as resolveApiKeyForProvider, Bt as getConfigValueAtPath, Ct as readConfigFileSnapshot, Dt as validateJsonSchemaValue, Et as validate...
import { c as complete, l as completeSimple, m as require_safe_buffer, p as require_jws, u as streamSimple } from "./dist-C53i5oqF.js";
import { B as listEnabledSignalAccounts, C as resolveSessionResetPolicy, E as DEFAULT_RESET
CriticalRemote Response Code Execution
Source passes code obtained from a remote response into a dynamic execution sink.
dist/reply-CFU4p8co.jsView on unpkg 76Trigger-reachable chain: manifest.main -> dist/index.js -> dist/reply-CFU4p8co.js
L76: import { a as formatTokenCount$2, i as estimateUsageCost, o as formatUsd$1, s as resolveModelCostConfig } from "./transcript-tools-UfIShVfz.js";
L77: import { a as minSecurity, d as resolveExecApprovalsFromFile, i as maxAsk, l as resolveSafeBins, o as recordAllowlistUse, r as evaluateShellAllowlist, s as requiresExecApproval, t ...
L78: import { a as canvasSnapshotTempPath, c as parseCameraClipPayload, d as buildNodeShellCommand, i as parseEnvPairs, l as parseCameraSnapPayload, n as screenRecordTempPath, o as pars...
L79: import { a as browserSnapshot, c as browserStop, d as fetchBrowserJson, i as browserProfiles, l as browserTabs, n as browserFocusTab, o as browserStart, r as browserOpenTab, s as b...
.
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/reply-CFU4p8co.jsView on unpkg · L76 •Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
dist/reply-CFU4p8co.js:
import fs, { constants, copyFileSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
const DEFAULT_DEEPGRAM_AUDIO_BASE_URL = "https://api.deepgram.com/v1";
const DEFAULT_GOOGLE_AUDIO_BASE_URL = "https://generativelanguage.googleapis.com/v1beta";
const DEFAULT_GOOGLE_VIDEO_BASE_URL = "https://generativelanguage.googleapis.com/v1beta";
const DEFAULT_OPENAI_AUDIO_BASE_URL = "https://api.openai.com/v1";
const DEFAULT_GROQ_AUDIO_BASE_URL = "https://api.groq.com/openai/v1";
await fs$1.writeFile(tmpPath, bufferResult.buffer);
const baseUrl = typeof me
HighEntrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
dist/reply-CFU4p8co.jsView on unpkg 106import fs$1 from "node:fs/promises";
L107: import { exec, execFile, execSync, spawn, spawnSync } from "node:child_process";
L108: import { Type } from "@sinclair/typebox";
...
L794: const MAX_ERROR_CHARS = 300;
L795: function normalizeBaseUrl(baseUrl, fallback) {
L796: return (baseUrl?.trim() || fallback).replace(/\/+$/, "");
...
L1992: try {
L1993: const parsed = JSON.parse(readFileSync(cacheFile(), "utf8"));
L1994: if (typeof parsed?.fetchedAt !== "number" || !Array.isArray(parsed?.catalog?.models)) return null;
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
dist/reply-CFU4p8co.jsView on unpkg · L106 76Detached bundled service listener: dist/reply-CFU4p8co.js launches a Node helper and exposes a broad-bound HTTP listener.
L76: import { a as formatTokenCount$2, i as estimateUsageCost, o as formatUsd$1, s as resolveModelCostConfig } from "./transcript-tools-UfIShVfz.js";
L77: import { a as minSecurity, d as resolveExecApprovalsFromFile, i as maxAsk, l as resolveSafeBins, o as recordAllowlistUse, r as evaluateShellAllowlist, s as requiresExecApproval, t ...
L78: import { a as canvasSnapshotTempPath, c as parseCameraClipPayload, d as buildNodeShellCommand, i as parseEnvPairs, l as parseCameraSnapPayload, n as screenRecordTempPath, o as pars...
L79: import { a as browserSnapshot, c as browserStop, d as fetchBrowserJson, i as browserProfiles, l as browserTabs, n as browserFocusTab, o as browse
HighSpawned Bundled Service Listener
Source launches a detached bundled service that exposes a broad-bound HTTP listener.
dist/reply-CFU4p8co.jsView on unpkg · L76 76Trigger-reachable credential exfiltration chain: manifest.main -> dist/index.js -> dist/reply-CFU4p8co.js
L76: import { a as formatTokenCount$2, i as estimateUsageCost, o as formatUsd$1, s as resolveModelCostConfig } from "./transcript-tools-UfIShVfz.js";
L77: import { a as minSecurity, d as resolveExecApprovalsFromFile, i as maxAsk, l as resolveSafeBins, o as recordAllowlistUse, r as evaluateShellAllowlist, s as requiresExecApproval, t ...
L78: import { a as canvasSnapshotTempPath, c as parseCameraClipPayload, d as buildNodeShellCommand, i as parseEnvPairs, l as parseCameraSnapPayload, n as screenRecordTempPath, o as pars...
L79: import { a as browserSnapshot, c as browserStop, d as fetchBrowserJson, i as browserProfiles, l as browserTabs, n as browserFocusTab, o as browserStart, r as bro
HighTrigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/reply-CFU4p8co.jsView on unpkg · L76 •path = dist/reply-CFU4p8co.js
kind = oversized_source_file
sizeBytes = 5724984
magicHex = [redacted]
MediumOversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/reply-CFU4p8co.jsView on unpkg