comfyui-mcp@0.52.206

CAUTION

Publisher claims: "Local-first, agent-native control plane for ComfyUI — MCP server + autonomous sidebar agent that drives your live graph in natural language on ANY LLM: Claude/ChatGPT/Gemini on your subscription (no API key), free local models via Ollama (fully offline), " Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher artokun · joined 0 days agoInstalls 117KLast detonated 2 h ago

Dispute verdict

Behavior trace

Honeypot run · 2 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

1.8sprocessdependency install exit 1

1.9sprocessexec /usr/bin/timeout

1.9sprocessexited 1: Node.js v22.23.4

1.9sclaimedno tools/list reply (exit 1)

2.0sprocessscript backend runs setup only

Static findings

CRITICAL

Fake instruction boundary tagREADME.md:143 · Fake instruction boundary tag

AST01

CRITICAL

Access to sensitive file pathsdist/boot.js:500 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/comfyui/client.js:432 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/boot.js:513 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Fake instruction boundary tagREADME.md:134 · Fake instruction boundary tag

AST01

CRITICAL

Access to sensitive file pathsREADME.md:575 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/env-file.js:50 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/orchestrator/index.js:692 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/env-file.js:1 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/config.js:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/env-file.js:32 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/orchestrator/index.js:484 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/config.js:35 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/comfyui/fetch.js:461 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/orchestrator/index.js:488 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/i18n/index.js:79 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/config.js:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Pipe-to-shell patterndist/orchestrator/index.js:4321 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Access to sensitive file pathsdist/config.js:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/env-file.js:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/config.js:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationdist/orchestrator/index.js:1549 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationdist/orchestrator/index.js:1554 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsdist/orchestrator/index.js:860 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationdist/orchestrator/index.js:1558 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationdist/orchestrator/index.js:1548 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Credential pass-through configurationdist/orchestrator/index.js:1550 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsdist/orchestrator/index.js:821 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/services/node-dev.js:123 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/services/comfy-cli.js:384 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Credential pass-through configurationdist/services/api-nodes.js:27 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Access to sensitive file pathsdist/services/node-dev.js:1148 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/services/ui-bridge.js:6527 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/services/manifest.js:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/services/manifest.js:861 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/services/manifest.js:850 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/services/manifest.js:910 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/tools/apps.js:58 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/services/manifest.js:34 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/services/comfy-cli.js:122 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/services/comfy-cli.js:423 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/services/comfy-cli.js:107 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/gen-changelog.mjs:32 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/gen-changelog.mjs:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/transport/cli.js:265 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/transport/cli.js:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/tools/index.js:113 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/i18n-build-en.mjs:286 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/transport/cli.js:204 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/mock-panel.mjs:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/tools/index.js:213 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/utils/logger.js:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/tools/model-extras.js:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/gen-tool-docs.ts:541 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/mock-panel.mjs:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/panel-smoke.mjs:35 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/panel-smoke.mjs:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/probe-bridge.mjs:5 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/panel-smoke.mjs:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/panel-smoke.mjs:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/mock-panel.mjs:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/panel-sim.mjs:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/panel-smoke.mjs:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/mock-panel.mjs:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/smoke-install.mjs:260 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/smoke-install.mjs:226 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/test-local-llm.mjs:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/test-generate.mjs:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/test-agent.mjs:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/verify-render.mjs:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/test-generate.mjs:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/test-agent.mjs:363 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/test-agent.mjs:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/test-local-llm.mjs:39 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/test-generate.mjs:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/probe-models.mjs:5 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/test-agent.mjs:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/smoke-install.mjs:237 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/test-agent.mjs:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/test-local-llm.mjs:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/smoke-install.mjs:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressREADME.md:636 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.md:594 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressdist/config.js:746 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressREADME.md:692 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Tunneling service URLdist/comfyui/fetch.js:164 · Tunneling service URL — may route traffic to attacker infrastructure

AST07

HIGH

Auto-update or dynamic fetch configurationdist/boot.js:139 · Auto-update or dynamic fetch configuration — agent may load new code at runtime

AST06

HIGH

npx invocation of non-well-known packageREADME.md:634 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:101 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:192 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressdist/config.js:234 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Process kill commanddist/orchestrator/index.js:689 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commanddist/orchestrator/index.js:479 · Process kill command — agent can terminate processes

AST05

HIGH

Outbound HTTP to raw IP addressdist/comfyui/fetch.js:187 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packagedist/boot.js:258 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commanddist/config.js:535 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packageREADME.md:202 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commanddist/orchestrator/index.js:764 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commanddist/orchestrator/index.js:768 · Process kill command — agent can terminate processes

AST05

HIGH

Auto-update or dynamic fetch configurationdist/orchestrator/index.js:6648 · Auto-update or dynamic fetch configuration — agent may load new code at runtime

AST06

HIGH

Outbound HTTP to raw IP addressdist/orchestrator/index.js:1061 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressdist/orchestrator/index.js:1424 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressdist/orchestrator/index.js:1418 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packagedist/orchestrator/index.js:419 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commanddist/orchestrator/index.js:6682 · Process kill command — agent can terminate processes

AST05

HIGH

Auto-update or dynamic fetch configurationdist/services/ui-bridge.js:1195 · Auto-update or dynamic fetch configuration — agent may load new code at runtime

AST06

HIGH

Outbound HTTP to raw IP addressdist/services/ui-bridge.js:2248 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Process kill commanddist/services/ui-bridge.js:2573 · Process kill command — agent can terminate processes

AST05

HIGH

URL with embedded credentialsdist/services/manifest.js:385 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

npx invocation of non-well-known packagedist/services/manifest.js:97 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/services/manifest.js:174 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

URL with embedded credentialsdist/services/manifest.js:359 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

npx invocation of non-well-known packagedist/services/manifest.js:227 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressdist/orchestrator/index.js:2039 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

URL with embedded credentialsdist/services/manifest.js:361 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

npx invocation of non-well-known packagedist/services/manifest.js:213 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/services/manifest.js:149 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressdist/orchestrator/index.js:3616 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

URL with embedded credentialsdist/services/manifest.js:349 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

Outbound HTTP to raw IP addressscripts/smoke-install.mjs:28 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addresspackage.json:36 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

File permission modification commandscripts/test-packs.sh:34 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Outbound HTTP to raw IP addressdist/services/ui-bridge.js:2375 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressscripts/test-generate.mjs:15 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressdist/transport/cli.js:231 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressdist/utils/origin.js:3 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressscripts/test-agent.mjs:25 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addresspackage.json:37 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressscripts/test-local-llm.mjs:8 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressscripts/verify-render.mjs:10 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressscripts/test-local-llm.mjs:19 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

File permission modification commanddist/utils/logger.js:54 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packagedist/tools/manifest.js:16 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressscripts/test-generate.mjs:7 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Hidden zero-width characters detectedscripts/sync-agents.mjs:20 · Hidden zero-width characters detected — may conceal content

AST07

MEDIUM

URL using raw IP addressdist/config.js:234 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressREADME.md:636 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/orchestrator/index.js:2196 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)dist/orchestrator/index.js:2062 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressREADME.md:692 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/orchestrator/index.js:2039 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addressscripts/verify-render.mjs:26 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/orchestrator/index.js:2009 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressdist/orchestrator/index.js:1418 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

Remote installer piped to shelldist/orchestrator/index.js:4321 · Remote installer piped to shell

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/orchestrator/index.js:2188 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressdist/services/ui-bridge.js:2248 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/orchestrator/index.js:1424 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/orchestrator/index.js:1061 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/config.js:746 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/orchestrator/index.js:2174 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressdist/comfyui/fetch.js:187 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/orchestrator/index.js:3616 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addresspackage.json:36 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressscripts/test-generate.mjs:7 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/utils/origin.js:3 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/transport/cli.js:231 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressscripts/test-local-llm.mjs:8 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/services/ui-bridge.js:2375 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressscripts/test-agent.mjs:25 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addresspackage.json:37 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressscripts/test-generate.mjs:15 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressscripts/smoke-install.mjs:28 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressscripts/verify-render.mjs:10 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressscripts/test-local-llm.mjs:19 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressscripts/verify-render.mjs:26 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionscripts/verify-render.mjs:30 · File type combined with upload action — agent may exfiltrate local data files

AST07