@delorenj/pjangler flagged credential stealer (npm) — Cremit · NHI Credential Stealer Index

/incidentsfield log

@delorenj/pjangler flagged credential stealer (npm) — Cremit · NHI Credential Stealer Index

--- install scripts ---
### prepublishOnly
npm run build



--- package/templates/hermes-agent/install-local.sh (excerpt) ---
#!/usr/bin/env sh
# Least-friction local install of Hermes PM + Scrum Master roles into a project.
#
# Local-only: no GitHub runtime repo, no Telegram, no NATS/BloodBank, no Plane
# project creation. It binds the Scrum Master to a ticket board you already have.
# Works on macOS (launchd) and Linux (systemd).
#
# One-liner (from anywhere inside the target project):
#   curl -fsSL https://raw.githubusercontent.com/delorenj/hermes-agent-template/main/install-local.sh | sh
#
# Or from a checkout:
#   sh /path/to/hermes-agent-template/install-local.sh
#
# Environment overrides (skip the prompts):
#   HAT_REPO=<name>            project/repo name (default: basename of CWD)
#   HAT_PROVIDER=linear|plane|trello   (default: plane)
#   HAT_ROLES="pm scrum-master"        roles to install (default: both)
#   HAT_DRY_RUN=1              print actions, change nothing
#   Provider creds: LINEAR_API_KEY | PLANE_API_KEY+PLANE_BASE | TRELLO_KEY+TRELLO_TOKEN
set -eu

say()  { printf '\033[36m%s\033[0m\n' "$*"; }
warn() { printf '\033[33m%s\033[0m\n' "$*" >&2; }
die()  { printf '\033[31m%s\033[0m\n' "$*" >&2; exit 1; }
run()  { if [ "${HAT_DRY_RUN:-0}" = "1" ]; then printf '  [dry-run] %s\n' "$*"; else eval "$*"; fi; }
ask()  { # ask VAR "prompt" "default"
  eval "_cur=\${$1:-}"; [ -n "${_cur:-}" ] && return 0
  printf '%s [%s]: ' "$2" "${3:-}" >&2; read -r _ans || _ans=""
  eval "$1=\"\${_ans:-$3}\""
}

OS="$(uname -s)"
PROJECT_DIR="$(pwd)"
[ -d "$PROJECT_DIR/.git" ] || warn "Note: $PROJECT_DIR i

--- package/templates/hermes-agent/template/.scripts/10-hermes-profile.sh (excerpt) ---
#!/usr/bin/env bash
# Create the per-agent Hermes profile. Config inherits explicitly from the
# default fleet profile; secrets and runtime state stay profile-local.
# shellcheck source=_lib.sh
source "$(dirname "$0")/_lib.sh"
load_role_env

already_done 10-hermes-profile && { log "[10] profile already created — skipping"; exit 0; }

log "[10] creating hermes profile: $PROFILE_NAME"
PROFILE_HOME="$(profile_home)"

# Set repo path to directory where .git is
REPO_PATH="$(cd "$ROLE_DIR" && git rev-parse --show-toplevel 2>/dev/null || echo "$ROLE_DIR")"

if [[ -d "$PROFILE_HOME" ]]; then
  log "    profile dir already exists; reusing"
else
  env HERMES_HOME="$FLEET_HOME" "$HERMES_BIN" profile create \
    "$PROFILE_NAME" --inherit-config --no-alias
fi

# Existing profiles from older template runs may not have the inheritance
# metadata yet. Make the operation idempotent and preserve unrelated
# profile.yaml metadata such as descriptions.
env HERMES_HOME="$FLEET_HOME" "$HERMES_BIN" profile config-inherit \
  "$PROFILE_NAME" --from default

# Copy local profile assets from the default profile without copying config or
# credentials. Only config.yaml inherits; these directories remain local state.
log "    mirroring local skills, plugins, hooks from default profile"
for sub in skills plugins hooks cron skins; do
  src="$FLEET_HOME/$sub"
  dst="$PROFILE_HOME/$sub"
  if [[ -d "$src" && "$src" != "$PROFILE_HOME"* ]]; then
    mkdir -p "$dst"
    # cp -R, dereferencing symlinks; -u to p

--- package/templates/hermes-agent/template/.scripts/42-ticket-provider.sh (excerpt) ---
#!/usr/bin/env bash
# Bind this agent to the repo's ONE ticket board.
#
# Source of truth is the repo-root .project.json `ticket_provider` block
# (written by the CommonProject base template). The model is:
#   ONE board per repo — the PM owns it, the Scrum Master sentinel watches it.
# So we never mint a per-agent, role-suffixed board ("Foo PM" / "Foo Scrum
# Master"). Instead:
#   1. If .project.json already names a board  -> BIND to it (no creation).
#   2. Otherwise (hermes run on a repo with no CommonProject board yet)
#      -> create ONE repo-named board and write it back into .project.json so
#         it becomes the SOT for every agent in this repo.
# Either way we register this agent under .project.json `agents` and mirror the
# binding into role.yaml for back-compat (80-registry.sh / 99-summary.sh).
# shellcheck source=_lib.sh
source "$(dirname "$0")/_lib.sh"
load_role_env
# shellcheck source=lib/ticket-provider.sh
source "$(dirname "$0")/lib/ticket-provider.sh"

already_done 42-ticket-provider && { log "[42] ticket provider already set up — skipping"; exit 0; }

# Locate the repo-root .project.json (the SOT).
REPO_ROOT="$(project_repo_path 2>/dev/null || true)"
[ -n "$REPO_ROOT" ] || REPO_ROOT="$(cd "$ROLE_DIR/../../.." 2>/dev/null && pwd)"
PROJECT_JSON="$REPO_ROOT/.project.json"
ROLE_DIR_REL="${ROLE_DIR#"$REPO_ROOT"/}"

# pj <dotted.key> — read a string value from .project.json (empty if absent).
pj() {
  [ -f "$PROJECT_JSON" ] || { printf ''; return 0; }
  pytho

@1.1.3·2026-06-05·AUTO-PUBLISHED·publisher: lasertoast

heuristic 40/100

static flags 10

llm malicious (0.95) via fast-track

new-publisher:0dfirst-version-of-packagereads-env-varsreads-system-infocurl-pipe-bashpy-pip-install-runtimereads-chromium-credsreads-slack-tokensreads-discord-tokensreads-homedirchild-process-spawnpy-urllib-request

→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.

// offending code· 3 files flaggedpatterns: 10

--- install scripts ---
### prepublishOnly
npm run build



--- package/templates/hermes-agent/install-local.sh (excerpt) ---
#!/usr/bin/env sh
# Least-friction local install of Hermes PM + Scrum Master roles into a project.
#
# Local-only: no GitHub runtime repo, no Telegram, no NATS/BloodBank, no Plane
# project creation. It binds the Scrum Master to a ticket board you already have.
# Works on macOS (launchd) and Linux (systemd).
#
# One-liner (from anywhere inside the target project):
#   curl -fsSL https://raw.githubusercontent.com/delorenj/hermes-agent-template/main/install-local.sh | sh
#
# Or from a checkout:
#   sh /path/to/hermes-agent-template/install-local.sh
#
# Environment overrides (skip the prompts):
#   HAT_REPO=<name>            project/repo name (default: basename of CWD)
#   HAT_PROVIDER=linear|plane|trello   (default: plane)
#   HAT_ROLES="pm scrum-master"        roles to install (default: both)
#   HAT_DRY_RUN=1              print actions, change nothing
#   Provider creds: LINEAR_API_KEY | PLANE_API_KEY+PLANE_BASE | TRELLO_KEY+TRELLO_TOKEN
set -eu

say()  { printf '\033[36m%s\033[0m\n' "$*"; }
warn() { printf '\033[33m%s\033[0m\n' "$*" >&2; }
die()  { printf '\033[31m%s\033[0m\n' "$*" >&2; exit 1; }
run()  { if [ "${HAT_DRY_RUN:-0}" = "1" ]; then printf '  [dry-run] %s\n' "$*"; else eval "$*"; fi; }
ask()  { # ask VAR "prompt" "default"
  eval "_cur=\${$1:-}"; [ -n "${_cur:-}" ] && return 0
  printf '%s [%s]: ' "$2" "${3:-}" >&2; read -r _ans || _ans=""
  eval "$1=\"\${_ans:-$3}\""
}

OS="$(uname -s)"
PROJECT_DIR="$(pwd)"
[ -d "$PROJECT_DIR/.git" ] || warn "Note: $PROJECT_DIR i

--- package/templates/hermes-agent/template/.scripts/10-hermes-profile.sh (excerpt) ---
#!/usr/bin/env bash
# Create the per-agent Hermes profile. Config inherits explicitly from the
# default fleet profile; secrets and runtime state stay profile-local.
# shellcheck source=_lib.sh
source "$(dirname "$0")/_lib.sh"
load_role_env

already_done 10-hermes-profile && { log "[10] profile already created — skipping"; exit 0; }

log "[10] creating hermes profile: $PROFILE_NAME"
PROFILE_HOME="$(profile_home)"

# Set repo path to directory where .git is
REPO_PATH="$(cd "$ROLE_DIR" && git rev-parse --show-toplevel 2>/dev/null || echo "$ROLE_DIR")"

if [[ -d "$PROFILE_HOME" ]]; then
  log "    profile dir already exists; reusing"
else
  env HERMES_HOME="$FLEET_HOME" "$HERMES_BIN" profile create \
    "$PROFILE_NAME" --inherit-config --no-alias
fi

# Existing profiles from older template runs may not have the inheritance
# metadata yet. Make the operation idempotent and preserve unrelated
# profile.yaml metadata such as descriptions.
env HERMES_HOME="$FLEET_HOME" "$HERMES_BIN" profile config-inherit \
  "$PROFILE_NAME" --from default

# Copy local profile assets from the default profile without copying config or
# credentials. Only config.yaml inherits; these directories remain local state.
log "    mirroring local skills, plugins, hooks from default profile"
for sub in skills plugins hooks cron skins; do
  src="$FLEET_HOME/$sub"
  dst="$PROFILE_HOME/$sub"
  if [[ -d "$src" && "$src" != "$PROFILE_HOME"* ]]; then
    mkdir -p "$dst"
    # cp -R, dereferencing symlinks; -u to p

--- package/templates/hermes-agent/template/.scripts/42-ticket-provider.sh (excerpt) ---
#!/usr/bin/env bash
# Bind this agent to the repo's ONE ticket board.
#
# Source of truth is the repo-root .project.json `ticket_provider` block
# (written by the CommonProject base template). The model is:
#   ONE board per repo — the PM owns it, the Scrum Master sentinel watches it.
# So we never mint a per-agent, role-suffixed board ("Foo PM" / "Foo Scrum
# Master"). Instead:
#   1. If .project.json already names a board  -> BIND to it (no creation).
#   2. Otherwise (hermes run on a repo with no CommonProject board yet)
#      -> create ONE repo-named board and write it back into .project.json so
#         it becomes the SOT for every agent in this repo.
# Either way we register this agent under .project.json `agents` and mirror the
# binding into role.yaml for back-compat (80-registry.sh / 99-summary.sh).
# shellcheck source=_lib.sh
source "$(dirname "$0")/_lib.sh"
load_role_env
# shellcheck source=lib/ticket-provider.sh
source "$(dirname "$0")/lib/ticket-provider.sh"

already_done 42-ticket-provider && { log "[42] ticket provider already set up — skipping"; exit 0; }

# Locate the repo-root .project.json (the SOT).
REPO_ROOT="$(project_repo_path 2>/dev/null || true)"
[ -n "$REPO_ROOT" ] || REPO_ROOT="$(cd "$ROLE_DIR/../../.." 2>/dev/null && pwd)"
PROJECT_JSON="$REPO_ROOT/.project.json"
ROLE_DIR_REL="${ROLE_DIR#"$REPO_ROOT"/}"

# pj <dotted.key> — read a string value from .project.json (empty if absent).
pj() {
  [ -f "$PROJECT_JSON" ] || { printf ''; return 0; }
  pytho

// install scripts

### prepublishOnly
npm run build

// package/templates/hermes-agent/install-local.sh (excerpt)

#!/usr/bin/env sh
# Least-friction local install of Hermes PM + Scrum Master roles into a project.
#
# Local-only: no GitHub runtime repo, no Telegram, no NATS/BloodBank, no Plane
# project creation. It binds the Scrum Master to a ticket board you already have.
# Works on macOS (launchd) and Linux (systemd).
#
# One-liner (from anywhere inside the target project):
#   curl -fsSL https://raw.githubusercontent.com/delorenj/hermes-agent-template/main/install-local.sh | sh
#
# Or from a checkout:
#   sh /path/to/hermes-agent-template/install-local.sh
#
# Environment overrides (skip the prompts):
#   HAT_REPO=<name>            project/repo name (default: basename of CWD)
#   HAT_PROVIDER=linear|plane|trello   (default: plane)
#   HAT_ROLES="pm scrum-master"        roles to install (default: both)
#   HAT_DRY_RUN=1              print actions, change nothing
#   Provider creds: LINEAR_API_KEY | PLANE_API_KEY+PLANE_BASE | TRELLO_KEY+TRELLO_TOKEN
set -eu

say()  { printf '\033[36m%s\033[0m\n' "$*"; }
warn() { printf '\033[33m%s\033[0m\n' "$*" >&2; }
die()  { printf '\033[31m%s\033[0m\n' "$*" >&2; exit 1; }
run()  { if [ "${HAT_DRY_RUN:-0}" = "1" ]; then printf '  [dry-run] %s\n' "$*"; else eval "$*"; fi; }
ask()  { # ask VAR "prompt" "default"
  eval "_cur=\${$1:-}"; [ -n "${_cur:-}" ] && return 0
  printf '%s [%s]: ' "$2" "${3:-}" >&2; read -r _ans || _ans=""
  eval "$1=\"\${_ans:-$3}\""
}

OS="$(uname -s)"
PROJECT_DIR="$(pwd)"
[ -d "$PROJECT_DIR/.git" ] || warn "Note: $PROJECT_DIR i

// package/templates/hermes-agent/template/.scripts/10-hermes-profile.sh (excerpt)

#!/usr/bin/env bash
# Create the per-agent Hermes profile. Config inherits explicitly from the
# default fleet profile; secrets and runtime state stay profile-local.
# shellcheck source=_lib.sh
source "$(dirname "$0")/_lib.sh"
load_role_env

already_done 10-hermes-profile && { log "[10] profile already created — skipping"; exit 0; }

log "[10] creating hermes profile: $PROFILE_NAME"
PROFILE_HOME="$(profile_home)"

# Set repo path to directory where .git is
REPO_PATH="$(cd "$ROLE_DIR" && git rev-parse --show-toplevel 2>/dev/null || echo "$ROLE_DIR")"

if [[ -d "$PROFILE_HOME" ]]; then
  log "    profile dir already exists; reusing"
else
  env HERMES_HOME="$FLEET_HOME" "$HERMES_BIN" profile create \
    "$PROFILE_NAME" --inherit-config --no-alias
fi

# Existing profiles from older template runs may not have the inheritance
# metadata yet. Make the operation idempotent and preserve unrelated
# profile.yaml metadata such as descriptions.
env HERMES_HOME="$FLEET_HOME" "$HERMES_BIN" profile config-inherit \
  "$PROFILE_NAME" --from default

# Copy local profile assets from the default profile without copying config or
# credentials. Only config.yaml inherits; these directories remain local state.
log "    mirroring local skills, plugins, hooks from default profile"
for sub in skills plugins hooks cron skins; do
  src="$FLEET_HOME/$sub"
  dst="$PROFILE_HOME/$sub"
  if [[ -d "$src" && "$src" != "$PROFILE_HOME"* ]]; then
    mkdir -p "$dst"
    # cp -R, dereferencing symlinks; -u to p

// package/templates/hermes-agent/template/.scripts/42-ticket-provider.sh (excerpt)

#!/usr/bin/env bash
# Bind this agent to the repo's ONE ticket board.
#
# Source of truth is the repo-root .project.json `ticket_provider` block
# (written by the CommonProject base template). The model is:
#   ONE board per repo — the PM owns it, the Scrum Master sentinel watches it.
# So we never mint a per-agent, role-suffixed board ("Foo PM" / "Foo Scrum
# Master"). Instead:
#   1. If .project.json already names a board  -> BIND to it (no creation).
#   2. Otherwise (hermes run on a repo with no CommonProject board yet)
#      -> create ONE repo-named board and write it back into .project.json so
#         it becomes the SOT for every agent in this repo.
# Either way we register this agent under .project.json `agents` and mirror the
# binding into role.yaml for back-compat (80-registry.sh / 99-summary.sh).
# shellcheck source=_lib.sh
source "$(dirname "$0")/_lib.sh"
load_role_env
# shellcheck source=lib/ticket-provider.sh
source "$(dirname "$0")/lib/ticket-provider.sh"

already_done 42-ticket-provider && { log "[42] ticket provider already set up — skipping"; exit 0; }

# Locate the repo-root .project.json (the SOT).
REPO_ROOT="$(project_repo_path 2>/dev/null || true)"
[ -n "$REPO_ROOT" ] || REPO_ROOT="$(cd "$ROLE_DIR/../../.." 2>/dev/null && pwd)"
PROJECT_JSON="$REPO_ROOT/.project.json"
ROLE_DIR_REL="${ROLE_DIR#"$REPO_ROOT"/}"

# pj <dotted.key> — read a string value from .project.json (empty if absent).
pj() {
  [ -f "$PROJECT_JSON" ] || { printf ''; return 0; }
  pytho