registry / svamp-cli / 0.2.263

svamp-cli@0.2.263

Svamp CLI — AI workspace daemon on Hypha Cloud

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsObfuscatedUrlStrings

Manifest

NoLicense

scanned 30 file(s), 1.25 MB of source, external domains: 127.0.0.1, amun.ai, api.github.com, api.imjoy.io, api.openai.com, claude.ai, console.anthropic.com, github.com, hypha.aicell.io, platform.claude.com, proxy.hypha.aicell.io, status.claude.com, svamp.aicell.io, tokenfans.ai, www.apple.com

Source & flagged code

9 flagged

dist/frpc-YKxUZoMA.mjsView file

Lines 141-181javascript

141 // 15s/45s heartbeat — 2x faster failure detection than the frpc default

142 // (30s/90s). With matching server-side frps 0.68.x, dead-peer detection

143 // settles in well under a minute, so the daemon-side recreate threshold

144 // can be tightened too.

145 "transport.heartbeatInterval = 15",

146 "transport.heartbeatTimeout = 45",

147 "transport.poolCount = 5",

148 "",

149 "# Don't exit on login failure \u2014 let frpc keep retrying",

150 "loginFailExit = false",

151 "",

152 'log.to = "console"',

153 'log.level = "info"',

154 ""

155 ];

156 if (admin) {

157 lines.push("# Local admin/status API (loopback only \u2014 polled by the svamp daemon)");

158 lines.push('webServer.addr = "127.0.0.1"');

159 lines.push(`webServer.port = ${admin.port}`);

160 lines.push(`webServer.user = "${admin.user}"`);

161 lines.push(`webServer.password = "${admin.password}"`);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/frpc-YKxUZoMA.mjsView on unpkg · L161

162 lines.push("");

163 }

164 for (const proxy of proxies) {

165 lines.push(`[[proxies]]`);

166 lines.push(`name = "${proxy.name}"`);

167 lines.push(`type = "${proxy.type}"`);

168 lines.push(`localIP = "${proxy.localIP || "127.0.0.1"}"`);

169 lines.push(`localPort = ${proxy.localPort}`);

170 if (proxy.subdomain) {

171 lines.push(`subdomain = "${proxy.subdomain}"`);

172 }

173 if (proxy.customDomains && proxy.customDomains.length > 0) {

174 lines.push(`customDomains = [${proxy.customDomains.map((d) => `"${d}"`).join(", ")}]`);

175 }

176 if (proxy.group) {

177 lines.push(`loadBalancer.group = "${proxy.group}"`);

178 if (proxy.groupKey) {

179 lines.push(`loadBalancer.groupKey = "${proxy.groupKey}"`);

180 }

181 }

dist/headlessCli-DfKlYX0C.mjsView file

Lines 1-23javascript

1import { a1 as resolveModel, ae as describeMisconfiguration, af as buildMachineDeps } from './run-DAOLRpvC.mjs';

2import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-DPLjT788.mjs';

3import { WebSocket } from 'ws';

4import { execSync, spawn } from 'child_process';

dist/run-DAOLRpvC.mjsView file

7494const fullCommand = [spawnCommand, ...spawnArgs].join(" "); L7495: this.process = spawn("cmd.exe", ["/c", fullCommand], { L7496: cwd: this.options.cwd,

High

Shell

Package source references shell execution.

dist/run-DAOLRpvC.mjsView on unpkg · L7494

5import { fileURLToPath } from 'url'; L6: import { execFile, spawn as spawn$1, execSync as execSync$1, exec as exec$1 } from 'child_process'; L7: import { randomUUID as randomUUID$1 } from 'crypto'; ... L24: const mod = await import('hypha-rpc'); L25: connectToServerFn = mod.connectToServer || mod.default && mod.default.connectToServer || mod.hyphaWebsocketClient && mod.hyphaWebsocketClient.connectToServer; L26: if (!connectToServerFn) { ... L56: try { L57: const payload = JSON.parse(Buffer.from(token.split(".")[1], "base64").toString()); L58: const scope = payload.scope || ""; ... L65: function getHyphaServerUrl$1() { L66: return process.env.HYPHA_SERVER_URL || "http://localhost:9527"; L67: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/run-DAOLRpvC.mjsView on unpkg · L5

23if (!connectToServerFn) { L24: const mod = await import('hypha-rpc'); L25: connectToServerFn = mod.connectToServer || mod.default && mod.default.connectToServer || mod.hyphaWebsocketClient && mod.hyphaWebsocketClient.connectToServer;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/run-DAOLRpvC.mjs

dist/cli.mjsView file

Lines 1-27javascript

1import { e as clearStopMarker, f as stopMarkerExists, s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-DAOLRpvC.mjs';

2import { ensureSupervisorViaServiceManager, LAUNCHD_LABEL } from './serviceManager-hlOVxkhW.mjs';

3import 'os';

4import 'fs/promises';

5import

Source & flagged code

9 flagged · loading source

dist/frpc-YKxUZoMA.mjsView file

161patternName = generic_password severity = medium line = 161 matchedText = lines.pu..."`);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/frpc-YKxUZoMA.mjsView on unpkg · L161

dist/headlessCli-DfKlYX0C.mjsView file

3import { WebSocket } from 'ws'; L4: import { execSync, spawn } from 'child_process'; L5: import 'os';

High

Child Process

Package source references child process execution.

dist/headlessCli-DfKlYX0C.mjsView on unpkg · L3

dist/run-DAOLRpvC.mjsView file

7494const fullCommand = [spawnCommand, ...spawnArgs].join(" "); L7495: this.process = spawn("cmd.exe", ["/c", fullCommand], { L7496: cwd: this.options.cwd,

High

Shell

Package source references shell execution.

dist/run-DAOLRpvC.mjsView on unpkg · L7494

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/run-DAOLRpvC.mjsView on unpkg · L5

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/run-DAOLRpvC.mjsView on unpkg · L23

6013writeFileSync(tmp, out.outputFiles[0].text); L6014: const nativeImport = new Function("u", "return import(u)"); L6015: return nativeImport(pathToFileURL(tmp).href);

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/run-DAOLRpvC.mjsView on unpkg · L6013

dist/cli.mjsView file

2088console.error("Usage: svamp daemon codex-auth set <base-url> <api-key> [model]"); L2089: console.error(" e.g. svamp daemon codex-auth set https://tokenfans.ai/v1 sk-... gpt-5.5"); L2090: process.exit(1); ... L2096: if (sub === "use-openai") { L2097: const key = argv[1] || process.env.OPENAI_API_KEY; L2098: if (!key) { ... L2101: } L2102: const { spawnSync } = await import('node:child_process'); L2103: const r = spawnSync("codex", ["login", "--with-api-key"], { input: key, encoding: "utf8", stdio: ["pipe", "inherit", "inherit"] });

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.mjsView on unpkg · L2088

7Cross-file remote execution chain: dist/cli.mjs spawns dist/run-DAOLRpvC.mjs; helper contains network access plus dynamic code execution. L7: import 'url'; L8: import 'child_process'; L9: import 'crypto'; ... L25: console.error(`Error: svamp requires Node.js >= 22 (you have ${process.version}).`); L26: console.error(" Node 22+ includes native WebSocket support needed by hypha-rpc."); L27: console.error(" Upgrade with: nvm install 22 && nvm alias default 22"); ... L78: const os = await import('os'); L79: const svampHome = process.env.SVAMP_HOME || join(os.homedir(), ".svamp"); L80: const logsDir = join(svampHome, "logs"); ... L227: const startTime = Date.now(); L228: const exitCode = await new Promise((resolve) => { L229: const child = spawnChild(process.execPath, [

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.mjsView on unpkg · L7

7import 'url'; L8: import 'child_process'; L9: import 'crypto'; ... L25: console.error(`Error: svamp requires Node.js >= 22 (you have ${process.version}).`); L26: console.error(" Node 22+ includes native WebSocket support needed by hypha-rpc."); L27: console.error(" Upgrade with: nvm install 22 && nvm alias default 22"); ... L78: const os = await import('os'); L79: const svampHome = process.env.SVAMP_HOME || join(os.homedir(), ".svamp"); L80: const logsDir = join(svampHome, "logs"); ... L227: const startTime = Date.now(); L228: const exitCode = await new Promise((resolve) => { L229: const child = spawnChild(process.execPath, [

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli.mjsView on unpkg · L7

Findings

5 High6 Medium8 Low

HighChild Processdist/headlessCli-DfKlYX0C.mjs

HighShelldist/run-DAOLRpvC.mjs

HighSame File Env Network Executiondist/cli.mjs

HighSandbox Evasion Gated Capabilitydist/run-DAOLRpvC.mjs

HighCross File Remote Execution Contextdist/cli.mjs

MediumSecret Patterndist/frpc-YKxUZoMA.mjs

MediumDynamic Requiredist/run-DAOLRpvC.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/cli.mjs

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/run-DAOLRpvC.mjs

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

9 flagged

dist/frpc-YKxUZoMA.mjsView file

Lines 141-181javascript

141 // 15s/45s heartbeat — 2x faster failure detection than the frpc default

142 // (30s/90s). With matching server-side frps 0.68.x, dead-peer detection

143 // settles in well under a minute, so the daemon-side recreate threshold

144 // can be tightened too.

145 "transport.heartbeatInterval = 15",

146 "transport.heartbeatTimeout = 45",

147 "transport.poolCount = 5",

148 "",

149 "# Don't exit on login failure \u2014 let frpc keep retrying",

150 "loginFailExit = false",

151 "",

152 'log.to = "console"',

153 'log.level = "info"',

154 ""

155 ];

156 if (admin) {

157 lines.push("# Local admin/status API (loopback only \u2014 polled by the svamp daemon)");

158 lines.push('webServer.addr = "127.0.0.1"');

159 lines.push(`webServer.port = ${admin.port}`);

160 lines.push(`webServer.user = "${admin.user}"`);

161 lines.push(`webServer.password = "${admin.password}"`);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/frpc-YKxUZoMA.mjsView on unpkg · L161

162 lines.push("");

163 }

164 for (const proxy of proxies) {

165 lines.push(`[[proxies]]`);

166 lines.push(`name = "${proxy.name}"`);

167 lines.push(`type = "${proxy.type}"`);

168 lines.push(`localIP = "${proxy.localIP || "127.0.0.1"}"`);

169 lines.push(`localPort = ${proxy.localPort}`);

170 if (proxy.subdomain) {

171 lines.push(`subdomain = "${proxy.subdomain}"`);

172 }

173 if (proxy.customDomains && proxy.customDomains.length > 0) {

174 lines.push(`customDomains = [${proxy.customDomains.map((d) => `"${d}"`).join(", ")}]`);

175 }

176 if (proxy.group) {

177 lines.push(`loadBalancer.group = "${proxy.group}"`);

178 if (proxy.groupKey) {

179 lines.push(`loadBalancer.groupKey = "${proxy.groupKey}"`);

180 }

181 }

dist/headlessCli-DfKlYX0C.mjsView file

Lines 1-23javascript

1import { a1 as resolveModel, ae as describeMisconfiguration, af as buildMachineDeps } from './run-DAOLRpvC.mjs';

2import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-DPLjT788.mjs';

3import { WebSocket } from 'ws';

4import { execSync, spawn } from 'child_process';

dist/run-DAOLRpvC.mjsView file

7494const fullCommand = [spawnCommand, ...spawnArgs].join(" "); L7495: this.process = spawn("cmd.exe", ["/c", fullCommand], { L7496: cwd: this.options.cwd,

High

Shell

Package source references shell execution.

dist/run-DAOLRpvC.mjsView on unpkg · L7494

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/run-DAOLRpvC.mjsView on unpkg · L5

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/run-DAOLRpvC.mjs

dist/cli.mjsView file

Lines 1-27javascript

1import { e as clearStopMarker, f as stopMarkerExists, s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-DAOLRpvC.mjs';

2import { ensureSupervisorViaServiceManager, LAUNCHD_LABEL } from './serviceManager-hlOVxkhW.mjs';

3import 'os';

4import 'fs/promises';

5import