Loading npm security reports…

xyt-agentos@1.1.2: Suspicious npm security report (Warn) | LPM Firewall

registry / xyt-agentos / 1.1.2

xyt-agentos@1.1.2

XYT AgentOS — Workent 龙虾桌面 Agent 客户端（xyt-client）

AI Security Review

scanned 1d ago · by lpm-firewall-ai

The importable main module starts a desktop client that schedules recurring uploads of local AI-agent dialogue data. It enumerates agent-specific user directories and prepares dialogue archives for upload.

Static reason

One or more suspicious static signals were detected.

Trigger

Importing dist/index.js or launching the client service.

Impact

Exfiltration of potentially sensitive Claude, Cursor, Codex, Hermes, and OpenClaw conversations and related workspace context.

Mechanism

Periodic collection and upload of local AI-agent dialogues.

Rationale

The package performs recurring, undisclosed collection and upload of local AI-agent dialogue data; no lifecycle hook limits this to runtime rather than installation. The concrete data-exfiltration behavior warrants a block. Product guard normalized a non-low false-positive publish_block request to warn-only suspicious.

Evidence

package.jsondist/index.jsdist/cli.jsdist/socket-server.js~/.claude~/.cursor

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Malware with medium false-positive risk.

Evidence for warning

Obfuscated runtime code invokes its startup routine on import.

Source & flagged code

5 flagged · loading source

dist/socket-server.jsView file

1#!/usr/bin/env node L2: const _0x1f52bc=_0xf3a8;(function(_0x5159e8,_0x506b39){const _0x54b1e1={_0x13e956:0x235,_0x5f1cea:0xa05,_0x2cb156:0xc87,_0x3357fd:0x546,_0x2366e9:0x3b2},_0xd8b228=_0xf3a8,_0x2c20ae...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/socket-server.jsView on unpkg · L1

1#!/usr/bin/env node L2: const _0x1f52bc=_0xf3a8;(function(_0x5159e8,_0x506b39){const _0x54b1e1={_0x13e956:0x235,_0x5f1cea:0xa05,_0x2cb156:0xc87,_0x3357fd:0x546,_0x2366e9:0x3b2},_0xd8b228=_0xf3a8,_0x2c20ae...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/socket-server.jsView on unpkg · L1

1#!/usr/bin/env node L2: const _0x1f52bc=_0xf3a8;(function(_0x5159e8,_0x506b39){const _0x54b1e1={_0x13e956:0x235,_0x5f1cea:0xa05,_0x2cb156:0xc87,_0x3357fd:0x546,_0x2366e9:0x3b2},_0xd8b228=_0xf3a8,_0x2c20ae...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/socket-server.jsView on unpkg · L1

dist/cli.jsView file

1#!/usr/bin/env node L2: const _0x1157cc=_0x415a;(function(_0x3e4003,_0x352b31){const _0x1c4f17={_0xfe58e0:0x15d6,_0x1e0d73:0x2d0,_0x52d3d7:0x120d,_0x335ab6:0xb42},_0x291c40=_0x415a,_0x346b3a=_0x3e4003();w...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/cli.js L1: #!/usr/bin/env node L2: const _0x1157cc=_0x415a;(function(_0x3e4003,_0x352b31){const _0x1c4f17={_0xfe58e0:0x15d6,_0x1e0d73:0x2d0,_0x52d3d7:0x120d,_0x335ab6:0xb42},_0x291c40=_0x415a,_0x346b3a=_0x3e4003();w...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/cli.jsView on unpkg · L1

Source & flagged code

5 flagged

dist/socket-server.jsView file

1#!/usr/bin/env node L2: const _0x1f52bc=_0xf3a8;(function(_0x5159e8,_0x506b39){const _0x54b1e1={_0x13e956:0x235,_0x5f1cea:0xa05,_0x2cb156:0xc87,_0x3357fd:0x546,_0x2366e9:0x3b2},_0xd8b228=_0xf3a8,_0x2c20ae...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/socket-server.jsView on unpkg · L1

1#!/usr/bin/env node L2: const _0x1f52bc=_0xf3a8;(function(_0x5159e8,_0x506b39){const _0x54b1e1={_0x13e956:0x235,_0x5f1cea:0xa05,_0x2cb156:0xc87,_0x3357fd:0x546,_0x2366e9:0x3b2},_0xd8b228=_0xf3a8,_0x2c20ae...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/socket-server.jsView on unpkg · L1

1#!/usr/bin/env node L2: const _0x1f52bc=_0xf3a8;(function(_0x5159e8,_0x506b39){const _0x54b1e1={_0x13e956:0x235,_0x5f1cea:0xa05,_0x2cb156:0xc87,_0x3357fd:0x546,_0x2366e9:0x3b2},_0xd8b228=_0xf3a8,_0x2c20ae...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/socket-server.jsView on unpkg · L1

dist/cli.jsView file

1#!/usr/bin/env node L2: const _0x1157cc=_0x415a;(function(_0x3e4003,_0x352b31){const _0x1c4f17={_0xfe58e0:0x15d6,_0x1e0d73:0x2d0,_0x52d3d7:0x120d,_0x335ab6:0xb42},_0x291c40=_0x415a,_0x346b3a=_0x3e4003();w...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/cli.js L1: #!/usr/bin/env node L2: const _0x1157cc=_0x415a;(function(_0x3e4003,_0x352b31){const _0x1c4f17={_0xfe58e0:0x15d6,_0x1e0d73:0x2d0,_0x52d3d7:0x120d,_0x335ab6:0xb42},_0x291c40=_0x415a,_0x346b3a=_0x3e4003();w...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/cli.jsView on unpkg · L1