@iola_adm/iola-cli flagged credential stealer (npm) — Cremit

@iola_adm/iola-cli flagged credential stealer (npm) — Cremit · NHI Credential Stealer Index

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.67",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "installer:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File ./installer/windows/scripts/build-installer.ps1",
    "installer:windows:premium": "pwsh -NoProfile -ExecutionPolicy Bypass -File ./installer/windows/premium/build-premium-installer.ps1",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "SECURITY.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { createHash, randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const YAKUNIN_ROUTER_BASE_URL = process.env.IOLA_YAKUNIN_ROUTER_BASE_URL || `${API_BASE_URL}/pay/yakunin-router`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = getIolaHomeDir();
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.66·2026-06-04·AUTO-PUBLISHED·publisher: iola_adm

heuristic 97/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:4new-publisher:9dmature-packagehas-source-repopublisher-version-pump:28public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.66",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "installer:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File ./installer/windows/scripts/build-installer.ps1",
    "installer:windows:premium": "pwsh -NoProfile -ExecutionPolicy Bypass -File ./installer/windows/premium/build-premium-installer.ps1",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "SECURITY.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { createHash, randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const YAKUNIN_ROUTER_BASE_URL = process.env.IOLA_YAKUNIN_ROUTER_BASE_URL || `${API_BASE_URL}/pay/yakunin-router`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = getIolaHomeDir();
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.65·2026-06-04·AUTO-PUBLISHED·publisher: iola_adm

heuristic 97/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:3new-publisher:9dmature-packagehas-source-repopublisher-version-pump:27public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.65",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "installer:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File ./installer/windows/scripts/build-installer.ps1",
    "installer:windows:premium": "pwsh -NoProfile -ExecutionPolicy Bypass -File ./installer/windows/premium/build-premium-installer.ps1",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "SECURITY.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { createHash, randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const YAKUNIN_ROUTER_BASE_URL = process.env.IOLA_YAKUNIN_ROUTER_BASE_URL || `${API_BASE_URL}/pay/yakunin-router`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = getIolaHomeDir();
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.64·2026-06-04·AUTO-PUBLISHED·publisher: iola_adm

heuristic 67/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallnew-publisher:9dmature-packagehas-source-repopublisher-version-pump:26public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.64",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "installer:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File ./installer/windows/scripts/build-installer.ps1",
    "installer:windows:premium": "pwsh -NoProfile -ExecutionPolicy Bypass -File ./installer/windows/premium/build-premium-installer.ps1",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "SECURITY.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { createHash, randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const YAKUNIN_ROUTER_BASE_URL = process.env.IOLA_YAKUNIN_ROUTER_BASE_URL || `${API_BASE_URL}/pay/yakunin-router`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = getIolaHomeDir();
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.63·2026-06-04·AUTO-PUBLISHED·publisher: iola_adm

heuristic 67/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallnew-publisher:9dmature-packagehas-source-repopublisher-version-pump:25public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.63",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "installer:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File ./installer/windows/scripts/build-installer.ps1",
    "installer:windows:premium": "pwsh -NoProfile -ExecutionPolicy Bypass -File ./installer/windows/premium/build-premium-installer.ps1",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "SECURITY.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { createHash, randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const YAKUNIN_ROUTER_BASE_URL = process.env.IOLA_YAKUNIN_ROUTER_BASE_URL || `${API_BASE_URL}/pay/yakunin-router`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = getIolaHomeDir();
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.60·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 97/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:7new-publisher:8dmature-packagehas-source-repopublisher-version-pump:23public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.60",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "SECURITY.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { createHash, randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const YAKUNIN_ROUTER_BASE_URL = process.env.IOLA_YAKUNIN_ROUTER_BASE_URL || `${API_BASE_URL}/pay/yakunin-router`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json"

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.58·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 97/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:5new-publisher:8dmature-packagehas-source-repopublisher-version-pump:21public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.58",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "SECURITY.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { createHash, randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const YAKUNIN_ROUTER_BASE_URL = process.env.IOLA_YAKUNIN_ROUTER_BASE_URL || `${API_BASE_URL}/pay/yakunin-router`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json"

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.57·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 97/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:4new-publisher:8dmature-packagehas-source-repopublisher-version-pump:20public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.57",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "SECURITY.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { createHash, randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const YAKUNIN_ROUTER_BASE_URL = process.env.IOLA_YAKUNIN_ROUTER_BASE_URL || `${API_BASE_URL}/pay/yakunin-router`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json"

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.56·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 97/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:3new-publisher:8dmature-packagehas-source-repopublisher-version-pump:19public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.56",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "SECURITY.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { createHash, randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const YAKUNIN_ROUTER_BASE_URL = process.env.IOLA_YAKUNIN_ROUTER_BASE_URL || `${API_BASE_URL}/pay/yakunin-router`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json"

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.52·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 97/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:4new-publisher:8dmature-packagehas-source-repopublisher-version-pump:15public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.52",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { createHash, randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS_FILE = path.join(CONFIG_DIR, "secrets.json");
const DB_FILE = path.join(CONFIG_DIR, "iola.db");
c

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.51·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 97/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:3new-publisher:8dmature-packagehas-source-repopublisher-version-pump:14public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.51",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { createHash, randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS_FILE = path.join(CONFIG_DIR, "secrets.json");
const DB_FILE = path.join(CONFIG_DIR, "iola.db");
c

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.50·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 97/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:5new-publisher:8dmature-packagehas-source-repopublisher-version-pump:13public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.50",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS_FILE = path.join(CONFIG_DIR, "secrets.json");
const DB_FILE = path.join(CONFIG_DIR, "iola.db");
const DB_SCHE

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.49·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 97/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:4new-publisher:8dmature-packagehas-source-repopublisher-version-pump:12public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.49",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS_FILE = path.join(CONFIG_DIR, "secrets.json");
const DB_FILE = path.join(CONFIG_DIR, "iola.db");
const DB_SCHE

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.47·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 97/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:3new-publisher:8dmature-packagehas-source-repopublisher-version-pump:10public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.47",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS_FILE = path.join(CONFIG_DIR, "secrets.json");
const DB_FILE = path.join(CONFIG_DIR, "iola.db");
const DB_SCHE

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.46·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 97/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:3new-publisher:8dmature-packagehas-source-repopublisher-version-pump:9public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.46",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS_FILE = path.join(CONFIG_DIR, "secrets.json");
const DB_FILE = path.join(CONFIG_DIR, "iola.db");
const DB_SCHE

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.45·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 67/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallnew-publisher:8dmature-packagehas-source-repopublisher-version-pump:8public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.45",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS_FILE = path.join(CONFIG_DIR, "secrets.json");
const DB_FILE = path.join(CONFIG_DIR, "iola.db");
const DB_SCHE

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.42·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 97/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:5new-publisher:8dmature-packagehas-source-repopublisher-version-pump:6public-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.42",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS_FILE = path.join(CONFIG_DIR, "secrets.json");
const DB_FILE = path.join(CONFIG_DIR, "iola.db");
const DB_SCHE

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.41·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 85/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:5new-publisher:8dmature-packagehas-source-repopublic-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.41",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS_FILE = path.join(CONFIG_DIR, "secrets.json");
const DB_FILE = path.join(CONFIG_DIR, "iola.db");
const DB_SCHE

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.40·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 85/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallpublish-burst:4new-publisher:8dmature-packagehas-source-repopublic-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.40",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS_FILE = path.join(CONFIG_DIR, "secrets.json");
const DB_FILE = path.join(CONFIG_DIR, "iola.db");
const DB_SCHE

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.38·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 55/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallnew-publisher:8dmature-packagehas-source-repopublic-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.38",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS_FILE = path.join(CONFIG_DIR, "secrets.json");
const DB_FILE = path.join(CONFIG_DIR, "iola.db");
const DB_SCHE

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

@0.2.37·2026-06-03·AUTO-PUBLISHED·publisher: iola_adm

heuristic 55/100

static flags 7

llm malicious (0.95) via fast-track

install-scripts:postinstallnew-publisher:8dmature-packagehas-source-repopublic-github-pushreads-ai-api-keysreads-env-varsreads-homedirchild-process-spawneval-dynamicdest-via-hostname-var

→ 크리덴셜 읽기 (reads-ai-api-keys) + 외부 전송지 dest-via-hostname-var 조합 — 전형적인 유출 패턴.

// offending code· 3 files flaggedpatterns: 7

--- install scripts ---
### postinstall
node --no-warnings bin/postinstall.js



--- package/package.json (excerpt) ---
{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.37",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}


--- package/src/cli.js (excerpt) ---
import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = path.join(os.homedir(), ".iola");
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS_FILE = path.join(CONFIG_DIR, "secrets.json");
const DB_FILE = path.join(CONFIG_DIR, "iola.db");
const DB_SCHE

--- package/src/iola_hf_runner.py (excerpt) ---
import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model

--- dynamic destinations ---
→ apiiola.yasg.ru (via hostname-var)
→ llm.api.cloud.yandex.net (via hostname-var)
→ gigachat.devices.sberbank.ru (via hostname-var)

{
  "name": "@iola_adm/iola-cli",
  "version": "0.2.67",
  "description": "CLI и AI-агент городского округа Йошкар-Ола.",
  "license": "MIT",
  "homepage": "https://github.com/adm-iola/iola-cli#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adm-iola/iola-cli.git"
  },
  "bugs": {
    "url": "https://github.com/adm-iola/iola-cli/issues"
  },
  "type": "module",
  "bin": {
    "iola": "bin/iola.js"
  },
  "scripts": {
    "postinstall": "node --no-warnings bin/postinstall.js",
    "start": "node --no-warnings bin/iola.js",
    "installer:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File ./installer/windows/scripts/build-installer.ps1",
    "installer:windows:premium": "pwsh -NoProfile -ExecutionPolicy Bypass -File ./installer/windows/premium/build-premium-installer.ps1",
    "test": "node --no-warnings --check bin/iola.js && node --no-warnings --check bin/postinstall.js && node --no-warnings --check src/cli.js && node --no-warnings test/smoke-test.js"
  },
  "files": [
    "bin",
    "src",
    "test",
    "skills",
    "wiki",
    "docs/assets/readme-header.png",
    "docs/assets/iola-oauth-icon.png",
    "README.md",
    "SECURITY.md",
    "LICENSE"
  ],
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "yoshkar-ola",
    "open-data",
    "mcp",
    "cli"
  ],
  "engines": {
    "node": ">=22.5.0"
  },
  "dependencies": {
    "qrcode": "^1.5.4"
  }
}

import { execFile, spawn } from "node:child_process";
import { createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
import { createServer } from "node:http";
import { appendFile, copyFile, cp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
import os from "node:os";
import path from "node:path";
import { createHash, randomUUID } from "node:crypto";
import { emitKeypressEvents } from "node:readline";
import readline from "node:readline/promises";
import { Readable } from "node:stream";
import { stdin as input, stdout as output } from "node:process";
import { DatabaseSync } from "node:sqlite";
import tls from "node:tls";
import { fileURLToPath } from "node:url";
import { inflateRawSync, inflateSync } from "node:zlib";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const API_BASE_URL = process.env.IOLA_API_BASE_URL || "https://apiiola.yasg.ru/api/v1";
const MCP_BASE_URL = process.env.IOLA_MCP_BASE_URL || "https://apiiola.yasg.ru";
const AI_RELAY_BASE_URL = process.env.IOLA_AI_RELAY_BASE_URL || `${API_BASE_URL}/ai/relay`;
const YAKUNIN_ROUTER_BASE_URL = process.env.IOLA_YAKUNIN_ROUTER_BASE_URL || `${API_BASE_URL}/pay/yakunin-router`;
const AI_NETWORK_MODE = process.env.IOLA_AI_NETWORK_MODE || "";
const MIN_NODE_VERSION = "22.5.0";
const CONFIG_DIR = getIolaHomeDir();
const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
const LAST_GOOD_CONFIG_FILE = path.join(CONFIG_DIR, "config.last-good.json");
const SECRETS

import argparse
import json
import os
import sys

if hasattr(sys.stdout, "reconfigure"):
    sys.stdout.reconfigure(encoding="utf-8")
if hasattr(sys.stderr, "reconfigure"):
    sys.stderr.reconfigure(encoding="utf-8")


def check_deps():
    import torch  # noqa: F401
    import transformers  # noqa: F401
    import peft  # noqa: F401
    import huggingface_hub  # noqa: F401
    import hf_xet  # noqa: F401


def load_payload():
    raw = sys.stdin.buffer.read().decode("utf-8").strip()
    if not raw:
        return {}
    return json.loads(raw)


def model_revision(repo, token):
    from huggingface_hub import HfApi

    try:
        info = HfApi(token=token).model_info(repo)
        return getattr(info, "sha", "") or ""
    except Exception:
        return ""


def load_model(repo, cache_dir, token):
    import torch
    from peft import PeftConfig, PeftModel
    from transformers import AutoModelForCausalLM, AutoTokenizer

    peft_config = None
    base_model = repo
    try:
        peft_config = PeftConfig.from_pretrained(repo, cache_dir=cache_dir, token=token)
        base_model = peft_config.base_model_name_or_path
    except Exception:
        peft_config = None

    tokenizer = AutoTokenizer.from_pretrained(base_model, cache_dir=cache_dir, token=token)
    if tokenizer.pad_token is None:
        tokenizer.pad_token = tokenizer.eos_token

    dtype = torch.float16 if torch.cuda.is_available() else (torch.bfloat16 if peft_config is not None else torch.float32)
    model