2import{createRequire}from'node:module';var require=createRequire(import.meta.url);
L3: var fet=Object.create;var $B=Object.defineProperty;var pet=Object.getOwnPropertyDescriptor;var het=Object.getOwnPropertyNames;var met=Object.getPrototypeOf,get=Object.prototype.has...
L4: `).join(`\r
...
L8: \r
L9: `+r)}function $g(e,t,r,n,i,s){if(e.listenerCount("wsClientError")){let o=new Error(i);Error.captureStackTrace(o,$g),e.emit("wsClientError",o,r,t)}else ak(r,n,i,s)}});var ipe={};Mn(...
L10: `);let n;for(;(n=art.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let o=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),o==='"'&&(s=s.replace(/\\n/g,`
L11: `),s=s.replace(/\\r/g,"\r")),t[i]=s}return t}function lrt(e){e=e||{};let t=ppe(e);e.path=t;let r=Zi.configDotenv(e);if(!r.parsed){let o=new Erro
CriticalRemote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/socket-server.jsView on unpkg · L2 8\r
L9: `+r)}function $g(e,t,r,n,i,s){if(e.listenerCount("wsClientError")){let o=new Error(i);Error.captureStackTrace(o,$g),e.emit("wsClientError",o,r,t)}else ak(r,n,i,s)}});var ipe={};Mn(...
L10: `);let n;for(;(n=art.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let o=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),o==='"'&&(s=s.replace(/\\n/g,`
HighChild Process
Package source references child process execution.
dist/socket-server.jsView on unpkg · L8 2import{createRequire}from'node:module';var require=createRequire(import.meta.url);
L3: var fet=Object.create;var $B=Object.defineProperty;var pet=Object.getOwnPropertyDescriptor;var het=Object.getOwnPropertyNames;var met=Object.getPrototypeOf,get=Object.prototype.has...
L4: `).join(`\r
...
L8: \r
L9: `+r)}function $g(e,t,r,n,i,s){if(e.listenerCount("wsClientError")){let o=new Error(i);Error.captureStackTrace(o,$g),e.emit("wsClientError",o,r,t)}else ak(r,n,i,s)}});var ipe={};Mn(...
L10: `);let n;for(;(n=art.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let o=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),o==='"'&&(s=s.replace(/\\n/g,`
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/socket-server.jsView on unpkg · L2 2import{createRequire}from'node:module';var require=createRequire(import.meta.url);
L3: var fet=Object.create;var $B=Object.defineProperty;var pet=Object.getOwnPropertyDescriptor;var het=Object.getOwnPropertyNames;var met=Object.getPrototypeOf,get=Object.prototype.has...
L4: `).join(`\r
...
L8: \r
L9: `+r)}function $g(e,t,r,n,i,s){if(e.listenerCount("wsClientError")){let o=new Error(i);Error.captureStackTrace(o,$g),e.emit("wsClientError",o,r,t)}else ak(r,n,i,s)}});var ipe={};Mn(...
L10: `);let n;for(;(n=art.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let o=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),o==='"'&&(s=s.replace(/\\n/g,`
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/socket-server.jsView on unpkg · L2 2import{createRequire}from'node:module';var require=createRequire(import.meta.url);
L3: var fet=Object.create;var $B=Object.defineProperty;var pet=Object.getOwnPropertyDescriptor;var het=Object.getOwnPropertyNames;var met=Object.getPrototypeOf,get=Object.prototype.has...
L4: `).join(`\r
...
L8: \r
L9: `+r)}function $g(e,t,r,n,i,s){if(e.listenerCount("wsClientError")){let o=new Error(i);Error.captureStackTrace(o,$g),e.emit("wsClientError",o,r,t)}else ak(r,n,i,s)}});var ipe={};Mn(...
L10: `);let n;for(;(n=art.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let o=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),o==='"'&&(s=s.replace(/\\n/g,`
L11: `),s=s.replace(/\\r/g,"\r")),t[i]=s}return t}function lrt(e){e=e||{};let t=ppe(e);e.path=t;let r=Zi.configDotenv(e);if(!r.parsed){let o=new Erro
HighCloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
dist/socket-server.jsView on unpkg · L2 88`+B);let[,ae]=K;return ae.replace(/\s/g,"").split(et).map(ce=>ce.replace(ot,"").trim())}function Ar(G,B){var K={};return Object.keys(G).forEach(ae=>{var ce=G[ae],ve,we=h(ce),Ce=!we...
L89: GFS4: `),console.error(e)});ri[Rs]||(uve=global[Rs]||[],fve(ri,uve),ri.close=(function(e){function t(r,n){return e.call(ri,r,function(i){i||dve(),typeof n=="function"&&n.apply(this...
L90: %s`,C,C,x,n);var D=x.type==="*"?J8:x.type==="?"?K8:"\\"+x.type;i=!0,n=n.slice(0,x.reStart)+D+"\\("+C}m(),s&&(n+="\\\\");var R=!1;switch(n.charAt(0)){case"[":case".":case"(":R=!0}fo...
HighObfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/socket-server.jsView on unpkg · L88 8\r
L9: `+r)}function $g(e,t,r,n,i,s){if(e.listenerCount("wsClientError")){let o=new Error(i);Error.captureStackTrace(o,$g),e.emit("wsClientError",o,r,t)}else ak(r,n,i,s)}});var ipe={};Mn(...
L10: `);let n;for(;(n=art.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let o=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),o==='"'&&(s=s.replace(/\\n/g,`
L11: `),s=s.replace(/\\r/g,"\r")),t[i]=s}return t}function lrt(e){e=e||{};let t=ppe(e);e.path=t;let r=Zi.configDotenv(e);if(!r.parsed){let o=new Error(`MISSING_DATA: Cannot parse ${t} f...
L12: `)}var bpe,yk,da,k6=S(()=>{Dg();_t();bpe=(e,t)=>{e.name="$ZodError",Object.defineProperty(e,"_zod",{value:e._zod,enumerable:!1}),Object.defineProperty(e,"issues",{value:t,enumerabl...
...
L2150:
L2151: ## Available Tools
L2152:
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
dist/socket-server.jsView on unpkg · L8 2Cross-file remote execution chain: dist/socket-server.js spawns dist/index.js; helper contains network access plus dynamic code execution.
L2: import{createRequire}from'node:module';var require=createRequire(import.meta.url);
L3: var fet=Object.create;var $B=Object.defineProperty;var pet=Object.getOwnPropertyDescriptor;var het=Object.getOwnPropertyNames;var met=Object.getPrototypeOf,get=Object.prototype.has...
L4: `).join(`\r
...
L8: \r
L9: `+r)}function $g(e,t,r,n,i,s){if(e.listenerCount("wsClientError")){let o=new Error(i);Error.captureStackTrace(o,$g),e.emit("wsClientError",o,r,t)}else ak(r,n,i,s)}});var ipe={};Mn(...
L10: `);let n;for(;(n=art.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let o=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),o==='"'&&(s=s.replace(/\\n/g,`
L11: `),s=
HighCross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/socket-server.jsView on unpkg · L2 2import{createRequire}from'node:module';var require=createRequire(import.meta.url);
L3: var fet=Object.create;var $B=Object.defineProperty;var pet=Object.getOwnPropertyDescriptor;var het=Object.getOwnPropertyNames;var met=Object.getPrototypeOf,get=Object.prototype.has...
L4: `).join(`\r
...
L8: \r
L9: `+r)}function $g(e,t,r,n,i,s){if(e.listenerCount("wsClientError")){let o=new Error(i);Error.captureStackTrace(o,$g),e.emit("wsClientError",o,r,t)}else ak(r,n,i,s)}});var ipe={};Mn(...
L10: `);let n;for(;(n=art.exec(r))!=null;){let i=n[1],s=n[2]||"";s=s.trim();let o=s[0];s=s.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),o==='"'&&(s=s.replace(/\\n/g,`
L11: `),s=s.replace(/\\r/g,"\r")),t[i]=s}return t}function lrt(e){e=e||{};let t=ppe(e);e.path=t;let r=Zi.configDotenv(e);if(!r.parsed){let o=new Erro
LowWeak Crypto
Package source references weak cryptographic algorithms.
dist/socket-server.jsView on unpkg · L2