vanexa-agent@1.1.18: Malicious npm security report (Block)

Loading npm security reports…

vanexa-agent@1.1.18: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

13 flagged

dist/bundle.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2var Yt=Object.defineProperty;var l=(o,e)=>Yt(o,"name",{value:e,configurable:!0}),Xt=(o=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(o,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):o)(function(o){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+o+'" is not supported')});var ae=(o,e,t)=>()=>{if(t)throw t[0];try{return o&&(e=o(o=0)),e}catch(s){throw t=[s],s}};var Ne=(o,e)=>{for(var t in e)Yt(o,t,{get:e[t],enumerable:!0})};import _ from"fs";import Le from"path";import zs from"os";import Qt from"crypto";function Fe(){_.existsSync(ce)||_.mkdir ...

3`+d.slice(d.length-p))},"appendToBuffer");a.stdout.on("data",u),a.stderr.on("data",u);let f;s>0&&(f

4`)}var K,Lt=ae(()=>{K=Rs.join(er.homedir(),".vanexa","memory.json");l(Mt,"initMemory");l(Ut,"getMemory");l(Ds,"saveMemory");l(tr,"addFact");l(sr,"clearMemory");l(Nt,"getMemoryContextString")});import{program as E}from"commander";O();import Gs from"inquirer";import je from"os";import Js from"crypto";import Ks from"ws";async function ts(){console.log(`\u{1F517} Vanexa Remote Agent \u2014 Device Pairing

5`),console.log(`Open the Vanexa app on your phone, go to Agent Settings, and tap "Pair Computer".

6`);let{code:o}=await Gs.prompt([{type:"input",name:"code",message:"Enter the 6-digit pairing code:",validate:l(s=>/^\d{6}$/.test(s)||"Please enter exactly 6 digits.","validate")}]),e=w();console.log(`

7Connecting to relay: ${e.relayUrl}...`);let t=e.relayUrl.replace(/^http/,"ws")+`/ws/daemon/${o}`;return new Promise((s,r)=>{let i=new Ks(t),n=!1;i.on("open",()=>{console.log("Connected to relay. Waiting for phone confirmation...")}),i.on("message",c=>{try{if(JSON.parse(c.toString()).type==="paired"){n=!0,console.log(`

8\u2705 Successfully paired with your phone!`);let p=je.hostname()+"-"+je.platform()+"-"+je.arch(),d=Js.createHash("sha256").update(p).digest("hex");Zt({sessionId:o,deviceHash:d,pairedAt:Date.now()}),i.close(1e3),s(!0)}}catch(a){console.error("Error parsing message:",a)}}),i.on("error",c=>{console.error(`

9\u274C Connection error:`,c.message),r(c)}),i.on("close",(c,a)=>{n||c!==1e3&&(console.error(`

10\u274C Connection closed (${c}): ${a||"Unknown error"}`),console.error("Make sure the pairing code has not expired."),r(new Error("Connection closed")))})})}l(ts,"pairDevice");O();import ar from"ws";import Ls from"os";var ue=class{static{l(this,"Heartbeat")}constructor(e,t=3e4){this.ws=e,this.intervalMs=t,this.pingInterval=null,this.pongTimeout=null,this.isAlive=!0}start(){this.isAlive=!0,this.pingInterval=setInterval(()=>{this.ws.readyState===1&&(this.ws.send(JSON.stringify({type:"ping",timestamp:Date.now()})),this.pongTimeout=setTimeout(()=>{this.isAlive=!1,this.ws.terminate()},15e3))},this. ...

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/bundle.jsView on unpkg · L1

11`;L.appendFileSync(s,r)}async getBuffer(e){let t=this.getBufferPath(e);return L.existsSync(t)?L.readFileSync(t,"utf8").split(`

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bundle.jsView on unpkg · L1

12`).filter(r=>r.trim()).map(r=>JSON.parse(r)):[]}async clearBuffer(e){let t=this.getBufferPath(e);L.existsSync(t)&&L.unlinkSync(t)}};ze

13`);return n>s&&(a+=`

15[WARNING: File truncated at line ${s} out of ${n}. Use { startLine: ${s+1}, endLine: ${s+800} } to read more.]`),{success:!0,output:a}}catch(e){return{success:!1,error:e.message}}}};import Ke from"fs/promises";import Qs from"path";import Zs from"os";var He={schema:{name:"fs.write",description:"Create or overwrite a file with content using Zero-Corruption Atomic Swap. Guarantees safe file writing.",parameters:{type:"object",properties:{path:{type:"string"},content:{type:"string"},createDirectories:{type:"boolean"}},required:["path","content"]}},async execute(o){try{let e=o.path.replace(/^~\//,Z ...

16`),a=n.searchContent.split(`

17`),p=null,d=0;for(let u=0;u<=c.length-a.length;u++){let f=c.slice(u,u+

18`),m=so(n.searchContent,f);m>d&&(d=m,p=f)}if(d>=90&&p)s=s.replace(p,n.replaceContent),r++;else return{success:!1,error:`ATOMIC ROLLBACK: Edit index ${i} failed. Exact match not found, and fuzzy match confidence was too low (${d.toFixed(2)}% < 90%). Previous edits in this batch were rolled back.`}}return await ns.writeFile(e,s,"utf8"),{success:!0,output:`Transaction Success: ${r} replacement(s) safely applied to ${o.path}`}}catch(e){return{success:!1,error:e.message}}}};import is from"fs/promises";import oo from"path";async function as(o,e,t=[]){let s=await is.readdir(o,{withFileTypes:!0});for( ...

19`);for(let p=0;p<a.length&&!(i.test(a[p])&&(r.push(`${n}:${p+1}:${a[p].trim()}`),r.length>=100));

20`):"No matches found. (Semantic Search module pending activation)."}}catch(e){return{success:!1,error:e.message}}}};import ro from"fs/promises";import cs from"path"

21`,c.isDirectory()&&(r+=await ds(ps.join(o,c.name),e+1,t,d))}}catch{r+=`${s}\u2514\u2500\u2500 [Access Denied]

Long lines were clipped for display.

•matchType = previous_version_dangerous_delta matchedPackage = vanexa-agent@1.1.11 matchedIdentity = npm:dmFuZXhhLWFnZW50:1.1.11 similarity = 0.883 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bundle.jsView on unpkg

src/tools/terminalExec.jsView file

Lines 14-54javascript

14 schema: {

15 name: 'terminal.exec',

16 description: 'Execute a shell command. CRITICAL CONSTRAINTS: 1. NEVER use interactive flags (like git rebase -i). 2. Always use non-interactive flags (--yes, -y). 3. If running git commit, always run git status, git diff, and git log first.',

17 parameters: {

18 type: 'object'

bin/vanexa-agent.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

2/**

3 * VANEXA AGENT - Sovereign Digital Brain

4 * V8 Bytecode Launcher

5 */

6import path from 'path';

7import { fileURLToPath } from 'url';

8import

src/tools/executeProceduralMedia.jsView file

Lines 1-22javascript

1import fs from 'fs';

2import path from 'path';

3import { exec } from 'child_process';

4import util from 'util';

src/tools/astryxOracle.jsView file

Lines 34-73javascript

34 case 'read_component':

35 if (!sanitizedTarget) return { success: false, error: 'target component name is required for read_component' };

36 cliArgs = `component ${sanitizedTarget}`;

dist/bundle.jscView file

•path = dist/bundle.jsc kind = node_bytecode sizeBytes = 293712 magicHex = [redacted]

High

Ships Node Bytecode

Package ships compiled Node/V8 bytecode artifacts.

dist/bundle.jscView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 6517 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

vanexa-agent-1.0.0.tgzView file

•path = vanexa-agent-1.0.0.tgz kind = high_entropy_blob sizeBytes = 17797 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

vanexa-agent-1.0.0.tgzView on unpkg

•path = vanexa-agent-1.0.0.tgz kind = compressed_blob sizeBytes = 17797 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

vanexa-agent-1.0.0.tgzView on unpkg

•path = vanexa-agent-1.0.0.tgz kind = nested_archive_needs_inspection sizeBytes = 17797 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

vanexa-agent-1.0.0.tgzView on unpkg

Source & flagged code

13 flagged · loading source

dist/bundle.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bundle.jsView on unpkg

High

Child Process

Package source references child process execution.

dist/bundle.jsView on unpkg · L1

1#!/usr/bin/env node L2: var Yt=Object.defineProperty;var l=(o,e)=>Yt(o,"name",{value:e,configurable:!0}),Xt=(o=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(o,{get:(e,t)=>(typeof require<"u"?requ... L3: `+d.slice(d.length-p))},"appendToBuffer");a.stdout.on("data",u),a.stderr.on("data",u);let f;s>0&&(f=setTimeout(()=>{a.kill("SIGKILL"),i({success:!1,output:We(d),error:`Process time... L4: `)}var K,Lt=ae(()=>{K=Rs.join(er.homedir(),".vanexa","memory.json");l(Mt,"initMemory");l(Ut,"getMemory");l(Ds,"saveMemory");l(tr,"addFact");l(sr,"clearMemory");l(Nt,"getMemoryConte... ... L9: \u274C Connection error:`,c.message),r(c)}),i.on("close",(c,a)=>{n||c!==1e3&&(console.error(` L10: \u274C Connection closed (${c}): ${a||"Unknown error"}`),console.error("Make sure the pairing code has no

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bundle.jsView on unpkg · L1

1#!/usr/bin/env node L2: var Yt=Object.defineProperty;var l=(o,e)=>Yt(o,"name",{value:e,configurable:!0}),Xt=(o=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(o,{get:(e,t)=>(typeof require<"u"?requ... L3: `+d.slice(d.length-p))},"appendToBuffer");a.stdout.on("data",u),a.stderr.on("data",u);let f;s>0&&(f=setTimeout(()=>{a.kill("SIGKILL"),i({success:!1,output:We(d),error:`Process time... L4: `)}var K,Lt=ae(()=>{K=Rs.join(er.homedir(),".vanexa","memory.json");l(Mt,"initMemory");l(Ut,"getMemory");l(Ds,"saveMemory");l(tr,"addFact");l(sr,"clearMemory");l(Nt,"getMemoryConte... ... L7: Connecting to relay: ${e.relayUrl}...`);let t=e.relayUrl.replace(/^http/,"ws")+`/ws/daemon/${o}`;return new Promise((s,r)=>{let i=new Ks(t),n=!1;i.on("open",()=>{console.log("Conne... L8: \u2705 Successfu

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/bundle.jsView on unpkg · L1

src/tools/terminalExec.jsView file

34// Phase 1 AGI Upgrade: Spawn instead of Exec L35: const shell = os.platform() === 'win32' ? 'cmd.exe' : '/bin/bash'; L36: const shellArgs = os.platform() === 'win32' ? ['/c', args.command] : ['-c', args.command];

High

Shell

Package source references shell execution.

src/tools/terminalExec.jsView on unpkg · L34

bin/vanexa-agent.jsView file

11L12: const require = createRequire(import.meta.url); L13: const __filename = fileURLToPath(import.meta.url);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/vanexa-agent.jsView on unpkg · L11

src/tools/executeProceduralMedia.jsView file

2import path from 'path'; L3: import { exec } from 'child_process'; L4: import util from 'util'; ... L27: const { code, language } = args; L28: let outputFilePath = args.outputFileName.replace(/^~\//, os.homedir() + '/'); L29: outputFilePath = path.resolve(outputFilePath); ... L67: if (fs.existsSync(scriptPath)) fs.unlinkSync(scriptPath); L68: return { success: false, error: `[AUTO-CORRECTION REQUIRED] Python Execution Error: ${pyError.message || pyError.stderr}\nPlease fix the math/syntax and retry.` }; L69: }

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/tools/executeProceduralMedia.jsView on unpkg · L2

src/tools/astryxOracle.jsView file

54// We use npx --yes to ensure it auto-installs if the user hasn't run it yet. L55: const stdout = execSync(`npx --yes @astryxdesign/cli ${cliArgs}`, { L56: encoding: 'utf8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/tools/astryxOracle.jsView on unpkg · L54

dist/bundle.jscView file

•path = dist/bundle.jsc kind = node_bytecode sizeBytes = 293712 magicHex = [redacted]

High

Ships Node Bytecode

Package ships compiled Node/V8 bytecode artifacts.

dist/bundle.jscView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 6517 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

vanexa-agent-1.0.0.tgzView file

•path = vanexa-agent-1.0.0.tgz kind = high_entropy_blob sizeBytes = 17797 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

vanexa-agent-1.0.0.tgzView on unpkg

•path = vanexa-agent-1.0.0.tgz kind = compressed_blob sizeBytes = 17797 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

vanexa-agent-1.0.0.tgzView on unpkg

•path = vanexa-agent-1.0.0.tgz kind = nested_archive_needs_inspection sizeBytes = 17797 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

vanexa-agent-1.0.0.tgzView on unpkg

Source & flagged code

13 flagged

dist/bundle.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

3`+d.slice(d.length-p))},"appendToBuffer");a.stdout.on("data",u),a.stderr.on("data",u);let f;s>0&&(f

5`),console.log(`Open the Vanexa app on your phone, go to Agent Settings, and tap "Pair Computer".

9\u274C Connection error:`,c.message),r(c)}),i.on("close",(c,a)=>{n||c!==1e3&&(console.error(`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/bundle.jsView on unpkg · L1

11`;L.appendFileSync(s,r)}async getBuffer(e){let t=this.getBufferPath(e);return L.existsSync(t)?L.readFileSync(t,"utf8").split(`

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bundle.jsView on unpkg · L1

12`).filter(r=>r.trim()).map(r=>JSON.parse(r)):[]}async clearBuffer(e){let t=this.getBufferPath(e);L.existsSync(t)&&L.unlinkSync(t)}};ze

13`);return n>s&&(a+=`

16`),a=n.searchContent.split(`

17`),p=null,d=0;for(let u=0;u<=c.length-a.length;u++){let f=c.slice(u,u+

19`);for(let p=0;p<a.length&&!(i.test(a[p])&&(r.push(`${n}:${p+1}:${a[p].trim()}`),r.length>=100));

20`):"No matches found. (Semantic Search module pending activation)."}}catch(e){return{success:!1,error:e.message}}}};import ro from"fs/promises";import cs from"path"

21`,c.isDirectory()&&(r+=await ds(ps.join(o,c.name),e+1,t,d))}}catch{r+=`${s}\u2514\u2500\u2500 [Access Denied]

Long lines were clipped for display.

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bundle.jsView on unpkg

src/tools/terminalExec.jsView file

Lines 14-54javascript

14 schema: {

15 name: 'terminal.exec',

17 parameters: {

18 type: 'object'

bin/vanexa-agent.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

2/**

3 * VANEXA AGENT - Sovereign Digital Brain

4 * V8 Bytecode Launcher

5 */

6import path from 'path';

7import { fileURLToPath } from 'url';

8import

src/tools/executeProceduralMedia.jsView file

Lines 1-22javascript

1import fs from 'fs';

2import path from 'path';

3import { exec } from 'child_process';

4import util from 'util';

src/tools/astryxOracle.jsView file

Lines 34-73javascript

34 case 'read_component':

35 if (!sanitizedTarget) return { success: false, error: 'target component name is required for read_component' };

36 cliArgs = `component ${sanitizedTarget}`;

dist/bundle.jscView file

•path = dist/bundle.jsc kind = node_bytecode sizeBytes = 293712 magicHex = [redacted]

High

Ships Node Bytecode

Package ships compiled Node/V8 bytecode artifacts.

dist/bundle.jscView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 6517 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

vanexa-agent-1.0.0.tgzView file

•path = vanexa-agent-1.0.0.tgz kind = high_entropy_blob sizeBytes = 17797 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

vanexa-agent-1.0.0.tgzView on unpkg

•path = vanexa-agent-1.0.0.tgz kind = compressed_blob sizeBytes = 17797 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

vanexa-agent-1.0.0.tgzView on unpkg

•path = vanexa-agent-1.0.0.tgz kind = nested_archive_needs_inspection sizeBytes = 17797 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

vanexa-agent-1.0.0.tgzView on unpkg

vanexa-agent@1.1.18

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code