registry / svamp-cli / 0.2.237

svamp-cli@0.2.237

⚠ Under review

Svamp CLI — AI workspace daemon on Hypha Cloud

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 18 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsObfuscatedUrlStrings

Manifest

NoLicense

scanned 32 file(s), 1.18 MB of source, external domains: 127.0.0.1, amun.ai, api.github.com, api.imjoy.io, api.openai.com, claude.ai, console.anthropic.com, github.com, hypha.aicell.io, platform.claude.com, proxy.hypha.aicell.io, status.claude.com, svamp.aicell.io, www.apple.com

Source & flagged code

9 flagged

dist/frpc-Ba_vkNU8.mjsView file

Lines 143-183javascript

143 // 15s/45s heartbeat — 2x faster failure detection than the frpc default

144 // (30s/90s). With matching server-side frps 0.68.x, dead-peer detection

145 // settles in well under a minute, so the daemon-side recreate threshold

146 // can be tightened too.

147 "transport.heartbeatInterval = 15",

148 "transport.heartbeatTimeout = 45",

149 "transport.poolCount = 5",

150 "",

151 "# Don't exit on login failure \u2014 let frpc keep retrying",

152 "loginFailExit = false",

153 "",

154 'log.to = "console"',

155 'log.level = "info"',

156 ""

157 ];

158 if (admin) {

159 lines.push("# Local admin/status API (loopback only \u2014 polled by the svamp daemon)");

160 lines.push('webServer.addr = "127.0.0.1"');

161 lines.push(`webServer.port = ${admin.port}`);

162 lines.push(`webServer.user = "${admin.user}"`);

163 lines.push(`webServer.password = "${admin.password}"`);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/frpc-Ba_vkNU8.mjsView on unpkg · L163

164 lines.push("");

165 }

166 for (const proxy of proxies) {

167 lines.push(`[[proxies]]`);

168 lines.push(`name = "${proxy.name}"`);

169 lines.push(`type = "${proxy.type}"`);

170 lines.push(`localIP = "${proxy.localIP || "127.0.0.1"}"`);

171 lines.push(`localPort = ${proxy.localPort}`);

172 if (proxy.subdomain) {

173 lines.push(`subdomain = "${proxy.subdomain}"`);

174 }

175 if (proxy.customDomains && proxy.customDomains.length > 0) {

176 lines.push(`customDomains = [${proxy.customDomains.map((d) => `"${d}"`).join(", ")}]`);

177 }

178 if (proxy.group) {

179 lines.push(`loadBalancer.group = "${proxy.group}"`);

180 if (proxy.groupKey) {

181 lines.push(`loadBalancer.groupKey = "${proxy.groupKey}"`);

182 }

183 }

dist/serviceManager-hlOVxkhW.mjsView file

Lines 1-26javascript

1const LAUNCHD_LABEL = "io.hypha.svamp.daemon";

2const SYSTEMD_UNIT = "svamp-daemon.service";

3async function ensureSupervisorViaServiceManager() {

4 const os = await import('os'

dist/run-D2CpI5au.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = svamp-cli@0.2.230 matchedIdentity = npm:c3ZhbXAtY2xp:0.2.230 similarity = 0.781 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/run-D2CpI5au.mjsView on unpkg

7310const fullCommand = [spawnCommand, ...spawnArgs].join(" "); L7311: this.process = spawn("cmd.exe", ["/c", fullCommand], { L7312: cwd: this.options.cwd,

High

Shell

Package source references shell execution.

dist/run-D2CpI5au.mjsView on unpkg · L7310

5import { fileURLToPath } from 'url'; L6: import { execFile, spawn as spawn$1, execSync as execSync$1, exec as exec$1 } from 'child_process'; L7: import { randomUUID as randomUUID$1 } from 'crypto'; ... L26: const mod = await import('hypha-rpc'); L27: connectToServerFn = mod.connectToServer || mod.default && mod.default.connectToServer || mod.hyphaWebsocketClient && mod.hyphaWebsocketClient.connectToServer; L28: if (!connectToServerFn) { ... L58: try { L59: const payload = JSON.parse(Buffer.from(token.split(".")[1], "base64").toString()); L60: const scope = payload.scope || ""; ... L67: function getHyphaServerUrl$1() { L68: return process.env.HYPHA_SERVER_URL || "http://localhost:9527"; L69: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/run-C7Zt6jLc.mjsView file

Lines 213-253javascript

213 child.on("exit", (code, signal) => {

214 log(`[local] Claude exited: code=${code}, signal=${signal}`);

215 scanner.cleanup();

216 process.stdin.resume();

217 onThinkingChange(false);

dist/cli.mjsView file

Lines 1-27javascript

1import { e as clearStopMarker, f as stopMarkerExists, s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-D2CpI5au.mjs';

2import { ensureSupervisorViaServiceManager, LAUNCHD_LABEL } from './serviceManager-hlOVxkhW.mjs';

3import 'os';

4import 'fs/promises';

5import

Source & flagged code

9 flagged · loading source

dist/frpc-Ba_vkNU8.mjsView file

163patternName = generic_password severity = medium line = 163 matchedText = lines.pu..."`);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/frpc-Ba_vkNU8.mjsView on unpkg · L163

dist/serviceManager-hlOVxkhW.mjsView file

6const fs = await import('fs'); L7: const { execSync } = await import('child_process'); L8: if (process.platform === "darwin") {

High

Child Process

Package source references child process execution.

dist/serviceManager-hlOVxkhW.mjsView on unpkg · L6

dist/run-D2CpI5au.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/run-D2CpI5au.mjsView on unpkg

7310const fullCommand = [spawnCommand, ...spawnArgs].join(" "); L7311: this.process = spawn("cmd.exe", ["/c", fullCommand], { L7312: cwd: this.options.cwd,

High

Shell

Package source references shell execution.

dist/run-D2CpI5au.mjsView on unpkg · L7310

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/run-D2CpI5au.mjsView on unpkg · L5

5929writeFileSync(tmp, out.outputFiles[0].text); L5930: const nativeImport = new Function("u", "return import(u)"); L5931: return nativeImport(pathToFileURL(tmp).href);

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/run-D2CpI5au.mjsView on unpkg · L5929

dist/run-C7Zt6jLc.mjsView file

233try { L234: const { execSync } = require("child_process"); L235: const path = execSync("which claude 2>/dev/null", { encoding: "utf-8" }).trim();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/run-C7Zt6jLc.mjsView on unpkg · L233

dist/cli.mjsView file

7Cross-file remote execution chain: dist/cli.mjs spawns dist/run-C7Zt6jLc.mjs; helper contains network access plus dynamic code execution. L7: import 'url'; L8: import 'child_process'; L9: import 'crypto'; ... L27: console.error(`Error: svamp requires Node.js >= 22 (you have ${process.version}).`); L28: console.error(" Node 22+ includes native WebSocket support needed by hypha-rpc."); L29: console.error(" Upgrade with: nvm install 22 && nvm alias default 22"); ... L70: const os = await import('os'); L71: const svampHome = process.env.SVAMP_HOME || join(os.homedir(), ".svamp"); L72: const logsDir = join(svampHome, "logs"); ... L219: const startTime = Date.now(); L220: const exitCode = await new Promise((resolve) => { L221: const child = spawnChild(process.execPath, [

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.mjsView on unpkg · L7

7import 'url'; L8: import 'child_process'; L9: import 'crypto'; ... L27: console.error(`Error: svamp requires Node.js >= 22 (you have ${process.version}).`); L28: console.error(" Node 22+ includes native WebSocket support needed by hypha-rpc."); L29: console.error(" Upgrade with: nvm install 22 && nvm alias default 22"); ... L70: const os = await import('os'); L71: const svampHome = process.env.SVAMP_HOME || join(os.homedir(), ".svamp"); L72: const logsDir = join(svampHome, "logs"); ... L219: const startTime = Date.now(); L220: const exitCode = await new Promise((resolve) => { L221: const child = spawnChild(process.execPath, [

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli.mjsView on unpkg · L7

Findings

1 Critical4 High6 Medium7 Low

CriticalPrevious Version Dangerous Deltadist/run-D2CpI5au.mjs

HighChild Processdist/serviceManager-hlOVxkhW.mjs

HighShelldist/run-D2CpI5au.mjs

HighSandbox Evasion Gated Capabilitydist/run-D2CpI5au.mjs

HighCross File Remote Execution Contextdist/cli.mjs

MediumSecret Patterndist/frpc-Ba_vkNU8.mjs

MediumDynamic Requiredist/run-C7Zt6jLc.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/cli.mjs

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/run-D2CpI5au.mjs

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

9 flagged

dist/frpc-Ba_vkNU8.mjsView file

Lines 143-183javascript

143 // 15s/45s heartbeat — 2x faster failure detection than the frpc default

144 // (30s/90s). With matching server-side frps 0.68.x, dead-peer detection

145 // settles in well under a minute, so the daemon-side recreate threshold

146 // can be tightened too.

147 "transport.heartbeatInterval = 15",

148 "transport.heartbeatTimeout = 45",

149 "transport.poolCount = 5",

150 "",

151 "# Don't exit on login failure \u2014 let frpc keep retrying",

152 "loginFailExit = false",

153 "",

154 'log.to = "console"',

155 'log.level = "info"',

156 ""

157 ];

158 if (admin) {

159 lines.push("# Local admin/status API (loopback only \u2014 polled by the svamp daemon)");

160 lines.push('webServer.addr = "127.0.0.1"');

161 lines.push(`webServer.port = ${admin.port}`);

162 lines.push(`webServer.user = "${admin.user}"`);

163 lines.push(`webServer.password = "${admin.password}"`);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/frpc-Ba_vkNU8.mjsView on unpkg · L163

164 lines.push("");

165 }

166 for (const proxy of proxies) {

167 lines.push(`[[proxies]]`);

168 lines.push(`name = "${proxy.name}"`);

169 lines.push(`type = "${proxy.type}"`);

170 lines.push(`localIP = "${proxy.localIP || "127.0.0.1"}"`);

171 lines.push(`localPort = ${proxy.localPort}`);

172 if (proxy.subdomain) {

173 lines.push(`subdomain = "${proxy.subdomain}"`);

174 }

175 if (proxy.customDomains && proxy.customDomains.length > 0) {

176 lines.push(`customDomains = [${proxy.customDomains.map((d) => `"${d}"`).join(", ")}]`);

177 }

178 if (proxy.group) {

179 lines.push(`loadBalancer.group = "${proxy.group}"`);

180 if (proxy.groupKey) {

181 lines.push(`loadBalancer.groupKey = "${proxy.groupKey}"`);

182 }

183 }

dist/serviceManager-hlOVxkhW.mjsView file

Lines 1-26javascript

1const LAUNCHD_LABEL = "io.hypha.svamp.daemon";

2const SYSTEMD_UNIT = "svamp-daemon.service";

3async function ensureSupervisorViaServiceManager() {

4 const os = await import('os'

dist/run-D2CpI5au.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/run-D2CpI5au.mjsView on unpkg

7310const fullCommand = [spawnCommand, ...spawnArgs].join(" "); L7311: this.process = spawn("cmd.exe", ["/c", fullCommand], { L7312: cwd: this.options.cwd,

High

Shell

Package source references shell execution.

dist/run-D2CpI5au.mjsView on unpkg · L7310

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/run-C7Zt6jLc.mjsView file

Lines 213-253javascript

213 child.on("exit", (code, signal) => {

214 log(`[local] Claude exited: code=${code}, signal=${signal}`);

215 scanner.cleanup();

216 process.stdin.resume();

217 onThinkingChange(false);

dist/cli.mjsView file

Lines 1-27javascript

1import { e as clearStopMarker, f as stopMarkerExists, s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-D2CpI5au.mjs';

2import { ensureSupervisorViaServiceManager, LAUNCHD_LABEL } from './serviceManager-hlOVxkhW.mjs';

3import 'os';

4import 'fs/promises';

5import