registry / vit / 0.6.6

vit@0.6.6

⚠ Under review

Social toolkit for personalized software

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 19 low-signal pattern(s) were surfaced and cleared.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 40 file(s), 209 KB of source, external domains: 127.0.0.1, bsky.social, cli.github.com, explore.v-it.org, github.com, plc.directory, public.api.bsky.app, v-it.org

Source & flagged code

11 flagged

package.jsonView file

Lines 1-39json

2 "name": "vit",

3 "version": "0.6.6",

4 "description": "Social toolkit for personalized software",

5 "license": "MIT",

6 "bin": {

7 "vit": "bin/vit.js"

8 },

9 "exports": {

10 "./cap.js": "./src/lib/cap.js"

11 },

12 "files": [

13 "bin/",

14 "src/",

15 "skills/vit/"

16 ],

17 "type": "module",

18 "scripts": {

19 "postinstall": "node src/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L19

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L19

20 },

21 "engines": {

22 "node": ">=20.10.0"

23 },

24 "dependencies": {

25 "@atproto/api": "^0.18.20",

26 "@atproto/common-web": "^0.4.16",

27 "@atproto/oauth-client-node": "^0.3.16",

28 "@ipld/dag-cbor": "^9.2.0",

29 "@noble/curves": "^1.8.0",

30 "@noble/hashes": "^1.7.0",

31 "@scure/bip39": "1.6.0",

32 "bs58": "^6.0.0",

33 "commander": "^13.0.0",

34 "env-paths": "4.0.0",

35 "isomorphic-git": "1.37.0",

36 "memfs": "4.56.10",

37 "undici": "^6.28.1"

38 },

39 "devDependencies": {

src/cmd/hack.jsView file

Lines 1-23javascript

1// SPDX-License-Identifier: MIT

4import { execFileSync } from 'node:child_process';

5import { existsSync, readFileSync, writeFileSync } from 'node:fs';

High

Child Process

Package source references child process execution.

src/cmd/hack.jsView on unpkg · L3

6import { join, resolve }

src/lib/skill-install.jsView file

Lines 1-23javascript

1// SPDX-License-Identifier: MIT

4import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync } from 'node:fs';

5import { homedir } from 'node:os';

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/lib/skill-install.jsView on unpkg · L3

src/cmd/learn.jsView file

Lines 38-78javascript

39 try {

40 const blobCid = resource.blob?.ref?.$link || resource.blob?.cid;

41 if (blobCid) {

42 const blobUrl = new

src/cmd/login.jsView file

•matchType = normalized_sha256 matchedPackage = vit@0.6.4 matchedPath = src/cmd/login.js matchedIdentity = npm:dml0:0.6.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cmd/login.jsView on unpkg

src/cmd/vet.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = vit@0.5.1 matchedIdentity = npm:dml0:0.5.1 similarity = 0.564 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/cmd/vet.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = vit@0.6.4 matchedPath = src/cmd/vet.js matchedIdentity = npm:dml0:0.6.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cmd/vet.jsView on unpkg

src/cmd/adopt.jsView file

•matchType = normalized_sha256 matchedPackage = vit@0.6.4 matchedPath = src/cmd/adopt.js matchedIdentity = npm:dml0:0.6.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cmd/adopt.jsView on unpkg

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node src/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node src/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/cmd/hack.jsView file

3L4: import { execFileSync } from 'node:child_process'; L5: import { existsSync, readFileSync, writeFileSync } from 'node:fs';

High

Child Process

Package source references child process execution.

src/cmd/hack.jsView on unpkg · L3

•

Findings

2 Critical9 High4 Medium4 Low

CriticalAi Agent Control Hijacksrc/lib/skill-install.js

CriticalPrevious Version Dangerous Deltasrc/cmd/vet.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processsrc/cmd/hack.js

HighShell

HighRuntime Package Installsrc/cmd/learn.js

HighKnown Malware Source Similaritysrc/cmd/login.js

HighKnown Malware Source Similaritysrc/cmd/vet.js

HighKnown Malware Source Similaritysrc/cmd/adopt.js

HighKnown Malware Source Similaritysrc/cmd/hack.js

HighKnown Malware Source Similaritysrc/cmd/learn.js

MediumAmbiguous Install Lifecycle Script

Affected versions and remediation

This report applies to vit@0.6.6.

See version security history for other recorded verdicts.

Review the evidence and your use of vit@0.6.6 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-07 22:32:40.512Z (UTC).