registry  /  vinuscli  /  2.2.2

vinuscli@2.2.2

The autonomous AI coding agent in your terminal — one key, every model.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
EnvironmentVarsNetwork
Supply chain
MinifiedObfuscatedTrivialUrlStrings
Manifest
NoLicense
scanned 1 file(s), 503 KB of source, external domains: github.com

Source & flagged code

3 flagged · loading source
dist/vinus.mjsView file
1#!/usr/bin/env node L2: const _0x3b2cd7=_0x1358;(function(_0x3da3fd,_0x9bd2e3){const _0x461199=_0x1358,_0x284b77=_0x3da3fd();while(!![]){try{const _0x87ffce=-parseInt(_0x461199(0x31e))/0x1+-parseInt(_0x46...
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/vinus.mjsView on unpkg · L1
1#!/usr/bin/env node L2: const _0x3b2cd7=_0x1358;(function(_0x3da3fd,_0x9bd2e3){const _0x461199=_0x1358,_0x284b77=_0x3da3fd();while(!![]){try{const _0x87ffce=-parseInt(_0x461199(0x31e))/0x1+-parseInt(_0x46...
High
Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/vinus.mjsView on unpkg · L1
1#!/usr/bin/env node L2: const _0x3b2cd7=_0x1358;(function(_0x3da3fd,_0x9bd2e3){const _0x461199=_0x1358,_0x284b77=_0x3da3fd();while(!![]){try{const _0x87ffce=-parseInt(_0x461199(0x31e))/0x1+-parseInt(_0x46...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/vinus.mjsView on unpkg · L1

Findings

4 High3 Medium4 Low
HighSame File Env Network Executiondist/vinus.mjs
HighCommand Output Exfiltrationdist/vinus.mjs
HighObfuscated Payload Loaderdist/vinus.mjs
HighObfuscated
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowUrl Strings
LowNo License