tako-cli@0.3.24
⚠ Under reviewTako CLI — unified launcher for AI coding tools (Claude Code, Codex, Gemini) with multi-agent session management
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis flagged 18 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.
Decision evidence
public snapshotBehavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
WildcardDependency
Source & flagged code
8 flaggeddist/index.jsView file
2// @bun
L3: var Vq=Object.create;var{getPrototypeOf:mq,defineProperty:hF,getOwnPropertyNames:OU,getOwnPropertyDescriptor:fq}=Object,zU=Object.prototype.hasOwnProperty;function SU(B){return thi...
L4: `);return{update(F){if(F===g)return;if(g=F,I)C(`\r\x1B[2K\u23F3 ${F}`);else C(`\u23F3 ${F}
...
L10: `,{mode:384})}async function jO(){let B=B7?await mO():await hO(),I;try{let C=await import("fs/promises"),g=JSON.parse(await C.readFile(XN,"utf-8"));if(g.oauthAccount&&typeof g.oaut...
L11: `)}}var sU="Claude Code-credentials",eU,A7,XN,B7;var jw=kB(()=>{eU=qN(rU(),".claude"),A7=qN(eU,".credentials.json"),XN=qN(rU(),".claude.json"),B7=_O()==="darwin"});var Q7={};wE(Q7,...
L12: `);z=k.pop()??"";for(let i of k)L(i)}if(z)L(z)}finally{q.releaseLock()}};try{await Promise.all([u(B.stderr),u(B.stdout
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L22Trigger-reachable chain: manifest.bin -> dist/index.js
L2: // @bun
L3: var Vq=Object.create;var{getPrototypeOf:mq,defineProperty:hF,getOwnPropertyNames:OU,getOwnPropertyDescriptor:fq}=Object,zU=Object.prototype.hasOwnProperty;function SU(B){return thi...
L4: `);return{update(F){if(F===g)return;if(g=F,I)C(`\r\x1B[2K\u23F3 ${F}`);else C(`\u23F3 ${F}
...
L10: `,{mode:384})}async function jO(){let B=B7?await mO():await hO(),I;try{let C=await import("fs/promises"),g=JSON.parse(await C.readFile(XN,"utf-8"));if(g.oauthAccount&&typeof g.oaut...
L11: `)}}var sU="Claude Code-credentials",eU,A7,XN,B7;var jw=kB(()=>{eU=qN(rU(),".claude"),A7=qN(eU,".credentials.json"),XN=qN(rU(),".claude.json"),B7=_O()==="darwin"});var Q7={};wE(Q7,...
L12: `);z=k.pop()??"";for(let i of k)L(i)}if(z)L(z)}finally{q.releas
Findings
2 Critical5 High5 Medium6 Low
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighSandbox Evasion Gated Capabilitydist/index.js
HighRuntime Package Installdist/index.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowNon Install Lifecycle Scripts
Low
Affected versions and remediation
This report applies to tako-cli@0.3.24.
See all versions of tako-cli for other recorded verdicts.
- Review the evidence and your use of tako-cli@0.3.24 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.