registry / volute / 0.41.0

volute@0.41.0

⚠ Under review

CLI for creating and managing self-modifying AI minds powered by the Claude Agent SDK

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 183 file(s), 1.95 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.telegram.org, discord.com, github.com, openrouter.ai, registry.npmjs.org, slack.com, svelte.dev, volute.systems, www.apple.com, www.w3.org

Source & flagged code

10 flagged

dist/status-VMOZUIZ2.jsView file

Lines 6-46javascript

6import {

7 LAUNCHD_PLIST_LABEL,

8 LAUNCHD_PLIST_PATH,

9 SYSTEM_LAUNCHD_PLIST_PATH,

10 SYSTEM_SERVICE_PATH,

11 USER_SYSTEMD_UNIT,

12 getDaemonUrl,

13 getServiceMode,

14 modeLabel,

15 readDaemonConfig

16} from "./chunk-2I7OKOYV.js";

17import {

18 checkForUpdate

19} from "./chunk-FEQPNCXB.js";

20import "./chunk-Y2XLASFJ.js";

21import "./chunk-4ED2DBNC.js";

22import "./chunk-VDODEQSJ.js";

23import "./chunk-MHFAWJCC.js";

24import "./chunk-K3NQKI34.js";

26// src/commands/status.ts

27import { execFile } from "child_process";

28import { existsSync } from "fs";

High

Child Process

Package source references child process execution.

dist/status-VMOZUIZ2.jsView on unpkg · L26

29import { promisify } from "util";

30var execFileAsync = promisify(execFile);

31var cmd = command({

32 name: "volute status",

33 description: "Show daemon status, version, and running minds",

34 flags: {},

35 run: async () => {

36 const mode = getServiceMode();

37 console.log(`Mode: ${modeLabel(mode)}`);

38 const { hostname, port, internalPort, token } = readDaemonConfig();

39 const apiPort = internalPort ?? port;

40 const baseUrl = getDaemonUrl("127.0.0.1", apiPort);

41 let running = false;

42 let version;

43 try {

44 const res = await fetch(`${baseUrl}/api/health`);

45 if (res.ok) {

46 const body = await res.json();

Lines 74-114javascript

74 headers.Origin = baseUrl;

75 try {

76 const res = await fetch(`${baseUrl}/api/minds`, { headers });

77 if (res.ok) {

78 const minds = await res.json();

dist/chunk-W5Z2H3LU.jsView file

Lines 769-809javascript

769 headers: { "Content-Type": "application/json" },

770 body: JSON.stringify({

771 content: [{ type: "text", text: content }],

772 channel: "@volute",

773 sender: "volute",

774 isDM: true,

775

dist/setup-47NBOCZL.jsView file

Lines 11-51javascript

11} from "./chunk-SWY4DJ67.js";

12import {

13 LAUNCHD_PLIST_LABEL,

14 SYSTEM_LAUNCHD_PLIST_PATH,

15 SYSTEM_SERVICE_PATH

16} from "./chunk-2I7OKOYV.js";

17import {

18 resolveVoluteBin

19} from "./chunk-Y2XLASFJ.js";

dist/daemon.jsView file

Lines 435-484javascript

435 }

436 } catch {

437 }

438 res();

439 }, 3e3);

440 });

441 this.bridges.delete(platform);

442 }

443 this.killOrphanBridge(platform);

dist/skills/dreaming/scripts/wake-context-dreams.shView file

•path = [redacted]-context-dreams.sh kind = build_helper sizeBytes = 1180 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/skills/dreaming/scripts/wake-context-dreams.shView on unpkg

templates/_base/.init/.local/hooks/wake-context.shView file

•path = templates/_base/.init/.local/hooks/wake-context.sh kind = payload_in_excluded_dir sizeBytes = 421 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

templates/_base/.init/.local/hooks/wake-context.shView on unpkg

Source & flagged code

10 flagged · loading source

dist/status-VMOZUIZ2.jsView file

26// src/commands/status.ts L27: import { execFile } from "child_process"; L28: import { existsSync } from "fs";

High

Child Process

Package source references child process execution.

dist/status-VMOZUIZ2.jsView on unpkg · L26

94}); L95: var run = cmd.execute; L96: async function getServiceInfo() {

High

Shell

Package source references shell execution.

dist/status-VMOZUIZ2.jsView on unpkg · L94

dist/chunk-W5Z2H3LU.jsView file

789try { L790: const { getSleepManagerIfReady: getSleepManagerIfReady2 } = await import("./sleep-manager-T3AXQB3R.js"); L791: const sleepState = getSleepManagerIfReady2()?.getState(name);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-W5Z2H3LU.jsView on unpkg · L789

dist/setup-47NBOCZL.jsView file

31// src/commands/setup.ts L32: import { execFileSync, spawn } from "child_process"; L33: import { mkdirSync, writeFileSync } from "fs"; ... L98: if (host) args.push("--host", host); L99: const home = homedir(); L100: const binUnderHome = voluteBin.startsWith(`${home}/`); ... L116: "ReadWritePaths=/var/lib/volute /minds", L117: "PrivateTmp=yes" L118: ]; ... L125: var DATA_DIR = "/var/lib/volute"; L126: var MINDS_DIR = process.platform === "darwin" ? "/var/lib/volute/minds" : "/minds"; L127: var PROFILE_PATH = "/etc/profile.d/volute.sh";

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/setup-47NBOCZL.jsView on unpkg · L31

dist/daemon.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = volute@0.40.2 matchedIdentity = npm:dm9sdXRl:0.40.2 similarity = 0.958 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/daemon.jsView on unpkg

455); L456: const daemonToken = process.env.VOLUTE_DAEMON_TOKEN; L457: if (!daemonToken) { ... L464: ...process.env, L465: VOLUTE_DAEMON_URL: `http://${daemonLoopback()}:${daemonPort}`, L466: VOLUTE_DAEMON_TOKEN: daemonToken, ... L470: }; L471: const child = spawn(process.execPath, [builtinBridge], spawnOpts); L472: let lastStderr = "";

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/daemon.jsView on unpkg · L455

464...process.env, L465: VOLUTE_DAEMON_URL: `http://${daemonLoopback()}:${daemonPort}`, L466: VOLUTE_DAEMON_TOKEN: daemonToken, ... L470: }; L471: const child = spawn(process.execPath, [builtinBridge], spawnOpts); L472: let lastStderr = ""; L473: child.stdout?.pipe(logStream); L474: child.stderr?.on("data", (chunk) => { L475: logStream.write(chunk); L476: lastStderr = chunk.toString().trim();

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/daemon.jsView on unpkg · L464

7083const [cmd, args] = await wrapForIsolation("npm", ["install"], mindName); L7084: await exec(cmd, args, { L7085: cwd: variantDir, ... L7092: const msg = e instanceof Error ? e.message : String(e); L7093: return c.json({ error: `npm install failed: ${msg}` }, 500); L7094: }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/daemon.jsView on unpkg · L7083

dist/skills/dreaming/scripts/wake-context-dreams.shView file

•path = [redacted]-context-dreams.sh kind = build_helper sizeBytes = 1180 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/skills/dreaming/scripts/wake-context-dreams.shView on unpkg

templates/_base/.init/.local/hooks/wake-context.shView file

•path = templates/_base/.init/.local/hooks/wake-context.sh kind = payload_in_excluded_dir sizeBytes = 421 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

templates/_base/.init/.local/hooks/wake-context.shView on unpkg

Findings

1 Critical6 High6 Medium6 Low

CriticalPrevious Version Dangerous Deltadist/daemon.js

HighChild Processdist/status-VMOZUIZ2.js

HighShelldist/status-VMOZUIZ2.js

HighSame File Env Network Executiondist/daemon.js

HighCommand Output Exfiltrationdist/daemon.js

HighRuntime Package Installdist/daemon.js

HighPayload In Excluded Dirtemplates/_base/.init/.local/hooks/wake-context.sh

MediumDynamic Requiredist/chunk-W5Z2H3LU.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/setup-47NBOCZL.js

MediumShips Build Helperdist/skills/dreaming/scripts/wake-context-dreams.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

10 flagged

dist/status-VMOZUIZ2.jsView file

Lines 6-46javascript

6import {

7 LAUNCHD_PLIST_LABEL,

8 LAUNCHD_PLIST_PATH,

9 SYSTEM_LAUNCHD_PLIST_PATH,

10 SYSTEM_SERVICE_PATH,

11 USER_SYSTEMD_UNIT,

12 getDaemonUrl,

13 getServiceMode,

14 modeLabel,

15 readDaemonConfig

16} from "./chunk-2I7OKOYV.js";

17import {

18 checkForUpdate

19} from "./chunk-FEQPNCXB.js";

20import "./chunk-Y2XLASFJ.js";

21import "./chunk-4ED2DBNC.js";

22import "./chunk-VDODEQSJ.js";

23import "./chunk-MHFAWJCC.js";

24import "./chunk-K3NQKI34.js";

26// src/commands/status.ts

27import { execFile } from "child_process";

28import { existsSync } from "fs";

High

Child Process

Package source references child process execution.

dist/status-VMOZUIZ2.jsView on unpkg · L26

29import { promisify } from "util";

30var execFileAsync = promisify(execFile);

31var cmd = command({

32 name: "volute status",

33 description: "Show daemon status, version, and running minds",

34 flags: {},

35 run: async () => {

36 const mode = getServiceMode();

37 console.log(`Mode: ${modeLabel(mode)}`);

38 const { hostname, port, internalPort, token } = readDaemonConfig();

39 const apiPort = internalPort ?? port;

40 const baseUrl = getDaemonUrl("127.0.0.1", apiPort);

41 let running = false;

42 let version;

43 try {

44 const res = await fetch(`${baseUrl}/api/health`);

45 if (res.ok) {

46 const body = await res.json();

Lines 74-114javascript

74 headers.Origin = baseUrl;

75 try {

76 const res = await fetch(`${baseUrl}/api/minds`, { headers });

77 if (res.ok) {

78 const minds = await res.json();

dist/chunk-W5Z2H3LU.jsView file

Lines 769-809javascript

769 headers: { "Content-Type": "application/json" },

770 body: JSON.stringify({

771 content: [{ type: "text", text: content }],

772 channel: "@volute",

773 sender: "volute",

774 isDM: true,

775

dist/setup-47NBOCZL.jsView file

Lines 11-51javascript

11} from "./chunk-SWY4DJ67.js";

12import {

13 LAUNCHD_PLIST_LABEL,

14 SYSTEM_LAUNCHD_PLIST_PATH,

15 SYSTEM_SERVICE_PATH

16} from "./chunk-2I7OKOYV.js";

17import {

18 resolveVoluteBin

19} from "./chunk-Y2XLASFJ.js";

dist/daemon.jsView file

Lines 435-484javascript

435 }

436 } catch {

437 }

438 res();

439 }, 3e3);

440 });

441 this.bridges.delete(platform);

442 }

443 this.killOrphanBridge(platform);

dist/skills/dreaming/scripts/wake-context-dreams.shView file

•path = [redacted]-context-dreams.sh kind = build_helper sizeBytes = 1180 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/skills/dreaming/scripts/wake-context-dreams.shView on unpkg

templates/_base/.init/.local/hooks/wake-context.shView file

•path = templates/_base/.init/.local/hooks/wake-context.sh kind = payload_in_excluded_dir sizeBytes = 421 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

templates/_base/.init/.local/hooks/wake-context.shView on unpkg