registry / svamp-cli / 0.2.257

svamp-cli@0.2.257

⚠ Under review

Svamp CLI — AI workspace daemon on Hypha Cloud

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsObfuscatedUrlStrings

Manifest

NoLicense

scanned 30 file(s), 1.23 MB of source, external domains: 127.0.0.1, amun.ai, api.github.com, api.imjoy.io, api.openai.com, claude.ai, console.anthropic.com, github.com, hypha.aicell.io, platform.claude.com, proxy.hypha.aicell.io, status.claude.com, svamp.aicell.io, www.apple.com

Source & flagged code

9 flagged

dist/frpc-QESvQN-s.mjsView file

Lines 144-184javascript

144 // 15s/45s heartbeat — 2x faster failure detection than the frpc default

145 // (30s/90s). With matching server-side frps 0.68.x, dead-peer detection

146 // settles in well under a minute, so the daemon-side recreate threshold

147 // can be tightened too.

148 "transport.heartbeatInterval = 15",

149 "transport.heartbeatTimeout = 45",

150 "transport.poolCount = 5",

151 "",

152 "# Don't exit on login failure \u2014 let frpc keep retrying",

153 "loginFailExit = false",

154 "",

155 'log.to = "console"',

156 'log.level = "info"',

157 ""

158 ];

159 if (admin) {

160 lines.push("# Local admin/status API (loopback only \u2014 polled by the svamp daemon)");

161 lines.push('webServer.addr = "127.0.0.1"');

162 lines.push(`webServer.port = ${admin.port}`);

163 lines.push(`webServer.user = "${admin.user}"`);

164 lines.push(`webServer.password = "${admin.password}"`);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/frpc-QESvQN-s.mjsView on unpkg · L164

165 lines.push("");

166 }

167 for (const proxy of proxies) {

168 lines.push(`[[proxies]]`);

169 lines.push(`name = "${proxy.name}"`);

170 lines.push(`type = "${proxy.type}"`);

171 lines.push(`localIP = "${proxy.localIP || "127.0.0.1"}"`);

172 lines.push(`localPort = ${proxy.localPort}`);

173 if (proxy.subdomain) {

174 lines.push(`subdomain = "${proxy.subdomain}"`);

175 }

176 if (proxy.customDomains && proxy.customDomains.length > 0) {

177 lines.push(`customDomains = [${proxy.customDomains.map((d) => `"${d}"`).join(", ")}]`);

178 }

179 if (proxy.group) {

180 lines.push(`loadBalancer.group = "${proxy.group}"`);

181 if (proxy.groupKey) {

182 lines.push(`loadBalancer.groupKey = "${proxy.groupKey}"`);

183 }

184 }

dist/serviceManager-hlOVxkhW.mjsView file

Lines 1-26javascript

1const LAUNCHD_LABEL = "io.hypha.svamp.daemon";

2const SYSTEMD_UNIT = "svamp-daemon.service";

3async function ensureSupervisorViaServiceManager() {

4 const os = await import('os'

dist/run-BtGnnEMI.mjsView file

7452const fullCommand = [spawnCommand, ...spawnArgs].join(" "); L7453: this.process = spawn("cmd.exe", ["/c", fullCommand], { L7454: cwd: this.options.cwd,

High

Shell

Package source references shell execution.

dist/run-BtGnnEMI.mjsView on unpkg · L7452

5import { fileURLToPath } from 'url'; L6: import { execFile, spawn as spawn$1, execSync as execSync$1, exec as exec$1 } from 'child_process'; L7: import { randomUUID as randomUUID$1 } from 'crypto'; ... L27: const mod = await import('hypha-rpc'); L28: connectToServerFn = mod.connectToServer || mod.default && mod.default.connectToServer || mod.hyphaWebsocketClient && mod.hyphaWebsocketClient.connectToServer; L29: if (!connectToServerFn) { ... L59: try { L60: const payload = JSON.parse(Buffer.from(token.split(".")[1], "base64").toString()); L61: const scope = payload.scope || ""; ... L68: function getHyphaServerUrl$1() { L69: return process.env.HYPHA_SERVER_URL || "http://localhost:9527"; L70: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/run-BtGnnEMI.mjsView on unpkg · L5

5971writeFileSync(tmp, out.outputFiles[0].text); L5972: const nativeImport = new Function("u", "return import(u)"); L5973: return nativeImport(pathToFileURL(tmp).href);

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/run-BtGnnEMI.mjsView on unpkg · L5971

dist/run-BmOCcZRG.mjsView file

Lines 214-254javascript

214 child.on("exit", (code, signal) => {

215 log(`[local] Claude exited: code=${code}, signal=${signal}`);

216 scanner.cleanup();

217 process.stdin.resume();

218 onThinkingChange(false);

dist/cli.mjsView file

Lines 1-27javascript

1import { e as clearStopMarker, f as stopMarkerExists, s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-BtGnnEMI.mjs';

2import { ensureSupervisorViaServiceManager, LAUNCHD_LABEL } from './serviceManager-hlOVxkhW.mjs';

3import 'os';

4import 'fs/promises';

5import

dist/commands-B6BkPRui.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = svamp-cli@0.2.255 matchedIdentity = npm:c3ZhbXAtY2xp:0.2.255 similarity = 0.933 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands-B6BkPRui.mjsView on unpkg

Source & flagged code

9 flagged · loading source

dist/frpc-QESvQN-s.mjsView file

164patternName = generic_password severity = medium line = 164 matchedText = lines.pu..."`);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/frpc-QESvQN-s.mjsView on unpkg · L164

dist/serviceManager-hlOVxkhW.mjsView file

6const fs = await import('fs'); L7: const { execSync } = await import('child_process'); L8: if (process.platform === "darwin") {

High

Child Process

Package source references child process execution.

dist/serviceManager-hlOVxkhW.mjsView on unpkg · L6

dist/run-BtGnnEMI.mjsView file

7452const fullCommand = [spawnCommand, ...spawnArgs].join(" "); L7453: this.process = spawn("cmd.exe", ["/c", fullCommand], { L7454: cwd: this.options.cwd,

High

Shell

Package source references shell execution.

dist/run-BtGnnEMI.mjsView on unpkg · L7452

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/run-BtGnnEMI.mjsView on unpkg · L5

5971writeFileSync(tmp, out.outputFiles[0].text); L5972: const nativeImport = new Function("u", "return import(u)"); L5973: return nativeImport(pathToFileURL(tmp).href);

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/run-BtGnnEMI.mjsView on unpkg · L5971

dist/run-BmOCcZRG.mjsView file

234try { L235: const { execSync } = require("child_process"); L236: const path = execSync("which claude 2>/dev/null", { encoding: "utf-8" }).trim();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/run-BmOCcZRG.mjsView on unpkg · L234

dist/cli.mjsView file

7Cross-file remote execution chain: dist/cli.mjs spawns dist/run-BmOCcZRG.mjs; helper contains network access plus dynamic code execution. L7: import 'url'; L8: import 'child_process'; L9: import 'crypto'; ... L28: console.error(`Error: svamp requires Node.js >= 22 (you have ${process.version}).`); L29: console.error(" Node 22+ includes native WebSocket support needed by hypha-rpc."); L30: console.error(" Upgrade with: nvm install 22 && nvm alias default 22"); ... L81: const os = await import('os'); L82: const svampHome = process.env.SVAMP_HOME || join(os.homedir(), ".svamp"); L83: const logsDir = join(svampHome, "logs"); ... L230: const startTime = Date.now(); L231: const exitCode = await new Promise((resolve) => { L232: const child = spawnChild(process.execPath, [

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.mjsView on unpkg · L7

7import 'url'; L8: import 'child_process'; L9: import 'crypto'; ... L28: console.error(`Error: svamp requires Node.js >= 22 (you have ${process.version}).`); L29: console.error(" Node 22+ includes native WebSocket support needed by hypha-rpc."); L30: console.error(" Upgrade with: nvm install 22 && nvm alias default 22"); ... L81: const os = await import('os'); L82: const svampHome = process.env.SVAMP_HOME || join(os.homedir(), ".svamp"); L83: const logsDir = join(svampHome, "logs"); ... L230: const startTime = Date.now(); L231: const exitCode = await new Promise((resolve) => { L232: const child = spawnChild(process.execPath, [

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli.mjsView on unpkg · L7

dist/commands-B6BkPRui.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands-B6BkPRui.mjsView on unpkg

Findings

1 Critical4 High6 Medium8 Low

CriticalPrevious Version Dangerous Deltadist/commands-B6BkPRui.mjs

HighChild Processdist/serviceManager-hlOVxkhW.mjs

HighShelldist/run-BtGnnEMI.mjs

HighSandbox Evasion Gated Capabilitydist/run-BtGnnEMI.mjs

HighCross File Remote Execution Contextdist/cli.mjs

MediumSecret Patterndist/frpc-QESvQN-s.mjs

MediumDynamic Requiredist/run-BmOCcZRG.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/cli.mjs

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/run-BtGnnEMI.mjs

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

9 flagged

dist/frpc-QESvQN-s.mjsView file

Lines 144-184javascript

144 // 15s/45s heartbeat — 2x faster failure detection than the frpc default

145 // (30s/90s). With matching server-side frps 0.68.x, dead-peer detection

146 // settles in well under a minute, so the daemon-side recreate threshold

147 // can be tightened too.

148 "transport.heartbeatInterval = 15",

149 "transport.heartbeatTimeout = 45",

150 "transport.poolCount = 5",

151 "",

152 "# Don't exit on login failure \u2014 let frpc keep retrying",

153 "loginFailExit = false",

154 "",

155 'log.to = "console"',

156 'log.level = "info"',

157 ""

158 ];

159 if (admin) {

160 lines.push("# Local admin/status API (loopback only \u2014 polled by the svamp daemon)");

161 lines.push('webServer.addr = "127.0.0.1"');

162 lines.push(`webServer.port = ${admin.port}`);

163 lines.push(`webServer.user = "${admin.user}"`);

164 lines.push(`webServer.password = "${admin.password}"`);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/frpc-QESvQN-s.mjsView on unpkg · L164

165 lines.push("");

166 }

167 for (const proxy of proxies) {

168 lines.push(`[[proxies]]`);

169 lines.push(`name = "${proxy.name}"`);

170 lines.push(`type = "${proxy.type}"`);

171 lines.push(`localIP = "${proxy.localIP || "127.0.0.1"}"`);

172 lines.push(`localPort = ${proxy.localPort}`);

173 if (proxy.subdomain) {

174 lines.push(`subdomain = "${proxy.subdomain}"`);

175 }

176 if (proxy.customDomains && proxy.customDomains.length > 0) {

177 lines.push(`customDomains = [${proxy.customDomains.map((d) => `"${d}"`).join(", ")}]`);

178 }

179 if (proxy.group) {

180 lines.push(`loadBalancer.group = "${proxy.group}"`);

181 if (proxy.groupKey) {

182 lines.push(`loadBalancer.groupKey = "${proxy.groupKey}"`);

183 }

184 }

dist/serviceManager-hlOVxkhW.mjsView file

Lines 1-26javascript

1const LAUNCHD_LABEL = "io.hypha.svamp.daemon";

2const SYSTEMD_UNIT = "svamp-daemon.service";

3async function ensureSupervisorViaServiceManager() {

4 const os = await import('os'

dist/run-BtGnnEMI.mjsView file

7452const fullCommand = [spawnCommand, ...spawnArgs].join(" "); L7453: this.process = spawn("cmd.exe", ["/c", fullCommand], { L7454: cwd: this.options.cwd,

High

Shell

Package source references shell execution.

dist/run-BtGnnEMI.mjsView on unpkg · L7452

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/run-BtGnnEMI.mjsView on unpkg · L5

5971writeFileSync(tmp, out.outputFiles[0].text); L5972: const nativeImport = new Function("u", "return import(u)"); L5973: return nativeImport(pathToFileURL(tmp).href);

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/run-BtGnnEMI.mjsView on unpkg · L5971

dist/run-BmOCcZRG.mjsView file

Lines 214-254javascript

214 child.on("exit", (code, signal) => {

215 log(`[local] Claude exited: code=${code}, signal=${signal}`);

216 scanner.cleanup();

217 process.stdin.resume();

218 onThinkingChange(false);

dist/cli.mjsView file

Lines 1-27javascript

1import { e as clearStopMarker, f as stopMarkerExists, s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-BtGnnEMI.mjs';

2import { ensureSupervisorViaServiceManager, LAUNCHD_LABEL } from './serviceManager-hlOVxkhW.mjs';

3import 'os';

4import 'fs/promises';

5import

dist/commands-B6BkPRui.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands-B6BkPRui.mjsView on unpkg