registry / svamp-cli / 0.2.256

svamp-cli@0.2.256

⚠ Under review

Svamp CLI — AI workspace daemon on Hypha Cloud

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsObfuscatedUrlStrings

Manifest

NoLicense

scanned 30 file(s), 1.22 MB of source, external domains: 127.0.0.1, amun.ai, api.github.com, api.imjoy.io, api.openai.com, claude.ai, console.anthropic.com, github.com, hypha.aicell.io, platform.claude.com, proxy.hypha.aicell.io, status.claude.com, svamp.aicell.io, www.apple.com

Source & flagged code

9 flagged

dist/frpc--8kUn3Em.mjsView file

Lines 144-184javascript

144 // 15s/45s heartbeat — 2x faster failure detection than the frpc default

145 // (30s/90s). With matching server-side frps 0.68.x, dead-peer detection

146 // settles in well under a minute, so the daemon-side recreate threshold

147 // can be tightened too.

148 "transport.heartbeatInterval = 15",

149 "transport.heartbeatTimeout = 45",

150 "transport.poolCount = 5",

151 "",

152 "# Don't exit on login failure \u2014 let frpc keep retrying",

153 "loginFailExit = false",

154 "",

155 'log.to = "console"',

156 'log.level = "info"',

157 ""

158 ];

159 if (admin) {

160 lines.push("# Local admin/status API (loopback only \u2014 polled by the svamp daemon)");

161 lines.push('webServer.addr = "127.0.0.1"');

162 lines.push(`webServer.port = ${admin.port}`);

163 lines.push(`webServer.user = "${admin.user}"`);

164 lines.push(`webServer.password = "${admin.password}"`);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/frpc--8kUn3Em.mjsView on unpkg · L164

165 lines.push("");

166 }

167 for (const proxy of proxies) {

168 lines.push(`[[proxies]]`);

169 lines.push(`name = "${proxy.name}"`);

170 lines.push(`type = "${proxy.type}"`);

171 lines.push(`localIP = "${proxy.localIP || "127.0.0.1"}"`);

172 lines.push(`localPort = ${proxy.localPort}`);

173 if (proxy.subdomain) {

174 lines.push(`subdomain = "${proxy.subdomain}"`);

175 }

176 if (proxy.customDomains && proxy.customDomains.length > 0) {

177 lines.push(`customDomains = [${proxy.customDomains.map((d) => `"${d}"`).join(", ")}]`);

178 }

179 if (proxy.group) {

180 lines.push(`loadBalancer.group = "${proxy.group}"`);

181 if (proxy.groupKey) {

182 lines.push(`loadBalancer.groupKey = "${proxy.groupKey}"`);

183 }

184 }

dist/commands-Cgi-GKQk.mjsView file

Lines 1-21javascript

1import { execSync } from 'node:child_process';

2import { existsSync, readFileSync } from 'node:fs';

High

Child Process

Package source references child process execution.

dist/commands-Cgi-GKQk.mjsView on unpkg · L1

3import { join } from 'node:path';

4import { n as resolveProjectRoot, x as searchIssues, w as listIssues, p

dist/run-BDX-RaEm.mjsView file

7452const fullCommand = [spawnCommand, ...spawnArgs].join(" "); L7453: this.process = spawn("cmd.exe", ["/c", fullCommand], { L7454: cwd: this.options.cwd,

High

Shell

Package source references shell execution.

dist/run-BDX-RaEm.mjsView on unpkg · L7452

5import { fileURLToPath } from 'url'; L6: import { execFile, spawn as spawn$1, execSync as execSync$1, exec as exec$1 } from 'child_process'; L7: import { randomUUID as randomUUID$1 } from 'crypto'; ... L27: const mod = await import('hypha-rpc'); L28: connectToServerFn = mod.connectToServer || mod.default && mod.default.connectToServer || mod.hyphaWebsocketClient && mod.hyphaWebsocketClient.connectToServer; L29: if (!connectToServerFn) { ... L59: try { L60: const payload = JSON.parse(Buffer.from(token.split(".")[1], "base64").toString()); L61: const scope = payload.scope || ""; ... L68: function getHyphaServerUrl$1() { L69: return process.env.HYPHA_SERVER_URL || "http://localhost:9527"; L70: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/run-BDX-RaEm.mjsView on unpkg · L5

26if (!connectToServerFn) { L27: const mod = await import('hypha-rpc'); L28: connectToServerFn = mod.connectToServer || mod.default && mod.default.connectToServer || mod.hyphaWebsocketClient && mod.hyphaWebsocketClient.connectToServer;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/run-BDX-RaEm.mjs

dist/cli.mjsView file

Lines 1-27javascript

1import { e as clearStopMarker, f as stopMarkerExists, s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-BDX-RaEm.mjs';

2import { ensureSupervisorViaServiceManager, LAUNCHD_LABEL } from './serviceManager-hlOVxkhW.mjs';

3import 'os';

4import 'fs/promises';

5import

dist/commands-DPKRLSJZ.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = svamp-cli@0.2.255 matchedIdentity = npm:c3ZhbXAtY2xp:0.2.255 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands-DPKRLSJZ.mjsView on unpkg

Source & flagged code

9 flagged · loading source

dist/frpc--8kUn3Em.mjsView file

164patternName = generic_password severity = medium line = 164 matchedText = lines.pu..."`);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/frpc--8kUn3Em.mjsView on unpkg · L164

dist/commands-Cgi-GKQk.mjsView file

1import { execSync } from 'node:child_process'; L2: import { existsSync, readFileSync } from 'node:fs';

High

Child Process

Package source references child process execution.

dist/commands-Cgi-GKQk.mjsView on unpkg · L1

dist/run-BDX-RaEm.mjsView file

7452const fullCommand = [spawnCommand, ...spawnArgs].join(" "); L7453: this.process = spawn("cmd.exe", ["/c", fullCommand], { L7454: cwd: this.options.cwd,

High

Shell

Package source references shell execution.

dist/run-BDX-RaEm.mjsView on unpkg · L7452

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/run-BDX-RaEm.mjsView on unpkg · L5

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/run-BDX-RaEm.mjsView on unpkg · L26

5971writeFileSync(tmp, out.outputFiles[0].text); L5972: const nativeImport = new Function("u", "return import(u)"); L5973: return nativeImport(pathToFileURL(tmp).href);

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/run-BDX-RaEm.mjsView on unpkg · L5971

dist/cli.mjsView file

7Cross-file remote execution chain: dist/cli.mjs spawns dist/run-BDX-RaEm.mjs; helper contains network access plus dynamic code execution. L7: import 'url'; L8: import 'child_process'; L9: import 'crypto'; ... L28: console.error(`Error: svamp requires Node.js >= 22 (you have ${process.version}).`); L29: console.error(" Node 22+ includes native WebSocket support needed by hypha-rpc."); L30: console.error(" Upgrade with: nvm install 22 && nvm alias default 22"); ... L81: const os = await import('os'); L82: const svampHome = process.env.SVAMP_HOME || join(os.homedir(), ".svamp"); L83: const logsDir = join(svampHome, "logs"); ... L230: const startTime = Date.now(); L231: const exitCode = await new Promise((resolve) => { L232: const child = spawnChild(process.execPath, [

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.mjsView on unpkg · L7

7import 'url'; L8: import 'child_process'; L9: import 'crypto'; ... L28: console.error(`Error: svamp requires Node.js >= 22 (you have ${process.version}).`); L29: console.error(" Node 22+ includes native WebSocket support needed by hypha-rpc."); L30: console.error(" Upgrade with: nvm install 22 && nvm alias default 22"); ... L81: const os = await import('os'); L82: const svampHome = process.env.SVAMP_HOME || join(os.homedir(), ".svamp"); L83: const logsDir = join(svampHome, "logs"); ... L230: const startTime = Date.now(); L231: const exitCode = await new Promise((resolve) => { L232: const child = spawnChild(process.execPath, [

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli.mjsView on unpkg · L7

dist/commands-DPKRLSJZ.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands-DPKRLSJZ.mjsView on unpkg

Findings

1 Critical4 High6 Medium8 Low

CriticalPrevious Version Dangerous Deltadist/commands-DPKRLSJZ.mjs

HighChild Processdist/commands-Cgi-GKQk.mjs

HighShelldist/run-BDX-RaEm.mjs

HighSandbox Evasion Gated Capabilitydist/run-BDX-RaEm.mjs

HighCross File Remote Execution Contextdist/cli.mjs

MediumSecret Patterndist/frpc--8kUn3Em.mjs

MediumDynamic Requiredist/run-BDX-RaEm.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/cli.mjs

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/run-BDX-RaEm.mjs

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

9 flagged

dist/frpc--8kUn3Em.mjsView file

Lines 144-184javascript

144 // 15s/45s heartbeat — 2x faster failure detection than the frpc default

145 // (30s/90s). With matching server-side frps 0.68.x, dead-peer detection

146 // settles in well under a minute, so the daemon-side recreate threshold

147 // can be tightened too.

148 "transport.heartbeatInterval = 15",

149 "transport.heartbeatTimeout = 45",

150 "transport.poolCount = 5",

151 "",

152 "# Don't exit on login failure \u2014 let frpc keep retrying",

153 "loginFailExit = false",

154 "",

155 'log.to = "console"',

156 'log.level = "info"',

157 ""

158 ];

159 if (admin) {

160 lines.push("# Local admin/status API (loopback only \u2014 polled by the svamp daemon)");

161 lines.push('webServer.addr = "127.0.0.1"');

162 lines.push(`webServer.port = ${admin.port}`);

163 lines.push(`webServer.user = "${admin.user}"`);

164 lines.push(`webServer.password = "${admin.password}"`);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/frpc--8kUn3Em.mjsView on unpkg · L164

165 lines.push("");

166 }

167 for (const proxy of proxies) {

168 lines.push(`[[proxies]]`);

169 lines.push(`name = "${proxy.name}"`);

170 lines.push(`type = "${proxy.type}"`);

171 lines.push(`localIP = "${proxy.localIP || "127.0.0.1"}"`);

172 lines.push(`localPort = ${proxy.localPort}`);

173 if (proxy.subdomain) {

174 lines.push(`subdomain = "${proxy.subdomain}"`);

175 }

176 if (proxy.customDomains && proxy.customDomains.length > 0) {

177 lines.push(`customDomains = [${proxy.customDomains.map((d) => `"${d}"`).join(", ")}]`);

178 }

179 if (proxy.group) {

180 lines.push(`loadBalancer.group = "${proxy.group}"`);

181 if (proxy.groupKey) {

182 lines.push(`loadBalancer.groupKey = "${proxy.groupKey}"`);

183 }

184 }

dist/commands-Cgi-GKQk.mjsView file

Lines 1-21javascript

1import { execSync } from 'node:child_process';

2import { existsSync, readFileSync } from 'node:fs';

High

Child Process

Package source references child process execution.

dist/commands-Cgi-GKQk.mjsView on unpkg · L1

3import { join } from 'node:path';

4import { n as resolveProjectRoot, x as searchIssues, w as listIssues, p

dist/run-BDX-RaEm.mjsView file

7452const fullCommand = [spawnCommand, ...spawnArgs].join(" "); L7453: this.process = spawn("cmd.exe", ["/c", fullCommand], { L7454: cwd: this.options.cwd,

High

Shell

Package source references shell execution.

dist/run-BDX-RaEm.mjsView on unpkg · L7452

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/run-BDX-RaEm.mjsView on unpkg · L5

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/run-BDX-RaEm.mjs

dist/cli.mjsView file

Lines 1-27javascript

1import { e as clearStopMarker, f as stopMarkerExists, s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-BDX-RaEm.mjs';

2import { ensureSupervisorViaServiceManager, LAUNCHD_LABEL } from './serviceManager-hlOVxkhW.mjs';

3import 'os';

4import 'fs/promises';

5import

dist/commands-DPKRLSJZ.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands-DPKRLSJZ.mjsView on unpkg