The autonomous AI coding agent in your terminal — one key, every model.
Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/vinus.mjsView on unpkg · L1Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.
dist/vinus.mjsView on unpkg · L1Package ships non-JavaScript build or shell helper files.
skills/github-auth/scripts/gh-env.shView on unpkgA single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/vinus.mjsView on unpkg · L1Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.
dist/vinus.mjsView on unpkg · L1Package ships non-JavaScript build or shell helper files.
skills/github-auth/scripts/gh-env.shView on unpkg