registry / sliccy / 5.26.2

sliccy@5.26.2

⚠ Under review

Browser-based coding agent with thin CLI server

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 21 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 386 file(s), 15.8 MB of source, external domains: 127.0.0.1, admin.da.live, adobe-llm-proxy.paolo-moz.workers.dev, ai-gateway.vercel.sh, aiplatform.googleapis.com, akjjllgokmbgpbdbmafpiefnhidlmbgf.chromiumapp.org, api.ant-ling.com, api.anthropic.com, api.cerebras.ai, api.cloudflare.com, api.deepseek.com, api.fireworks.ai, api.github.com, api.groq.com, api.individual.githubcopilot.com, api.kimi.com, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.openai.com, api.together.ai, api.x.ai, api.xiaomimimo.com, api.z.ai, auth.openai.com, auth.x.ai, bedrock-runtime.eu-central-1.amazonaws.com, bedrock-runtime.us-east-1.amazonaws.com, bedrock-runtime.us-west-2.amazonaws.com, cdn.jsdelivr.net, chatgpt.com, chromewebstore.googleapis.com, docs.anthropic.com, docs.expo.dev, docs.mistral.ai, dummy.com, example.com, foo.bar, gateway.ai.cloudflare.com, generativelanguage.googleapis.com, github.com, help.openai.com, huggingface.co, ims-na1-stg1.adobelogin.com, ims-na1.adobelogin.com, integrate.api.nvidia.com, jamespre.dev, json-schema.org

Oversized source lightweight scan

dist/ui/assets/kernel-worker-D2yFI08e.js2.91 MB file, sampled 256 KB

FilesystemChildProcessWebSocketHighEntropyStringsUrlStringswww.sliccy.ai

dist/ui/slicc-diff.js9.41 MB file, sampled 256 KB

ChildProcessMinified

Source & flagged code

10 flagged

package.jsonView file

Lines 67-107json

67 "test:server-integration": "vitest run --config packages/node-server/tests/integration/server/vitest.config.ts",

68 "test:e2e": "npx playwright test --config packages/webapp/tests/e2e/playwright.config.ts",

69 "start:extension": "npm run build -w @slicc/chrome-extension && npm run dev -- --profile=extension",

70 "lint": "biome check --write . && prettier --write . && npm run lint:docs && npm run lint:skills && npm run lint:no-innerhtml && npm run lint:no-ui-in-providers && npm run lint:patches",

71 "lint:ci": "biome check . && prettier --check . && npm run lint:docs && npm run lint:skills -- --strict && npm run lint:no-innerhtml && npm run lint:no-ui-in-providers && npm run lint:patches",

72 "lint:docs": "node packages/dev-tools/tools/check-doc-sizes.mjs",

73 "lint:skills": "node packages/dev-tools/tools/lint-skills.mjs",

74 "lint:no-innerhtml": "node packages/dev-tools/tools/check-no-innerhtml.mjs",

75 "lint:no-ui-in-providers": "node packages/dev-tools/tools/check-no-ui-imports-in-providers.mjs",

76 "lint:patches": "node packages/dev-tools/patch-reconcile/check-patches.mjs",

77 "lint:swift": "npm run lint -w @slicc/swift-server && npm run lint -w @slicc/swift-optel && npm run lint -w @slicc/swift-launcher && cd packages/ios-app && swiftlint lint",

78 "deadcode": "knip --include files,dependencies,devDependencies,unlisted,binaries,unresolved,duplicates",

79 "deadcode:full": "knip",

80 "deadcode:files": "knip --include files",

81 "deadcode:production": "knip --production --strict",

82 "deadcode:production-files": "knip --production --include files",

83 "deadcode:swift": "npm run deadcode -w @slicc/swift-server && npm run deadcode -w @slicc/swift-optel && npm run deadcode -w @slicc/swift-launcher",

84 "package:release": "node dist/node-server/release-package.js",

85 "publish:chrome": "node dist/node-server/publish-chrome-web-store.js",

86 "publish:worker": "bash packages/cloudflare-worker/scripts/publish-worker.sh",

87 "postinstall": "if [ -d patches ]; then npx --no-install patch-package || { echo \"ERROR: patches/ present but patch-package not installed (run a full 'npm ci' incl. devDependencies)\"; exit 1; }; fi && if [ -d packages/shared-ts ]; then npm run build -w @slicc/shared-ts; fi && if [ -d packages/cloud-core ]; then npm run build -w @slicc/cloud-core; fi && if [ -d packages/spoon ]; then npm run build -w @ai-ecoverse/spoon; fi && if [ -d packages/webcomponents ]; then npm run build -w @slicc/webcomponents; fi",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L87

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L87

88 "prepare": "husky"

89 },

90 "dependencies": {

91 "e2b": "^2.23.0",

92 "express": "^5.0.0",

93 "pyodide": "314.0.0",

94 "ws": "^8.18.0"

95 },

96 "devDependencies": {

97 "@biomejs/biome": "2.5.1",

98 "@playwright/test": "^1.58.2",

99 "@semantic-release/exec": "7.1.0",

100 "@semantic-release/git": "10.0.1",

101 "@tessl/cli": "0.87.0",

102 "@types/node": "^24.0.0",

103 "@vitest/browser": "4.1.9",

104 "@vitest/browser-playwright": "4.1.9",

105 "@vitest/coverage-v8": "^4.1.5",

106 "esbuild": "0.28.1",

107 "husky": "9.1.7",

dist/ui/slicc-editor.jsView file

Lines 1-29javascript

1"use strict";(()=>{var gO=Object.defineProperty;var ee=(n,e,t)=>()=>{if(t)throw t[0];try{return n&&(e=n(n=0)),e}catch

dist/node-server/electron-controller.jsView file

Lines 69-109javascript

69export function resolveHostedLeaderOrigin(env = process.env) {

70 const explicit = env['SLICC_HOSTED_LEADER_ORIGIN'] ?? env['WORKER_BASE_URL'];

71 if (explicit) {

72 return explicit.replace(/\/

dist/ui/assets/browser-2wdq8OwU.jsView file

1Cross-file remote execution chain: dist/ui/assets/browser-2wdq8OwU.js spawns dist/ui/assets/rolldown-runtime-aKtaBQYM.js; helper contains network access plus dynamic code execution. L1: import{r as e,t}from"./rolldown-runtime-aKtaBQYM.js";t((e=>{(function(){var t={not_string:/[^s]/,not_bool:/[^t]/,not_type:/[^T]/,not_primitive:/[^v]/,number:/[diefg]/,numeric_arg:/... L2: `))&&(e=e.trim()),(!n.newlineIsToken||!t.includes(` ... L68: L69: `.substring(0,i)+r}function Pn(e){return e!=null&&(typeof e==`string`||e.nodeType&&(e.nodeType===1||e.nodeType===9||e.nodeType===11))}var Fn=Object.defineProperty,In=(t=>typeof e<`... L70:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/ui/assets/browser-2wdq8OwU.jsView on unpkg · L1

68L69: `.substring(0,i)+r}function Pn(e){return e!=null&&(typeof e==`string`||e.nodeType&&(e.nodeType===1||e.nodeType===9||e.nodeType===11))}var Fn=Object.defineProperty,In=(t=>typeof e<`... L70:

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/ui/assets/browser-2wdq8OwU.jsView on unpkg · L68

dist/ui/assets/kokoro-engine-DER4XrYN.jsView file

Lines 1-2javascript

dist/ui/assets/js-realm-worker-BYZQ59hJ.jsView file

Lines 18-49javascript

18* @license MIT

19*/

20(function(){var e=`input is invalid type`,n=typeof window==`object`,i=n?window:{};i.JS_MD5_NO_WINDOW&&(n=!1);var a=!n&&typeof self

dist/ui/slicc-diff.jsView file

•path = dist/ui/slicc-diff.js kind = oversized_source_file sizeBytes = 9865411 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/ui/slicc-diff.jsView on unpkg

dist/node-server/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = sliccy@5.26.1 matchedIdentity = npm:c2xpY2N5:5.26.1 similarity = 0.983 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/node-server/index.jsView on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = if [ -d patches ]; then npx --no-install patch-package || { echo "ERROR: patches/ present but patch-package not installed (run a full 'npm ci' incl. devDependencies)"; exit 1; }; f...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/ui/slicc-editor.jsView file

9`&&n.lineWrapping&&(i&&(i=b.single(i.main.anchor-1,i.main.head-1)),t={from:s.from,to:s.to,insert:L.of([" "])}),t)return Co(n,t,i,o);if(i&&!pr(i,s)){let l=!1,a="select";return n.inp... L10: `))};if((w.mac||w.android)&&f.from==o-1&&/^\. ?$/.test(i.text)&&e.contentDOM.getAttribute("autocorrect")=="off"&&(f={from:l,to:a,insert:L.of([i.text.replace("."," ")])}),this.pendi... L11: `&&(t="");else{let i=t.indexOf(`

High

Child Process

Package source references child process execution.

dist/ui/slicc-editor.jsView on unpkg · L9

dist/node-server/electron-controller.jsView file

89// (e.g. npx tsx packages/node-server/src/index.ts --electron /Applications/Slack.app) L90: // Shell wrappers like `zsh -c ... /Applications/Slack.app --kill` or L91: // `timeout 30 npm run dev:electron -- /Applications/Slack.app` also match.

High

Shell

Package source references shell execution.

dist/node-server/electron-controller.jsView on unpkg · L89

dist/ui/assets/browser-2wdq8OwU.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/ui/assets/browser-2wdq8OwU.jsView on unpkg · L1

68L69: `.substring(0,i)+r}function Pn(e){return e!=null&&(typeof e==`string`||e.nodeType&&(e.nodeType===1||e.nodeType===9||e.nodeType===11))}var Fn=Object.defineProperty,In=(t=>typeof e<`... L70:

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/ui/assets/browser-2wdq8OwU.jsView on unpkg · L68

dist/ui/assets/kokoro-engine-DER4XrYN.jsView file

1import{t as e}from"./logger-LESFN7Hj.js";import{a as t,i as n,o as r,r as i}from"./transformers-env-C5HqbjmV.js";const a=e(`speech:espeak`),o=`/workspace/node_modules/espeak-ng/dis... L2: `).map(e=>e.trim()).filter(e=>e.length>0)}function u(e,t){return async n=>{let r=URL.createObjectURL(new Blob([new Uint8Array(t)],{type:`application/wasm`}));try{let t=e=>e.endsWit...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/ui/assets/kokoro-engine-DER4XrYN.jsView on unpkg · L1

dist/ui/assets/js-realm-worker-BYZQ59hJ.jsView file

38(function(){var e=`input is invalid type`,n=typeof window==`object`,i=n?window:{};i.JS_SHA256_NO_WINDOW&&(n=!1);var a=!n&&typeof self==`object`,o=!i.JS_SHA256_NO_NODE_JS&&typeof pr... L39: /*! pako 2.1.0 https://github.com/nodeca/pako @license (MIT AND Zlib) */ L40: ;function S(e){let t=e.length;for(;--t>=0;)e[t]=0}const C=new Uint8Array([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0]),w=new Uint8Array([0,0,0,0,1,1,2,2,3,3,4,4,5,5,... L41: `)?t:`${t}\n`);return}try{e.writeStdout(`${JSON.stringify(t,null,2)}\n`)}catch{e.writeStdout(`${String(t)}\n`)}},warn(n,i){let a=typeof i==`object`&&i&&`prefix`in i?i.prefix:void 0... L42: `)?t:`${t}\n`),e.exit(0),Error(`unreachable`)}}}const Tr={reset:`\x1B[0m`,green:`\x1B[32m`,red:`\x1B[31m`,yellow:`\x1B[33m`,gray:`\x1B[90m`,bold:`\x1B[1m`,cyan:`\x1B[36m`,dim:`\x1B... L43: `)}function Lr(e){return e instanceof Date?e:new Date(e)}function Rr(e,t=`short`){let n=Lr(e);if(Number.isNaN(n.getTime()))return String(e);if(t===`iso`)return n.toISOString();if(t... L44: `),r}async function s(t){if(typeof t!=`string`||!t.trim())throw TypeError(`skill.token(providerId): providerId must be a non-empty string`);let n=`oauth-token ${qi(t)}`,{st

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/ui/assets/js-realm-worker-BYZQ59hJ.jsView on unpkg · L38

dist/ui/slicc-diff.jsView file

•path = dist/ui/slicc-diff.js kind = oversized_source_file sizeBytes = 9865411 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/ui/slicc-diff.jsView on unpkg

dist/node-server/index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/node-server/index.jsView on unpkg

Findings

1 Critical6 High6 Medium8 Low

CriticalPrevious Version Dangerous Deltadist/node-server/index.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/ui/slicc-editor.js

HighShelldist/node-server/electron-controller.js

HighCommand Output Exfiltrationdist/ui/assets/js-realm-worker-BYZQ59hJ.js

HighCross File Remote Execution Contextdist/ui/assets/browser-2wdq8OwU.js

HighOversized Source Filedist/ui/slicc-diff.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/ui/assets/kokoro-engine-DER4XrYN.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/ui/assets/browser-2wdq8OwU.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings