vanexa-agent@1.1.33: Malicious npm security report (Block)

Loading npm security reports…

vanexa-agent@1.1.33: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

13 flagged

dist/bundle.jsView file

Lines 1-21javascript

1var Ks=Object.defineProperty;var Yt=(o=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(o,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):o)(function(o){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+o+'" is not supported')});var ae=(o,e,t)=>()=>{if(t)throw t[0];try{return o&&(e=o(o=0)),e}catch(s){throw t=[s],s}};var Le=(o,e)=>{for(var t in e)Ks(o,t,{get:e[t],enumerable:!0})};import b from"fs";import le from"path";import Gs from"os";import q from"crypto";function ue(){b.existsSync(Y)||b.mkdirSync(Y,{recursive:!0,mode:448})}function Xt(){if(u ...

2`+p.slice(p.length-u))};c.stdout.on("data",l),c.stderr.on("data",l);let m;s>0&&(m=setTimeout(()

3`)}var J,Ft=ae(()=>{J=Rs.join(or.homedir(),".vanexa","memory.json")});import{program as E}from"commander";O();import Hs from"inquirer";import je from"os";import Vs from"crypto";import Ys from"ws";async function ts(){console.log(`\u{1F517} Vanexa Remote Agent \u2014 Device Pairing

4`),console.log(`Open the Vanexa app on your phone, go to Agent Settings, and tap "Pair Computer".

5`);let{code:o}=await Hs.prompt([{type:"input",name:"code",message:"Enter the 6-digit pairing code:",validate:s=>/^\d{6}$/.test(s)||"Please enter exactly 6 digits."}]),e=y();console.log(`

6Connecting to relay: ${e.relayUrl}...`);let t=e.relayUrl.replace(/^http/,"ws")+`/ws/daemon/${o}`;return new Promise((s,r)=>{let i=new Ys(t),n=!1;i.on("open",()=>{console.log("Connected to relay. Waiting for phone confirmation...")}),i.on("message",a=>{try{if(JSON.parse(a.toString()).type==="paired"){n=!0,console.log(`

7\u2705 Successfully paired with your phone!`);let u=je.hostname()+"-"+je.platform()+"-"+je.arch(),p=Vs.createHash("sha256").update(u).digest("hex");Zt({sessionId:o,deviceHash:p,pairedAt:Date.now()}),i.close(1e3),s(!0)}}catch(c){console.error("Error parsing message:",c)}}),i.on("error",a=>{console.error(`

8\u274C Connection error:`,a.message),r(a)}),i.on("close",(a,c)=>{n||a!==1e3&&(console.error(`

9\u274C Connection closed (${a}): ${c||"Unknown error"}`),console.error("Make sure the pairing code has not expired."),r(new Error("Connection closed")))})})}O();import dr from"ws";import Fs from"os";var pe=class{constructor(e,t=3e4){this.ws=e,this.intervalMs=t,this.pingInterval=null,this.pongTimeout=null,this.isAlive=!0}start(){this.isAlive=!0,this.pingInterval=setInterval(()=>{this.ws.readyState===1&&(this.ws.send(JSON.stringify({type:"ping",timestamp:Date.now()})),this.pongTimeout=setTimeout(()=>{this.isAlive=!1,this.ws.terminate()},15e3))},this.intervalMs)}onPong(){this.isAlive=!0,this.pong ...

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/bundle.jsView on unpkg · L1

10`;N.appendFileSync(s,r)}async getBuffer(e){let t=this.getBufferPath(e);return N.existsSync(t)?N.readFileSync(t,"utf8").split(`

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bundle.jsView on unpkg · L1

11`).filter(r=>r.trim()).map(r=>JSON.parse(r)):[]}async clearBuffer(e){let t=this.getBufferPath(e);N.existsSync(t)&&N.unlinkSync(t)}};ze

12`);return n>s&&(c+=`

14[WARNING: File truncated at line ${s} out of ${n}. Use { startLine: ${s+1}, endLine: ${s+800} } to read more.]`),{success:!0,output:c}}catch(e){return{success:!1,error:e.message}}}};import Je from"fs/promises";import to from"path";import so from"os";var He={schema:{name:"fs.write",description:"Create or overwrite a file with content using Zero-Corruption Atomic Swap. Guarantees safe file writing.",parameters:{type:"object",properties:{path:{type:"string"},content:{type:"string"},createDirectories:{type:"boolean"}},required:["path","content"]}},async execute(o){try{let e=o.path.replace(/^~\//,s ...

15`),c=n.searchContent.split(`

16`),u=null,p=0;for(let l=0;l<=a.length-c.length;l++){let m=a.slice(l,l+

17`),d=no(n.searchContent,m);d>p&&(p=d,u=m)}if(p>=90&&u)s=s.replace(u,n.replaceContent),r++;else return{success:!1,error:`ATOMIC ROLLBACK: Edit index ${i} failed. Exact match not found, and fuzzy match confidence was too low (${p.toFixed(2)}% < 90%). Previous edits in this batch were rolled back.`}}return await ns.writeFile(e,s,"utf8"),{success:!0,output:`Transaction Success: ${r} replacement(s) safely applied to ${o.path}`}}catch(e){return{success:!1,error:e.message}}}};import is from"fs/promises";import io from"path";async function as(o,e,t=[]){let s=await is.readdir(o,{withFileTypes:!0});for( ...

18`);for(let u=0;u<c.length&&!(i.test(c[u])&&(r.push(`${n}:${u+1}:${c[u].trim()}`),r.length>=100));

19`):"No matches found. (Semantic Search module pending activation)."}}catch(e){return{success:!1,error:e.message}}}};import ao from"fs/promises";import cs from"path"

20`,a.isDirectory()&&(r+=await ds(ps.join(o,a.name),e+1,t,p))}}catch{r+=`${s}\u2514\u2500\u2500 [Access Denied]

21`}return r}var Xe={schema:{name:"fs.list",description:"List directory contents as an interactive Tree-Map. Gives spatial awareness of a project layout.",parameters:{type:"object",properties:{path:{type:"string",description:"Directory to list"},depth:{type:"number",description:"Recursion depth (default 2)"}},required:["path"]}},async execute(o){try{let e=o.path.replace(/^~\//,po.homedir()+"/"),t=o.depth||2,s=await ds(e,1,t);return{success:!0,output:`\u{1F4C1} ${e}

Long lines were clipped for display.

src/tools/terminalExec.jsView file

Lines 14-54javascript

14 schema: {

15 name: 'terminal.exec',

16 description: 'Execute a shell command. CRITICAL CONSTRAINTS: 1. NEVER use interactive flags (like git rebase -i). 2. Always use non-interactive flags (--yes, -y). 3. If running git commit, always run git status, git diff, and git log first.',

17 parameters: {

18 type: 'object'

bin/vanexa-agent.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * VANEXA AGENT - Sovereign Digital Brain

4 * V8 Bytecode Launcher with Runtime Version Guard

5 */

6import path from 'path';

7import fs from 'fs';

8import

src/tools/executeProceduralMedia.jsView file

Lines 1-22javascript

1import fs from 'fs';

2import path from 'path';

3import { exec } from 'child_process';

4import util from 'util';

src/tools/astryxOracle.jsView file

Lines 34-73javascript

34 case 'read_component':

35 if (!sanitizedTarget) return { success: false, error: 'target component name is required for read_component' };

36 cliArgs = `component ${sanitizedTarget}`;

dist/bundle.jscView file

•path = dist/bundle.jsc kind = node_bytecode sizeBytes = 4974904 magicHex = [redacted]

High

Ships Node Bytecode

Package ships compiled Node/V8 bytecode artifacts.

dist/bundle.jscView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 6558 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

vanexa-agent-1.0.0.tgzView file

•path = vanexa-agent-1.0.0.tgz kind = high_entropy_blob sizeBytes = 17797 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

vanexa-agent-1.0.0.tgzView on unpkg

•path = vanexa-agent-1.0.0.tgz kind = compressed_blob sizeBytes = 17797 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

vanexa-agent-1.0.0.tgzView on unpkg

•path = vanexa-agent-1.0.0.tgz kind = nested_archive_needs_inspection sizeBytes = 17797 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

vanexa-agent-1.0.0.tgzView on unpkg

Source & flagged code

13 flagged · loading source

dist/bundle.jsView file

High

Child Process

Package source references child process execution.

dist/bundle.jsView on unpkg · L1

1var Ks=Object.defineProperty;var Yt=(o=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(o,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):o)(function(o){if(typeof require<"u"... L2: `+p.slice(p.length-u))};c.stdout.on("data",l),c.stderr.on("data",l);let m;s>0&&(m=setTimeout(()=>{c.kill("SIGKILL"),i({success:!1,output:We(p),error:`Process timed out after ${s}ms... L3: `)}var J,Ft=ae(()=>{J=Rs.join(or.homedir(),".vanexa","memory.json")});import{program as E}from"commander";O();import Hs from"inquirer";import je from"os";import Vs from"crypto";imp... ... L8: \u274C Connection error:`,a.message),r(a)}),i.on("close",(a,c)=>{n||a!==1e3&&(console.error(` L9: \u274C Connection closed (${a}): ${c||"Unknown error"}`),console.error("Make sure the pairing code has not expired."),r(new Error(

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bundle.jsView on unpkg · L1

1var Ks=Object.defineProperty;var Yt=(o=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(o,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):o)(function(o){if(typeof require<"u"... L2: `+p.slice(p.length-u))};c.stdout.on("data",l),c.stderr.on("data",l);let m;s>0&&(m=setTimeout(()=>{c.kill("SIGKILL"),i({success:!1,output:We(p),error:`Process timed out after ${s}ms... L3: `)}var J,Ft=ae(()=>{J=Rs.join(or.homedir(),".vanexa","memory.json")});import{program as E}from"commander";O();import Hs from"inquirer";import je from"os";import Vs from"crypto";imp... ... L6: Connecting to relay: ${e.relayUrl}...`);let t=e.relayUrl.replace(/^http/,"ws")+`/ws/daemon/${o}`;return new Promise((s,r)=>{let i=new Ys(t),n=!1;i.on("open",()=>{console.log("Conne... L7: \u2705 Successfully paired with your pho

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/bundle.jsView on unpkg · L1

src/tools/terminalExec.jsView file

34// Phase 1 AGI Upgrade: Spawn instead of Exec L35: const shell = os.platform() === 'win32' ? 'cmd.exe' : '/bin/bash'; L36: const shellArgs = os.platform() === 'win32' ? ['/c', args.command] : ['-c', args.command];

High

Shell

Package source references shell execution.

src/tools/terminalExec.jsView on unpkg · L34

bin/vanexa-agent.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = vanexa-agent@1.1.11 matchedIdentity = npm:dmFuZXhhLWFnZW50:1.1.11 similarity = 0.717 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/vanexa-agent.jsView on unpkg

12L13: const require = createRequire(import.meta.url); L14: const __filename = fileURLToPath(import.meta.url);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/vanexa-agent.jsView on unpkg · L12

src/tools/executeProceduralMedia.jsView file

2import path from 'path'; L3: import { exec } from 'child_process'; L4: import util from 'util'; ... L27: const { code, language } = args; L28: let outputFilePath = args.outputFileName.replace(/^~\//, os.homedir() + '/'); L29: outputFilePath = path.resolve(outputFilePath); ... L67: if (fs.existsSync(scriptPath)) fs.unlinkSync(scriptPath); L68: return { success: false, error: `[AUTO-CORRECTION REQUIRED] Python Execution Error: ${pyError.message || pyError.stderr}\nPlease fix the math/syntax and retry.` }; L69: }

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/tools/executeProceduralMedia.jsView on unpkg · L2

src/tools/astryxOracle.jsView file

54// We use npx --yes to ensure it auto-installs if the user hasn't run it yet. L55: const stdout = execSync(`npx --yes @astryxdesign/cli ${cliArgs}`, { L56: encoding: 'utf8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/tools/astryxOracle.jsView on unpkg · L54

dist/bundle.jscView file

•path = dist/bundle.jsc kind = node_bytecode sizeBytes = 4974904 magicHex = [redacted]

High

Ships Node Bytecode

Package ships compiled Node/V8 bytecode artifacts.

dist/bundle.jscView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 6558 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

vanexa-agent-1.0.0.tgzView file

•path = vanexa-agent-1.0.0.tgz kind = high_entropy_blob sizeBytes = 17797 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

vanexa-agent-1.0.0.tgzView on unpkg

•path = vanexa-agent-1.0.0.tgz kind = compressed_blob sizeBytes = 17797 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

vanexa-agent-1.0.0.tgzView on unpkg

•path = vanexa-agent-1.0.0.tgz kind = nested_archive_needs_inspection sizeBytes = 17797 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

vanexa-agent-1.0.0.tgzView on unpkg

Source & flagged code

13 flagged

dist/bundle.jsView file

Lines 1-21javascript

2`+p.slice(p.length-u))};c.stdout.on("data",l),c.stderr.on("data",l);let m;s>0&&(m=setTimeout(()

4`),console.log(`Open the Vanexa app on your phone, go to Agent Settings, and tap "Pair Computer".

5`);let{code:o}=await Hs.prompt([{type:"input",name:"code",message:"Enter the 6-digit pairing code:",validate:s=>/^\d{6}$/.test(s)||"Please enter exactly 6 digits."}]),e=y();console.log(`

8\u274C Connection error:`,a.message),r(a)}),i.on("close",(a,c)=>{n||a!==1e3&&(console.error(`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/bundle.jsView on unpkg · L1

10`;N.appendFileSync(s,r)}async getBuffer(e){let t=this.getBufferPath(e);return N.existsSync(t)?N.readFileSync(t,"utf8").split(`

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bundle.jsView on unpkg · L1

11`).filter(r=>r.trim()).map(r=>JSON.parse(r)):[]}async clearBuffer(e){let t=this.getBufferPath(e);N.existsSync(t)&&N.unlinkSync(t)}};ze

12`);return n>s&&(c+=`

15`),c=n.searchContent.split(`

16`),u=null,p=0;for(let l=0;l<=a.length-c.length;l++){let m=a.slice(l,l+

18`);for(let u=0;u<c.length&&!(i.test(c[u])&&(r.push(`${n}:${u+1}:${c[u].trim()}`),r.length>=100));

19`):"No matches found. (Semantic Search module pending activation)."}}catch(e){return{success:!1,error:e.message}}}};import ao from"fs/promises";import cs from"path"

20`,a.isDirectory()&&(r+=await ds(ps.join(o,a.name),e+1,t,p))}}catch{r+=`${s}\u2514\u2500\u2500 [Access Denied]

Long lines were clipped for display.

src/tools/terminalExec.jsView file

Lines 14-54javascript

14 schema: {

15 name: 'terminal.exec',

17 parameters: {

18 type: 'object'

bin/vanexa-agent.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * VANEXA AGENT - Sovereign Digital Brain

4 * V8 Bytecode Launcher with Runtime Version Guard

5 */

6import path from 'path';

7import fs from 'fs';

8import

src/tools/executeProceduralMedia.jsView file

Lines 1-22javascript

1import fs from 'fs';

2import path from 'path';

3import { exec } from 'child_process';

4import util from 'util';

src/tools/astryxOracle.jsView file

Lines 34-73javascript

34 case 'read_component':

35 if (!sanitizedTarget) return { success: false, error: 'target component name is required for read_component' };

36 cliArgs = `component ${sanitizedTarget}`;

dist/bundle.jscView file

•path = dist/bundle.jsc kind = node_bytecode sizeBytes = 4974904 magicHex = [redacted]

High

Ships Node Bytecode

Package ships compiled Node/V8 bytecode artifacts.

dist/bundle.jscView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 6558 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

vanexa-agent-1.0.0.tgzView file

•path = vanexa-agent-1.0.0.tgz kind = high_entropy_blob sizeBytes = 17797 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

vanexa-agent-1.0.0.tgzView on unpkg

•path = vanexa-agent-1.0.0.tgz kind = compressed_blob sizeBytes = 17797 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

vanexa-agent-1.0.0.tgzView on unpkg

•path = vanexa-agent-1.0.0.tgz kind = nested_archive_needs_inspection sizeBytes = 17797 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

vanexa-agent-1.0.0.tgzView on unpkg

vanexa-agent@1.1.33

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code