registry / terminal-smart-cli / 0.97.43
terminal-smart-cli@0.97.43
⚠ Under reviewTerminal Smart no seu terminal — pergunte, analise logs por pipe e orquestre agentes de IA. Comando: ts
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis flagged 18 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
10 flaggedbin/ts.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = terminal-smart-cli@0.97.12
matchedIdentity = npm:dGVybWluYWwtc21hcnQtY2xp:0.97.12
similarity = 0.644
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/ts.jsView on unpkg13if (process.platform === 'win32' && process.stdout.isTTY) {
L14: try { require('child_process').execSync('chcp 65001', { stdio: 'ignore' }); } catch (_) {}
L15: }
High
11L12: // Windows legado (cmd.exe): força UTF-8 pro desenho das caixas não virar "?".
L13: if (process.platform === 'win32' && process.stdout.isTTY) {
High
Findings
3 Critical6 High3 Medium6 Low
CriticalBrowser Credential Phishinglib/meta.js
CriticalTrigger Reachable Dangerous Capabilitylib/meta.js
CriticalPrevious Version Dangerous Deltabin/ts.js
HighChild Processbin/ts.js
HighShellbin/ts.js
HighSame File Env Network Executionlib/meta.js
HighEntrypoint Foreign Package Code Overwritebin/ts.js
HighSandbox Evasion Gated Capabilitybin/ts.js
HighRemote Agent Bridgelib/meta.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Low
Affected versions and remediation
This report applies to terminal-smart-cli@0.97.43.
See all versions of terminal-smart-cli for other recorded verdicts.
- Review the evidence and your use of terminal-smart-cli@0.97.43 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.