registry / zidane / 6.1.3

zidane@6.1.3

⚠ Under review

an agent that goes straight to the goal

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 80 file(s), 2.57 MB of source, external domains: 127.0.0.1, accounts.x.ai, api.arcee.ai, api.cerebras.ai, api.openai.com, api.search.brave.com, api.tavily.com, api.x.ai, api2.cursor.sh, auth.openai.com, auth.x.ai, claude.ai, codeload.github.com, cursor.com, duckduckgo.com, github.com, html.duckduckgo.com, inference.baseten.co, mcp.example.com, openrouter.ai, platform.claude.com, raw.githubusercontent.com, registry.npmjs.org

Source & flagged code

2 flagged

dist/auth-D5FfJtLf.jsView file

Lines 1-34javascript

1import { t as writeFileAtomic } from "./atomic-write-B7zr1ddF.js";

2import { c as ANTHROPIC_EXTRA_MODELS, l as FAST_MODE_OPTIONS, t as anthropic } from "./anthropic-CV_OSYVD.js";

3import { arcee } from "./providers/arcee.js";

4import { baseten } from "./providers/baseten.js";

5import { cerebras } from "./providers/cerebras.js";

6import { n as createXaiOAuthProvider, r as generatePkce, t as xai } from "./xai-kGdhWmds.js";

7import { n as createCursorOAuthProvider } from "./providers-Dln69sQ_.js";

8import { local } from "./providers/local.js";

9import { openai } from "./providers/openai.js";

10import { openrouter } from "./providers/openrouter.js";

11import { dirname, resolve } from "node:path";

12import { existsSync, readFileSync, realpathSync } from "node:fs";

13import { homedir } from "node:os";

14import { randomBytes } from "node:crypto";

15import { createServer } from "node:http";

16import { getBuiltinModel, getBuiltinModels } from "@earendil-works/pi-ai/providers/all";

17import { refreshAnthropicToken, refreshOpenAICodexToken, registerOAuthProvider } from "@earendil-works/pi-ai/oauth";

18//#region src/chat/oauth-page/server.ts

19const CALLBACK_HOST = process.env.PI_OAUTH_CALLBACK_HOST || "127.0.0.1";

20function buildRequestHandler(opts, pending) {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/auth-D5FfJtLf.jsView on unpkg · L14

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/auth-D5FfJtLf.jsView on unpkg · L14

21 return (req, res) => {

22 try {

23 const url = new URL(req.url || "", "http://localhost");

24 if (url.pathname !== opts.path) {

25 respondError(res, 404, opts, "Callback route not found.");

26 return;

27 }

28 const error = url.searchParams.get("error");

29 if (error) {

30 respondError(res, 400, opts, `${opts.providerName} authentication did not complete.`, `Error: ${error}`);

31 return;

32 }

33 const code = url.searchParams.get("code");

34 const state = url.searchParams.get("state");

Source & flagged code

2 flagged · loading source

dist/auth-D5FfJtLf.jsView file

14import { randomBytes } from "node:crypto"; L15: import { createServer } from "node:http"; L16: import { getBuiltinModel, getBuiltinModels } from "@earendil-works/pi-ai/providers/all"; ... L18: //#region src/chat/oauth-page/server.ts L19: const CALLBACK_HOST = process.env.PI_OAUTH_CALLBACK_HOST || "127.0.0.1"; L20: function buildRequestHandler(opts, pending) { ... L43: res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" }); L44: res.end(opts.renderPage({ L45: kind: "success", ... L121: //#region src/chat/oauth-page/anthropic.ts L122: const CLIENT_ID$1 = atob("[redacted]"); L123: const AUTHORIZE_URL$1 = "https://claude.ai/oauth/authorize";

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/auth-D5FfJtLf.jsView on unpkg · L14

14Trigger-reachable chain: manifest.exports -> dist/chat.js -> dist/auth-D5FfJtLf.js L14: import { randomBytes } from "node:crypto"; L15: import { createServer } from "node:http"; L16: import { getBuiltinModel, getBuiltinModels } from "@earendil-works/pi-ai/providers/all"; ... L18: //#region src/chat/oauth-page/server.ts L19: const CALLBACK_HOST = process.env.PI_OAUTH_CALLBACK_HOST || "127.0.0.1"; L20: function buildRequestHandler(opts, pending) { ... L43: res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" }); L44: res.end(opts.renderPage({ L45: kind: "success", ... L121: //#region src/chat/oauth-page/anthropic.ts L122: const CLIENT_ID$1 = atob("[redacted]"); L123: const AUTHORIZE_URL$1 = "https://claude.ai/oauth/authorize";

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/auth-D5FfJtLf.jsView on unpkg · L14

Findings

2 Critical3 Medium5 Low

CriticalCredential Exfiltrationdist/auth-D5FfJtLf.js

CriticalTrigger Reachable Dangerous Capabilitydist/auth-D5FfJtLf.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/auth-D5FfJtLf.jsView file

Lines 1-34javascript

1import { t as writeFileAtomic } from "./atomic-write-B7zr1ddF.js";

2import { c as ANTHROPIC_EXTRA_MODELS, l as FAST_MODE_OPTIONS, t as anthropic } from "./anthropic-CV_OSYVD.js";

3import { arcee } from "./providers/arcee.js";

4import { baseten } from "./providers/baseten.js";

5import { cerebras } from "./providers/cerebras.js";

6import { n as createXaiOAuthProvider, r as generatePkce, t as xai } from "./xai-kGdhWmds.js";

7import { n as createCursorOAuthProvider } from "./providers-Dln69sQ_.js";

8import { local } from "./providers/local.js";

9import { openai } from "./providers/openai.js";

10import { openrouter } from "./providers/openrouter.js";

11import { dirname, resolve } from "node:path";

12import { existsSync, readFileSync, realpathSync } from "node:fs";

13import { homedir } from "node:os";

14import { randomBytes } from "node:crypto";

15import { createServer } from "node:http";

16import { getBuiltinModel, getBuiltinModels } from "@earendil-works/pi-ai/providers/all";

17import { refreshAnthropicToken, refreshOpenAICodexToken, registerOAuthProvider } from "@earendil-works/pi-ai/oauth";

18//#region src/chat/oauth-page/server.ts

19const CALLBACK_HOST = process.env.PI_OAUTH_CALLBACK_HOST || "127.0.0.1";

20function buildRequestHandler(opts, pending) {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/auth-D5FfJtLf.jsView on unpkg · L14

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/auth-D5FfJtLf.jsView on unpkg · L14

21 return (req, res) => {

22 try {

23 const url = new URL(req.url || "", "http://localhost");

24 if (url.pathname !== opts.path) {

25 respondError(res, 404, opts, "Callback route not found.");

26 return;

27 }

28 const error = url.searchParams.get("error");

29 if (error) {

30 respondError(res, 400, opts, `${opts.providerName} authentication did not complete.`, `Error: ${error}`);

31 return;

32 }

33 const code = url.searchParams.get("code");

34 const state = url.searchParams.get("state");