npm JavaScript analyzed 0.5.0

@hasna/logs

v0.5.0

npm

Log aggregation + browser script + headless page scanner + performance monitoring for AI agents

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · streamable-http · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals npm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.5.0 · analyzer v33 · 1d ago

dynamic code execution new Function() package/dist/mcp/index.js :2929 const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
suspicious endpoint 169.254.169.254 (cloud metadata) package/dist/index-cymcm9ev.js :172 Endpoint2["IPv4"] = "http://169.254.169.254";
credential in logs credential in log package/dist/cli/index.js :4696 console.log(`api_key_present: ${report.api_key_present}`);

code evidence v0.5.0 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 130

fs package/dist/cli/index.js :2118 import { readFileSync } from "fs";
fs package/dist/index-3st0407m.js :70 import { promises as fsPromises } from "fs";
fs package/dist/index-e7kh6bb3.js :1333 } from "fs";
fs package/dist/index-fjy51g0k.js :5 import { closeSync, fstatSync, openSync, readFileSync } from "fs";
fs package/dist/index-kw4wqnd9.js :3 import { existsSync, readFileSync } from "fs";
fs package/dist/index-mghtz8fa.js :21 import { promises as fs } from "fs";
fs package/dist/index-ng7kxv1p.js :21 import fs from "fs/promises";
fs package/dist/index-q4bcqk91.js :739 import { readFileSync } from "fs";
fs package/dist/index-szck1fdc.js :15 import { readFileSync } from "fs";
fs package/dist/mcp/index.js :6972 import { existsSync, mkdirSync } from "fs";

shell package/dist/cli/index.js :2134 import { spawn } from "child_process";
shell package/dist/index-e7kh6bb3.js :16843 import { execFileSync } from "child_process";
shell package/dist/index-fjy51g0k.js :4 import { spawnSync } from "child_process";
shell package/dist/index-kakz891q.js :17 import { exec } from "child_process";
shell package/dist/mcp/index.js :10993 exec(sql) {

net package/dist/api.js :143 const baseFetch = clientOptions.fetch ?? ((input, init) => fetch(input, init));
net package/dist/cli/index.js :2132 import { isIP } from "net";
net package/dist/http-zhjw9wpf.js :123 import { createServer } from "http";
net package/dist/index-cymcm9ev.js :32 import node_http from "http";
net package/dist/index-e7kh6bb3.js :17079 await fetch(rule.webhook_url, {
net package/dist/index-fjy51g0k.js :3 import { isIP } from "net";
net package/dist/index.js :44 const res = await fetch(`${this.url}/api/logs`, {
net package/dist/server/index.js :973 return this.fetch(requestInit ? new Request(input, requestInit) : input, Env, executionCtx);

secrets package/dist/cli/index.js :4820 const token = opts.token || process.env.HASNA_LOGS_API_TOKEN || process.env.LOGS_API_TOKEN;
secrets package/dist/index-e7kh6bb3.js :21015 const secret = process.env.HASNA_LOGS_SECRET_KEY?.trim() || process.env.LOGS_SECRET_KEY?.trim();
secrets package/dist/server/index.js :1885 const token = process.env.HASNA_LOGS_API_TOKEN?.trim() || process.env.LOGS_API_TOKEN?.trim();

postinstall package/package.json :47 install -d -m 700 "$HOME/.hasna/logs" 2>/dev/null || true
prepack package/package.json :48 bun run build

show 6 more