registry / startx / 1.1.35

startx@1.1.35

> Scaffold a production-ready TypeScript monorepo in minutes.

AI Security Review

scanned 6h ago · by lpm-firewall-ai

No confirmed malicious attack surface is established. The package is a user-invoked monorepo scaffolding CLI with template code that includes optional AI/VM and network-capable utilities.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs startx CLI commands such as startx init or startx package add/new.

Impact

Writes selected project/template files into the user-chosen workspace; no credential harvesting, exfiltration, install-time mutation, or stealth persistence found.

Mechanism

interactive project scaffolding and optional template utility code

Rationale

Static inspection shows a scaffolding CLI with no lifecycle hooks and no import-time payload; risky primitives are user-invoked/template-aligned rather than an unconsented malicious chain. Scanner findings around dynamic code, network, secrets, and Unicode are explained by bundled dependencies, optional AI/template tools, examples, and prompt UI control characters.

Evidence

package.jsonapps/startx-cli/src/index.tsapps/startx-cli/src/commands/init.tsapps/startx-cli/src/commands/package.tsapps/startx-cli/src/utils/cli-utils.tspackages/aix/src/tools/system/index.tspackages/aix/src/tools/generic/forecast.tsapps/startx-cli/dist/index.mjsapps/startx-cli/src/utils/file-handler.tsapps/startx-cli/src/configs/files.tspackages/aix/src/lib/convertor/variable-resolver.tsapps/cli/src/commands/common/hashing.ts

Network endpoints5

geocoding-api.open-meteo.com/v1/searchapi.open-meteo.com/v1/forecastapi.anthropic.com/v1api.groq.com/openai/v1api.cerebras.ai/v1/

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for block

packages/aix/src/tools/system/index.ts exposes VM JavaScript execution tools when the optional aix template is used.
apps/startx-cli/src/commands/package.ts can run the workspace package manager after an explicit prompt unless --no-install is used.
apps/startx-cli/src/commands/init.ts writes .vscode settings/extensions into newly scaffolded workspaces.

Evidence against

package.json has no preinstall/install/postinstall lifecycle hooks; only bin startx is exposed.
apps/startx-cli/src/index.ts only registers commander subcommands; behavior is user-invoked.
apps/startx-cli/src/commands/init.ts and package.ts scaffold/copy template files and prompt before overwriting existing destinations.
apps/startx-cli/src/commands/package.ts spawn usage is limited to pnpm/yarn/npm install in the target workspace after dependency prompts.
Network references found are package-aligned app/template code such as OpenAI provider and Open-Meteo weather tools, not install/import-time exfiltration.
The dist Unicode hits are ANSI/control characters from bundled prompt UI, not source-hiding Trojan Source logic.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 259 file(s), 1.20 MB of source, external domains: api.anthropic.com, api.cerebras.ai, api.groq.com, api.open-meteo.com, app.com, dotenvx.com, fonts.googleapis.com, fonts.gstatic.com, geocoding-api.open-meteo.com, github.com, json-schema.org

Source & flagged code

6 flagged

apps/cli/src/commands/common/hashing.tsView file

Lines 7-35typescript

7 command = new Command("hash")

8 .argument("<password>", "String to hash")

9 .description("Hash a string")

10 .action(this.run.bind(this));

12 async run(password: string) {

13 const hash = await HashingModule.hash(password);

15 logger.info(`Hash for "${password}": ${hash}`);

16 }

17}

19export class HashingCompareCommand extends ICommand {

20 command = new Command("hash:compare")

21 .argument("<password>", "Original string")

22 .argument("<hash>", "Hash to compare")

23 .description("Compare a string against a hash")

24 .action(this.run.bind(this));

26 async run(password: string, hash: string) {

27 logger.info(`Comparing password: "${password}" against hash: "${hash}"`);

Medium

Secret Pattern

Package contains a possible secret pattern.

apps/cli/src/commands/common/hashing.tsView on unpkg · L27

29 const compare = await HashingModule.compare(password, hash);

31 logger.info(`Hash for "${password}": ${compare ? "Valid" : "Invalid"}`);

32 }

33}

34export const HashingCommands = [new HashingCommand(), new HashingCompareCommand()];

packages/aix/src/lib/convertor/variable-resolver.tsView file

Lines 109-149typescript

109 data: string;

110 access: "user" | "agent" | "system" | "message";

111 }>;

112 }) {

113 const messageVars = messages.

apps/startx-cli/dist/index.mjsView file

177contains invisible/control Unicode U+FEFF (zero width no-break space) `};delete e.items,Object.assign(e,{type:n,source:t,end:[r]});break}default:{let r=`indent`in e?e.indent:-1,i=`end`in e&&Array.isArray(e.end)?e.end.filter(e=>e.type===`space`||e.type===`comment`||e.type===`newline`):[];for(let t of Object.ke

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

apps/startx-cli/dist/index.mjsView on unpkg · L177

•Trigger-reachable chain: manifest.bin -> apps/startx-cli/dist/index.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

apps/startx-cli/dist/index.mjsView on unpkg

61`)[0]}\n`),Error.captureStackTrace(this,e)}};t.exports=e=>{if(e.length>2)throw new n(e);function t(e={}){this.options=e}t.prototype.transform=e;function r(e){return new t(e)}return... L62: `)!=-1,a=this._styles,s=a.length;s--;){var c=i[a[s]];e=c.open+e.replace(c.closeRe,c.open)+c.close,t&&(e=e.replace(o,function(e){return c.close+e+c.open}))}return e}n.setTheme=funct... L63: `));return!0}t.exports=(...e)=>{let t=n(r(e)),i=t();return i.Format=t.Format,i},t.exports.cascade=r})),vg=v(((e,t)=>{let{hasOwnProperty:n}=Object.prototype,r=_();r.configure=_,r.st...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

packages/aix/src/tools/system/index.tsView file

Lines 213-253typescript

213 .describe(

214 "Set to true if this operation fully resolves the user's request (script must return formatted Markdown). Set to false if extracting intermediate data."

215 ),

216 }),

217 run: async ({ isCompleted, operation }, internal) => {

218 try {

219

Source & flagged code

6 flagged · loading source

apps/cli/src/commands/common/hashing.tsView file

27patternName = generic_password severity = medium line = 27 matchedText = logger.i..."`);

Medium

Secret Pattern

Package contains a possible secret pattern.

apps/cli/src/commands/common/hashing.tsView on unpkg · L27

packages/aix/src/lib/convertor/variable-resolver.tsView file

129if (v.type === "fn") { L130: parsed = eval(`(function() { L131: return (function() {

Low

Eval

Package source references a known benign dynamic code generation pattern.

packages/aix/src/lib/convertor/variable-resolver.tsView on unpkg · L129

apps/startx-cli/dist/index.mjsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

apps/startx-cli/dist/index.mjsView on unpkg · L177

•Trigger-reachable chain: manifest.bin -> apps/startx-cli/dist/index.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

apps/startx-cli/dist/index.mjsView on unpkg

Medium

Dynamic Require

Package source references dynamic require/import behavior.

apps/startx-cli/dist/index.mjsView on unpkg · L61

packages/aix/src/tools/system/index.tsView file

233try { L234: contextValue = JSON.parse(contextValue); L235: } catch {

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

packages/aix/src/tools/system/index.tsView on unpkg · L233

Findings

2 Critical7 Medium5 Low

CriticalTrojan Source Unicodeapps/startx-cli/dist/index.mjs

CriticalTrigger Reachable Dangerous Capabilityapps/startx-cli/dist/index.mjs

MediumSecret Patternapps/cli/src/commands/common/hashing.ts

MediumDynamic Requireapps/startx-cli/dist/index.mjs

MediumUnsafe Vm Contextpackages/aix/src/tools/system/index.ts

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvalpackages/aix/src/lib/convertor/variable-resolver.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

apps/cli/src/commands/common/hashing.tsView file

Lines 7-35typescript

7 command = new Command("hash")

8 .argument("<password>", "String to hash")

9 .description("Hash a string")

10 .action(this.run.bind(this));

12 async run(password: string) {

13 const hash = await HashingModule.hash(password);

15 logger.info(`Hash for "${password}": ${hash}`);

16 }

17}

19export class HashingCompareCommand extends ICommand {

20 command = new Command("hash:compare")

21 .argument("<password>", "Original string")

22 .argument("<hash>", "Hash to compare")

23 .description("Compare a string against a hash")

24 .action(this.run.bind(this));

26 async run(password: string, hash: string) {

27 logger.info(`Comparing password: "${password}" against hash: "${hash}"`);

Medium

Secret Pattern

Package contains a possible secret pattern.

apps/cli/src/commands/common/hashing.tsView on unpkg · L27

29 const compare = await HashingModule.compare(password, hash);

31 logger.info(`Hash for "${password}": ${compare ? "Valid" : "Invalid"}`);

32 }

33}

34export const HashingCommands = [new HashingCommand(), new HashingCompareCommand()];

packages/aix/src/lib/convertor/variable-resolver.tsView file

Lines 109-149typescript

109 data: string;

110 access: "user" | "agent" | "system" | "message";

111 }>;

112 }) {

113 const messageVars = messages.

apps/startx-cli/dist/index.mjsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

apps/startx-cli/dist/index.mjsView on unpkg · L177

•Trigger-reachable chain: manifest.bin -> apps/startx-cli/dist/index.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

apps/startx-cli/dist/index.mjsView on unpkg

Medium

Dynamic Require

Package source references dynamic require/import behavior.

packages/aix/src/tools/system/index.tsView file

Lines 213-253typescript

213 .describe(

214 "Set to true if this operation fully resolves the user's request (script must return formatted Markdown). Set to false if extracting intermediate data."

215 ),

216 }),

217 run: async ({ isCompleted, operation }, internal) => {

218 try {

219