registry / troxy-cli / 1.29.18

troxy-cli@1.29.18

⚠ Under review

A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI

Static Scan Results

scanned 16d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 16 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 59 file(s), 508 KB of source, external domains: 127.0.0.1, api.troxy.io, dash.troxy.io, docs.troxy.io, litellm.internal, proxy.troxy.io, registry.npmjs.org, staging.example.com, www.apple.com

Source & flagged code

8 flagged

bin/troxy.jsView file

Lines 49-89javascript

49 // JWT-based command — session expired or not logged in

50 console.error('\n Session expired or not logged in. Run: troxy login\n');

51 } else if (source === 'config') {

52 console.error('\n API key revoked or invalid.');

53 console.error(' Your saved key is no longer accepted by Troxy.');

54 console.error(' Run: npx troxy-cli init --key <new-key> to reconnect.\n');

55 } else {

56 console.error('\n API key invalid or revoked.');

57 console.error(' Check the key in your Troxy dashboard → API Keys.\n');

58 }

59 } else {

60 console.error(`\n Error: ${err.message}\n`);

61 }

62 process.exit(1);

63}

65async function _run() {

66switch (command) {

67 case '--version':

68 case '-v': {

69 const { createRequire } = await import('module');

70 const { version } = createRequire(import.meta.url)('../package.json');

71 process.stdout.write(version);

72 try {

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

bin/troxy.jsView on unpkg · L69

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/troxy.jsView on unpkg · L69

73 const latest = await checkLatestVersion();

74 if (version !== latest) {

75 process.stdout.write(` ⚠ ${latest} available, run: troxy update`);

76 }

77 } catch {}

78 process.stdout.write('\n');

79 break;

80 }

82 // ── Setup ─────────────────────────────────────────────────────

83 case 'init':

84 await runInit(flags);

85 break;

87 case 'tools': {

88 if (flags.help || flags.h) {

89 console.log(`

Lines 521-561javascript

521 }

522 console.log();

523 }

524

525 // Version check

526 try {

527 const { createRequire } = await import('module');

Lines 602-642javascript

602 // moved. For a cloud agent the package is beside the point: what goes stale

603 // is its picture of which checkpoints exist, and that lives on the server.

604 // This is a no-op on a machine with an MCP client, which gets a fresh tool

605 // list from the MCP handshake every session anyway.

606 const { refreshHostedInstructions } = await import('../src/init.js');

607

•matchType = previous_version_dangerous_delta matchedPackage = troxy-cli@1.29.10 matchedIdentity = npm:dHJveHktY2xp:1.29.10 similarity = 0.776 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/troxy.jsView on unpkg

src/mcp-server.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/mcp-server.js#virtual:normalized:round1View on unpkg

src/auth.jsView file

•matchType = normalized_sha256 matchedPackage = troxy-cli@1.29.7 matchedPath = src/auth.js matchedIdentity = npm:dHJveHktY2xp:1.29.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/auth.jsView on unpkg

src/tool_detect.jsView file

•matchType = normalized_sha256 matchedPackage = troxy-cli@1.29.7 matchedPath = src/tool_detect.js matchedIdentity = npm:dHJveHktY2xp:1.29.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/tool_detect.jsView on unpkg

Source & flagged code

8 flagged · loading source

bin/troxy.jsView file

troxy-cli@1.29.18

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code