registry / troxy-cli / 1.29.17

troxy-cli@1.29.17

⚠ Under review

A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 16 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 59 file(s), 505 KB of source, external domains: 127.0.0.1, api.troxy.io, dash.troxy.io, docs.troxy.io, litellm.internal, proxy.troxy.io, registry.npmjs.org, staging.example.com, www.apple.com

Source & flagged code

8 flagged

bin/troxy.jsView file

Lines 49-89javascript

49 // JWT-based command — session expired or not logged in

50 console.error('\n Session expired or not logged in. Run: troxy login\n');

51 } else if (source === 'config') {

52 console.error('\n API key revoked or invalid.');

53 console.error(' Your saved key is no longer accepted by Troxy.');

54 console.error(' Run: npx troxy-cli init --key <new-key> to reconnect.\n');

55 } else {

56 console.error('\n API key invalid or revoked.');

57 console.error(' Check the key in your Troxy dashboard → API Keys.\n');

58 }

59 } else {

60 console.error(`\n Error: ${err.message}\n`);

61 }

62 process.exit(1);

63}

65async function _run() {

66switch (command) {

67 case '--version':

68 case '-v': {

69 const { createRequire } = await import('module');

70 const { version } = createRequire(import.meta.url)('../package.json');

71 process.stdout.write(version);

72 try {

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

bin/troxy.jsView on unpkg · L69

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/troxy.jsView on unpkg · L69

73 const latest = await checkLatestVersion();

74 if (version !== latest) {

75 process.stdout.write(` ⚠ ${latest} available, run: troxy update`);

76 }

77 } catch {}

78 process.stdout.write('\n');

79 break;

80 }

82 // ── Setup ─────────────────────────────────────────────────────

83 case 'init':

84 await runInit(flags);

85 break;

87 case 'tools': {

88 if (flags.help || flags.h) {

89 console.log(`

Lines 508-548javascript

508 }

509 console.log();

510 }

511

512 // Version check

513 try {

514 const { createRequire } = await import('module');

Lines 589-629javascript

589 // moved. For a cloud agent the package is beside the point: what goes stale

590 // is its picture of which checkpoints exist, and that lives on the server.

591 // This is a no-op on a machine with an MCP client, which gets a fresh tool

592 // list from the MCP handshake every session anyway.

593 const { refreshHostedInstructions } = await import('../src/init.js');

594

•matchType = previous_version_dangerous_delta matchedPackage = troxy-cli@1.29.10 matchedIdentity = npm:dHJveHktY2xp:1.29.10 similarity = 0.776 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/troxy.jsView on unpkg

src/mcp-server.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/mcp-server.js#virtual:normalized:round1View on unpkg

src/auth.jsView file

•matchType = normalized_sha256 matchedPackage = troxy-cli@1.29.7 matchedPath = src/auth.js matchedIdentity = npm:dHJveHktY2xp:1.29.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/auth.jsView on unpkg

src/tool_detect.jsView file

•matchType = normalized_sha256 matchedPackage = troxy-cli@1.29.7 matchedPath = src/tool_detect.js matchedIdentity = npm:dHJveHktY2xp:1.29.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/tool_detect.jsView on unpkg

Source & flagged code

8 flagged · loading source

bin/troxy.jsView file

troxy-cli@1.29.17

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code