registry / weavatrix / 0.2.1

weavatrix@0.2.1

Weavatrix — code graph & blast-radius MCP server for AI coding agents: change impact, transitive dependents, health audit, duplicate detection, and coverage mapping over any local repository.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 130 file(s), 978 KB of source, external domains: api.osv.dev, osv.dev, www.apache.org

Source & flagged code

4 flagged

src/analysis/dep-check.jsView file

Lines 167-207javascript

167 severity: dev ? "info" : "low",

168 confidence: dev || ecosystem ? "low" : "medium",

169 title: `Unused ${section

Source & flagged code

4 flagged · loading source

src/analysis/dep-check.jsView file

187const usageReason = stylesheetOnly L188: ? `Direct stylesheet import(s) resolve through "${name}"; CSS-only imports are build/runtime inputs even without JavaScript bindings.` L189: : use.typeOnly

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/analysis/dep-check.jsView on unpkg · L187

src/analysis/findings.jsView file

1// Unified Finding factory + rollups for the internal dependency/security engine (DEPS_SECURITY_PLAN.md §2.3). L2: // Every analyzer (unused / structure / vulnerability / malware) and the external-tool adapter emit THIS shape,

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/analysis/findings.jsView on unpkg · L1

src/security/registry-sig.rules.jsView file

36// canonical reverse/bind shells — a shell wired to a socket. Essentially never legitimate inside a L37: // published package: /dev/tcp redirection, netcat -e, interactive-shell redirect, mkfifo pipe shell. L38: pattern: "/dev/tcp/[0-9]|\\bnc(at)?\\s+-e\\b|\\b(ba)?sh\\s+-i\\b\\s*(2)?>&|mkfifo\\b.{0,60}(ba)?sh\\b|0<&196|socket\\.socket\\(.{0,40}(SOCK_STREAM).{0,80}(/bin/sh|exec)", L39: re: /\/dev\/tcp\/[0-9]|\bnc(at)?\s+-e\b|\b(ba)?sh\s+-i\b\s*(2)?>&|mkfifo\b[\s\S]{0,60}?\b(ba)?sh\b|0<&196|socket\.socket\([\s\S]{0,120}?(connect|SOCK_STREAM)[\s\S]{0,180}?(\/bin\/s... ... L48: // bun-types false positive). /etc/passwd + .netrc dropped (too common in prose). L49: pattern: "\\.ssh/(id_rsa|id_ed25519|id_dsa|authorized_keys)|\\.aws/credentials|\\.git-credentials|/etc/shadow|\\.docker/config\\.json|\\.kube/config", L50: re: /(readFileSync|readFile|createReadStream|openSync|\.read\(|copyFile|readlink|Get-Content|\bcat\s|\bscp\s|\bcurl\b[^\n]*-[TF])[\s\S]{0,80}?(\.ssh\/(id_(rsa|ed25519|dsa)|authoriz... L51: what: "reads a credential/secret file (SSH key, cloud creds) in a filesystem-read context", ... L61: re: /require\(\s*(Buffer\.from|atob)\(|module\.constructor\._load|globalThis\[['"

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/security/registry-sig.rules.jsView on unpkg · L36

src/analysis/endpoints-java.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = weavatrix@0.1.4 matchedIdentity = npm:d2VhdmF0cml4:0.1.4 similarity = 0.589 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/analysis/endpoints-java.jsView on unpkg

Findings

2 High4 Medium5 Low

HighCloud Metadata Accesssrc/security/registry-sig.rules.js

HighPrevious Version Dangerous Deltasrc/analysis/endpoints-java.js

MediumDynamic Requiresrc/analysis/dep-check.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptosrc/analysis/findings.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

src/analysis/findings.jsView file

Lines 1-21javascript

1// Unified Finding factory + rollups for the internal dependency/security engine (DEPS_SECURITY_PLAN.md §2.3).

2// Every analyzer (unused / structure / vulnerability / malware) and the external-tool adapter emit THIS shape,

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/analysis/findings.jsView on unpkg · L1

3// so the renderer and the AI summarizer consume one contract regardless of engine.

4import { createHash } from "node:crypto";

6export const SEVERITY_ORDER = ["critical", "high", "medium", "low", "info"];

7export const FINDING_CATEGORIES = ["unused", "structure", "vulnerability", "malware"];

9// Stable id: survives re-runs so the UI can persist expand/dismiss state per finding.

10export function makeFinding(f) {

11 const cycleIdentity = Array.isArray(f.cycleMembers)

12 ? [...new Set(f.cycleMembers.map(String))].sort().join("\0")

13 : "";

14 const id = createHash("sha1")

15 .update([

16 f.category, f.rule, f.file || "", f.manifest || "", f.scope || "",

17 f.package || "", f.symbol || "", cycleIdentity, f.title || "",

18 ].join("|"))

19 .digest("hex")

20 .slice(0, 16);

21 return {

src/security/registry-sig.rules.jsView file

Lines 16-56javascript

16// external URL that is NOT an exfil endpoint (owned by exfil-url) and NOT a raw IP (owned by exfil-ip)

17const PLAIN_EXTERNAL_URL = `https?://(?!(${EXFIL_HOSTS})|[0-9]{1,3}\\.|localhost\\b|127\\.|0\\.0\\.0\\.0|10\\.|192\\.168\\.|169\\.254\\.|172\\.(1[6-9]|2\\d|3[01])\\.)[^'"\`\\s)\\\\]+`;

19// ---- content rules (scanned over node_modules file text; `pattern` is ripgrep-safe ERE, `re` is the

20// JS validator used both to classify rg hits and by the no-rg fallback) ----

21export const CONTENT_RULES = [

22 {

23 key: "crypto-miner",

24 severity: "critical",

25 nearZeroFp: true,

26 // mining-pool protocol + specific miner names / pool hosts / xmrig flags. Deliberately NO generic

27 // words ("miner", "hash") — those false-positive on legit crypto/hashing libs.

30 what: "crypto-miner signature (mining pool protocol / miner name / xmrig flag)",

31 },

32 {

33 key: "reverse-shell",

34 severity: "critical",

35 nearZeroFp: true,

36 // canonical reverse/bind shells — a shell wired to a socket. Essentially never legitimate inside a

37 // published package: /dev/tcp redirection, netcat -e, interactive-shell redirect, mkfifo pipe shell.

38 pattern: "/dev/tcp/[0-9]|\\bnc(at)?\\s+-e\\b|\\b(ba)?sh\\s+-i\\b\\s*(2)?>&|mkfifo\\b.{0,60}(ba)?sh\\b|0<&196|socket\\.socket\\(.{0,40}(SOCK_STREAM).{0,80}(/bin/sh|exec)",

39 re: /\/dev\/tcp\/[0-9]|\bnc(at)?\s+-e\b|\b(ba)?sh\s+-i\b\s*(2)?>&|mkfifo\b[\s\S]{0,60}?\b(ba)?sh\b|0<&196|socket\.socket\([\s\S]{0,120}?(connect|SOCK_STREAM)[\s\S]{0,180}?(

40 what: "reverse/bind-shell pattern (interactive shell wired to a socket)",

41 },

42 {

43 key: "sensitive-file-read",

44 severity: "medium", // strong signal, but backup/dotfile tools touch these too → escalates via co-occurrence

45 nearZeroFp: false,

46 // rg pre-filter is the bare path; the JS re REQUIRES a read/copy/exfil verb on the same line — a

47 // credential PATH alone (docs, READMEs, comments) is not a read (that was the app-builder-lib /

48 // bun-types false positive). /etc/passwd + .netrc dropped (too common in prose).

50 re: /(readFileSync|readFile|createReadStream|openSync|\.read\(|copyFile|readlink|Get-Content|\bcat\s|\bscp\s|\bcurl\b[^\n]*-[TF])[\s\S]{0,80}?(\.ssh\/(id_(rsa|ed25519|dsa)|authorized_keys)|\.

51 what: "reads a credential/secret file (SSH key, cloud creds) in a filesystem-read context",

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/security/registry-sig.rules.jsView on unpkg · L36

52 },

53 {

54 key: "dynamic-require",

55 severity: "medium",

56 nearZeroFp: false,