OpenSwarm AI Agent

Findings (102)

• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  exfiltration issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Contacts a hard-coded IP address instead of a domain name.

  src/sandboxExecutor/bubblewrap.ts:474
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  quinn-proto@0.11.16: 5 known vulnerabilities

  RUSTSEC-2026-0338, RUSTSEC-2026-0339, RUSTSEC-2026-0340, RUSTSEC-2026-0341, RUSTSEC-2026-0342

  desktop/Cargo.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @fastify/busboy@3.2.0: 3 known vulnerabilities

  GHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx, GHSA-xjh9-v7x6-24jw

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @graphql-tools/utils@10.11.0: 2 known vulnerabilities

  GHSA-7mx3-vvmw-hjmv, GHSA-c4qx-w738-7hr3

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @graphql-tools/utils@11.0.0: 2 known vulnerabilities

  GHSA-7mx3-vvmw-hjmv, GHSA-c4qx-w738-7hr3

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/sdk@1.30.0: 6 known vulnerabilities

  GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  body-parser@2.3.0: 1 known vulnerability

  GHSA-27r3-jxmh-p828

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  sharp@0.35.4: 1 known vulnerability

  GHSA-wq5f-xc86-pv6w

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  source-map-js@1.2.1: 1 known vulnerability

  GHSA-68fv-2mgg-jv7q

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  undici@6.28.0: 8 known vulnerabilities

  GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-4qv8-2p9j-2685, GHSA-9fm3-97px-rjf6, GHSA-qrxm-fqhp-jwvm +3 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  vite@8.0.16: 5 known vulnerabilities

  GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@4.3.6: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Install contacted hosts other than package registries

  api.nuget.org
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/adapters/tools.test.ts:861
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/agents/pairWebhook.test.ts:45
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.

  src/agents/worker.test.ts:249
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/cli/daemonEndpoint.test.ts:153
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/mcp/humanSurfacePolicy.test.ts:133
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/mcp/humanSurfacePolicy.test.ts:135
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/mcp/humanSurfacePolicy.test.ts:137
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/mcp/humanSurfacePolicy.test.ts:139
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/mcp/humanSurfacePolicy.test.ts:141
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/mcp/humanSurfacePolicy.test.ts:143
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/mcp/humanSurfacePolicy.test.ts:145
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/mcp/humanSurfacePolicy.test.ts:154
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/mcp/mcpClient.test.ts:257
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/mcp/mcpClient.test.ts:258
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/mcp/mcpClient.test.ts:328
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/mcp/mcpClient.test.ts:343
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notify/notifier.test.ts:71
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:124
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:129
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:130
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:138
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:154
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:155
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:159
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:160
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:164
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:165
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:169
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:170
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:204
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:205
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:206
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:207
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notify/notifier.test.ts:211
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:212
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/notify/notifier.test.ts:229
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:230
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:256
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:257
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:261
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:262
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:266
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:267
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:271
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:272
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:276
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:277
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:281
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:295
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/notify/notifier.test.ts:305
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.

  src/sandboxExecutor/deployment.test.ts:40
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.

  src/sandboxExecutor/deployment.test.ts:40
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/support/webAuth.test.ts:92
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/support/webAuth.test.ts:93
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/support/webAuth.test.ts:94
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/support/webAuth.test.ts:96
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/support/webAuth.test.ts:97
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/support/webAuth.test.ts:142
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/support/webAuth.test.ts:326
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/support/webAuth.test.ts:423
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  2 matches in this file

  src/registry/bsDetector.test.ts:52
• lowLow. Minor, or common in normal tools. Shown for information.
  glib@0.18.5: 1 known vulnerability

  RUSTSEC-2024-0429

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  proc-macro-error@1.0.4: 1 known vulnerability

  RUSTSEC-2024-0370

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  rustls@0.23.43: 4 known vulnerabilities

  RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  rustls-webpki@0.103.13: 1 known vulnerability

  RUSTSEC-2026-0382

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  tokio@1.53.1: 1 known vulnerability

  RUSTSEC-2026-0386

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  unic-char-property@0.9.0: 1 known vulnerability

  RUSTSEC-2025-0081

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  unic-char-range@0.9.0: 1 known vulnerability

  RUSTSEC-2025-0075

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  unic-common@0.9.0: 1 known vulnerability

  RUSTSEC-2025-0080

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  unic-ucd-ident@0.9.0: 1 known vulnerability

  RUSTSEC-2025-0100

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  unic-ucd-version@0.9.0: 1 known vulnerability

  RUSTSEC-2025-0098

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  webpki-roots@1.0.9: 1 known vulnerability

  RUSTSEC-2026-0381

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  zbus_names@4.3.4: 1 known vulnerability

  RUSTSEC-2026-0371

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  zvariant@5.13.1: 1 known vulnerability

  RUSTSEC-2026-0370

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  zvariant_derive@5.13.1: 1 known vulnerability

  RUSTSEC-2026-0372

  desktop/Cargo.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @hono/node-server@2.1.0: 1 known vulnerability

  GHSA-rmxm-3fg6-px4f

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  @vitest/mocker@4.1.8: 2 known vulnerabilities

  GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  fast-uri@3.1.7: 5 known vulnerabilities

  GHSA-333x-w4r6-6crp, GHSA-hrr3-gc8f-f4qj, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  hono@4.13.8: 1 known vulnerability

  GHSA-5r4p-p66f-jhc7

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  ip-address@10.4.0: 5 known vulnerabilities

  GHSA-2vr4-cq9g-pvrc, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  qs@6.16.0: 1 known vulnerability

  GHSA-6pq8-jhm2-2vcw

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  vitest@4.1.8: 1 known vulnerability

  GHSA-82fw-gwwq-j7x9

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)

Network activity