Phantom AI Agent

Findings (82)

• highHigh. Something risky that needs a close look before you install.
  dropper issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dropper issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dropper issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dropper issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dropper issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dropper issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Contacts a hard-coded IP address instead of a domain name.

  src/config/identity-fetcher.ts:32
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Contacts a hard-coded IP address instead of a domain name.

  src/config/loader.ts:43
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Contacts a hard-coded IP address instead of a domain name.

  src/config/metadata-fetcher.ts:3
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Contacts a hard-coded IP address instead of a domain name.

  src/config/schemas.ts:75
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Contacts a hard-coded IP address instead of a domain name.

  src/config/schemas.ts:79
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Contacts a hard-coded IP address instead of a domain name.

  src/email/key-fetcher.ts:40
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Contacts a hard-coded IP address instead of a domain name.

  src/ui/auth-magic.ts:18
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Contacts a hard-coded IP address instead of a domain name.

  src/ui/auth-magic.ts:72
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/sdk@1.28.0: 6 known vulnerabilities

  GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  axios@1.13.6: 34 known vulnerabilities

  GHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3pq3-5fj3-cg6v, GHSA-3w6x-2g7m-8v23 +29 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  body-parser@2.2.2: 2 known vulnerabilities

  GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  fast-uri@3.1.0: 12 known vulnerabilities

  GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  form-data@4.0.5: 1 known vulnerability

  GHSA-hmw2-7cc7-3qxx

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  hono@4.12.9: 32 known vulnerabilities

  GHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-458j-xx4x-4375, GHSA-54fx-42gc-7vw4 +27 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  ip-address@10.1.0: 6 known vulnerabilities

  GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  nanoid@3.3.11: 6 known vulnerabilities

  GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +1 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  nodemailer@8.0.4: 19 known vulnerabilities

  GHSA-268h-hp4c-crq3, GHSA-2x7j-588g-ccc2, GHSA-39m8-27wv-hr27, GHSA-4ffr-jq9g-5ffx, GHSA-4g23-2xm8-66gc +14 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  path-to-regexp@8.3.0: 2 known vulnerabilities

  GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  postcss@8.5.9: 4 known vulnerabilities

  GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  source-map-js@1.2.1: 2 known vulnerabilities

  GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  uuid@10.0.0: 1 known vulnerability

  GHSA-w5hq-g745-h8pq

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  vite@8.0.8: 7 known vulnerabilities

  GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff, GHSA-r825-w8mm-5pxw +2 more

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  ws@8.20.0: 2 known vulnerabilities

  GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@3.25.76: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  browserslist@4.28.2: 2 known vulnerabilities

  GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx

  chat-ui/bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  postcss@8.5.10: 3 known vulnerabilities

  GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849

  chat-ui/bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  react-router@7.14.1: 8 known vulnerabilities

  GHSA-337j-9hxr-rhxg, GHSA-49rj-9fvp-4h2h, GHSA-84g9-w2xq-vcv6, GHSA-8x6r-g9mw-2r78, GHSA-chx6-hx7r-mcp5 +3 more

  chat-ui/bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  vite@5.4.21: 8 known vulnerabilities

  GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +3 more

  chat-ui/bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  vite@6.4.2: 7 known vulnerabilities

  GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff, GHSA-r825-w8mm-5pxw +2 more

  chat-ui/bun.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Install or build failed in a clean environment

  n incorrect (and potentially broken) dependency resolution. npm error npm error npm error For a full report see: npm error /tmp/home/.npm/_logs/2026-11-05T19_27_20_728Z-eresolve-report.txt npm error A complete log of this run can be found in: /tmp/home/.npm/_logs/2026-11-05T19_27_20_728Z-debug-0.log
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/channels/__tests__/slack-introduction.test.ts:44
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/channels/__tests__/slack-introduction.test.ts:374
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/channels/__tests__/slack-introduction.test.ts:397
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/config/__tests__/identity-fetcher.test.ts:23
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/skills/__tests__/linter.test.ts:45
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/skills/__tests__/linter.test.ts:46
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/tenancy/__tests__/heartbeat.test.ts:70
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/tenancy/__tests__/heartbeat.test.ts:79
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/tenancy/__tests__/heartbeat.test.ts:94
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/tenancy/__tests__/heartbeat.test.ts:101
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/tenancy/__tests__/heartbeat.test.ts:111
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/tenancy/__tests__/heartbeat.test.ts:123
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/tenancy/__tests__/heartbeat.test.ts:147
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/tenancy/__tests__/heartbeat.test.ts:163
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/tenancy/__tests__/heartbeat.test.ts:175
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/ui/__tests__/auth-magic.test.ts:6
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/ui/__tests__/auth-magic.test.ts:34
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/utils/__tests__/url-validator.test.ts:8
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/utils/__tests__/url-validator.test.ts:33
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/utils/__tests__/url-validator.test.ts:34
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/utils/__tests__/url-validator.test.ts:43
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/utils/__tests__/url-validator.test.ts:44
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/utils/__tests__/url-validator.test.ts:98
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  src/channels/__tests__/slack-channel-factory.test.ts:80
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: aws-access-token

  2 matches in this file

  research/chat-experience/phase-10i-transcript-recovery-final-re-review.md:24
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: aws-access-token

  2 matches in this file

  research/chat-experience/phase-10i-transcript-recovery-re-review.md:22
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: aws-access-token

  research/chat-experience/phase-10i-transcript-recovery-review.md:36
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: aws-access-token

  4 matches in this file

  src/chat/__tests__/transcript-search.test.ts:152
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  src/channels/__tests__/slack-gateway-verifier.test.ts:11
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  src/channels/__tests__/slack-http-receiver.test.ts:88
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  src/chat/__tests__/run-timeline.test.ts:402
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: private-key

  src/chat/__tests__/run-timeline.test.ts:429
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  2 matches in this file

  src/chat/__tests__/run-timeline.test.ts:402
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  src/ui/api/__tests__/phantom-config.test.ts:61
• lowLow. Minor, or common in normal tools. Shown for information.
  @hono/node-server@1.19.11: 3 known vulnerabilities

  GHSA-92pp-h63x-v22m, GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  follow-redirects@1.15.11: 1 known vulnerability

  GHSA-r4q5-vmmm-2653

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  qs@6.15.0: 4 known vulnerabilities

  GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx

  bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @babel/core@7.29.0: 1 known vulnerability

  GHSA-4x5r-pxfx-6jf8

  chat-ui/bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  @vitest/mocker@2.1.9: 2 known vulnerabilities

  GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8

  chat-ui/bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  baseline-browser-mapping@2.10.19: 1 known vulnerability

  GHSA-w5vr-8v7q-w6rv

  chat-ui/bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  esbuild@0.21.5: 1 known vulnerability

  GHSA-67mh-4wv8-2f99

  chat-ui/bun.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)

Network activity