// npm package

@delorenj/pjangler

Project subsystem bootstrapper CLI

npmjs.com tarball

versions

maintainers

license

MIT

first publish

2026-06-01

publisher

lasertoast

tarball

4,318,482 B

AUTO-PUBLISHED·2 versions indexed·latest published 2026-06-05

// exfil path

what is read → where it ships

steals

● Chromium logins
● Slack tokens
● Discord tokens
○ system info
○ home dir

sends to

⚙ curl | bash(fetches + executes remote payload)

// offending code· @1.1.5· 3 files flagged

llm: malicious · 0.95

→ Static analyzer matched curl-pipe-bash: unambiguous remote-code-execution shape in the install path.

@1.1.5·2026-06-05·AUTO-PUBLISHED·publisher: lasertoast
heuristic 60/100
static flags 10
llm malicious (0.95) via fast-track
publish-burst:3new-publisher:0dreads-env-varsreads-system-infocurl-pipe-bashpy-pip-install-runtimereads-chromium-credsreads-slack-tokensreads-discord-tokensreads-homedirchild-process-spawnpy-urllib-request
→ Static analyzer matched curl-pipe-bash: unambiguous remote-code-execution shape in the install path.
// offending code· 3 files flagged

--- install scripts --- ### prepublishOnly npm run build --- package/templates/hermes-agent/install-local.sh (excerpt) --- #!/usr/bin/env sh # Least-friction local install of Hermes PM + Scrum Master roles into a project. # # Local-only: no GitHub runtime repo, no Telegram, no NATS/BloodBank, no Plane # project creation. It binds the Scrum Master to a ticket board you already have. # Works on macOS (launchd) and Linux (systemd). # # One-liner (from anywhere inside the target project): # curl -fsSL https://raw.githubusercontent.com/delorenj/hermes-agent-template/main/install-local.sh | sh # # Or from a checkout: # sh /path/to/hermes-agent-template/install-local.sh # # Environment overrides (skip the prompts): # HAT_REPO=<name> project/repo name (default: basename of CWD) # HAT_PROVIDER=linear|plane|trello (default: plane) # HAT_ROLES="pm scrum-master" roles to install (default: both) # HAT_DRY_RUN=1 print actions, change nothing # Provider creds: LINEAR_API_KEY | PLANE_API_KEY+PLANE_BASE | TRELLO_KEY+TRELLO_TOKEN set -eu say() { printf '\033[36m%s\033[0m\n' "$*"; } warn() { printf '\033[33m%s\033[0m\n' "$*" >&2; } die() { printf '\033[31m%s\033[0m\n' "$*" >&2; exit 1; } run() { if [ "${HAT_DRY_RUN:-0}" = "1" ]; then printf ' [dry-run] %s\n' "$*"; else eval "$*"; fi; } ask() { # ask VAR "prompt" "default" eval "_cur=\${$1:-}"; [ -n "${_cur:-}" ] && return 0 printf '%s [%s]: ' "$2" "${3:-}" >&2; read -r _ans || _ans="" eval "$1=\"\${_ans:-$3}\"" } OS="$(uname -s)" PROJECT_DIR="$(pwd)" [ -d "$PROJECT_DIR/.git" ] || warn "Note: $PROJECT_DIR i --- package/templates/hermes-agent/template/.scripts/10-hermes-profile.sh (excerpt) --- #!/usr/bin/env bash # Create the per-agent Hermes profile. Config inherits explicitly from the # default fleet profile; secrets and runtime state stay profile-local. # shellcheck source=_lib.sh source "$(dirname "$0")/_lib.sh" load_role_env already_done 10-hermes-profile && { log "[10] profile already created — skipping"; exit 0; } log "[10] creating hermes profile: $PROFILE_NAME" PROFILE_HOME="$(profile_home)" # Set repo path to directory where .git is REPO_PATH="$(cd "$ROLE_DIR" && git rev-parse --show-toplevel 2>/dev/null || echo "$ROLE_DIR")" if [[ -d "$PROFILE_HOME" ]]; then log " profile dir already exists; reusing" else env HERMES_HOME="$FLEET_HOME" "$HERMES_BIN" profile create \ "$PROFILE_NAME" --inherit-config --no-alias fi # Existing profiles from older template runs may not have the inheritance # metadata yet. Make the operation idempotent and preserve unrelated # profile.yaml metadata such as descriptions. env HERMES_HOME="$FLEET_HOME" "$HERMES_BIN" profile config-inherit \ "$PROFILE_NAME" --from default # Copy local profile assets from the default profile without copying config or # credentials. Only config.yaml inherits; these directories remain local state. log " mirroring local skills, plugins, hooks from default profile" for sub in skills plugins hooks cron skins; do src="$FLEET_HOME/$sub" dst="$PROFILE_HOME/$sub" if [[ -d "$src" && "$src" != "$PROFILE_HOME"* ]]; then mkdir -p "$dst" # cp -R, dereferencing symlinks; -u to p --- package/templates/hermes-agent/template/.scripts/42-ticket-provider.sh (excerpt) --- #!/usr/bin/env bash # Bind this agent to the repo's ONE ticket board. # # Source of truth is the repo-root .project.json `ticket_provider` block # (written by the CommonProject base template). The model is: # ONE board per repo — the PM owns it, the Scrum Master sentinel watches it. # So we never mint a per-agent, role-suffixed board ("Foo PM" / "Foo Scrum # Master"). Instead: # 1. If .project.json already names a board -> BIND to it (no creation). # 2. Otherwise (hermes run on a repo with no CommonProject board yet) # -> create ONE repo-named board and write it back into .project.json so # it becomes the SOT for every agent in this repo. # Either way we register this agent under .project.json `agents` and mirror the # binding into role.yaml for back-compat (80-registry.sh / 99-summary.sh). # shellcheck source=_lib.sh source "$(dirname "$0")/_lib.sh" load_role_env # shellcheck source=lib/ticket-provider.sh source "$(dirname "$0")/lib/ticket-provider.sh" already_done 42-ticket-provider && { log "[42] ticket provider already set up — skipping"; exit 0; } # Locate the repo-root .project.json (the SOT). REPO_ROOT="$(project_repo_path 2>/dev/null || true)" [ -n "$REPO_ROOT" ] || REPO_ROOT="$(cd "$ROLE_DIR/../../.." 2>/dev/null && pwd)" PROJECT_JSON="$REPO_ROOT/.project.json" ROLE_DIR_REL="${ROLE_DIR#"$REPO_ROOT"/}" # pj <dotted.key> — read a string value from .project.json (empty if absent). pj() { [ -f "$PROJECT_JSON" ] || { printf ''; return 0; } pytho

#!/usr/bin/env sh # Least-friction local install of Hermes PM + Scrum Master roles into a project. # # Local-only: no GitHub runtime repo, no Telegram, no NATS/BloodBank, no Plane # project creation. It binds the Scrum Master to a ticket board you already have. # Works on macOS (launchd) and Linux (systemd). # # One-liner (from anywhere inside the target project): # curl -fsSL https://raw.githubusercontent.com/delorenj/hermes-agent-template/main/install-local.sh | sh # # Or from a checkout: # sh /path/to/hermes-agent-template/install-local.sh # # Environment overrides (skip the prompts): # HAT_REPO=<name> project/repo name (default: basename of CWD) # HAT_PROVIDER=linear|plane|trello (default: plane) # HAT_ROLES="pm scrum-master" roles to install (default: both) # HAT_DRY_RUN=1 print actions, change nothing # Provider creds: LINEAR_API_KEY | PLANE_API_KEY+PLANE_BASE | TRELLO_KEY+TRELLO_TOKEN set -eu say() { printf '\033[36m%s\033[0m\n' "$*"; } warn() { printf '\033[33m%s\033[0m\n' "$*" >&2; } die() { printf '\033[31m%s\033[0m\n' "$*" >&2; exit 1; } run() { if [ "${HAT_DRY_RUN:-0}" = "1" ]; then printf ' [dry-run] %s\n' "$*"; else eval "$*"; fi; } ask() { # ask VAR "prompt" "default" eval "_cur=\${$1:-}"; [ -n "${_cur:-}" ] && return 0 printf '%s [%s]: ' "$2" "${3:-}" >&2; read -r _ans || _ans="" eval "$1=\"\${_ans:-$3}\"" } OS="$(uname -s)" PROJECT_DIR="$(pwd)" [ -d "$PROJECT_DIR/.git" ] || warn "Note: $PROJECT_DIR i

#!/usr/bin/env bash # Create the per-agent Hermes profile. Config inherits explicitly from the # default fleet profile; secrets and runtime state stay profile-local. # shellcheck source=_lib.sh source "$(dirname "$0")/_lib.sh" load_role_env already_done 10-hermes-profile && { log "[10] profile already created — skipping"; exit 0; } log "[10] creating hermes profile: $PROFILE_NAME" PROFILE_HOME="$(profile_home)" # Set repo path to directory where .git is REPO_PATH="$(cd "$ROLE_DIR" && git rev-parse --show-toplevel 2>/dev/null || echo "$ROLE_DIR")" if [[ -d "$PROFILE_HOME" ]]; then log " profile dir already exists; reusing" else env HERMES_HOME="$FLEET_HOME" "$HERMES_BIN" profile create \ "$PROFILE_NAME" --inherit-config --no-alias fi # Existing profiles from older template runs may not have the inheritance # metadata yet. Make the operation idempotent and preserve unrelated # profile.yaml metadata such as descriptions. env HERMES_HOME="$FLEET_HOME" "$HERMES_BIN" profile config-inherit \ "$PROFILE_NAME" --from default # Copy local profile assets from the default profile without copying config or # credentials. Only config.yaml inherits; these directories remain local state. log " mirroring local skills, plugins, hooks from default profile" for sub in skills plugins hooks cron skins; do src="$FLEET_HOME/$sub" dst="$PROFILE_HOME/$sub" if [[ -d "$src" && "$src" != "$PROFILE_HOME"* ]]; then mkdir -p "$dst" # cp -R, dereferencing symlinks; -u to p

#!/usr/bin/env bash # Bind this agent to the repo's ONE ticket board. # # Source of truth is the repo-root .project.json `ticket_provider` block # (written by the CommonProject base template). The model is: # ONE board per repo — the PM owns it, the Scrum Master sentinel watches it. # So we never mint a per-agent, role-suffixed board ("Foo PM" / "Foo Scrum # Master"). Instead: # 1. If .project.json already names a board -> BIND to it (no creation). # 2. Otherwise (hermes run on a repo with no CommonProject board yet) # -> create ONE repo-named board and write it back into .project.json so # it becomes the SOT for every agent in this repo. # Either way we register this agent under .project.json `agents` and mirror the # binding into role.yaml for back-compat (80-registry.sh / 99-summary.sh). # shellcheck source=_lib.sh source "$(dirname "$0")/_lib.sh" load_role_env # shellcheck source=lib/ticket-provider.sh source "$(dirname "$0")/lib/ticket-provider.sh" already_done 42-ticket-provider && { log "[42] ticket provider already set up — skipping"; exit 0; } # Locate the repo-root .project.json (the SOT). REPO_ROOT="$(project_repo_path 2>/dev/null || true)" [ -n "$REPO_ROOT" ] || REPO_ROOT="$(cd "$ROLE_DIR/../../.." 2>/dev/null && pwd)" PROJECT_JSON="$REPO_ROOT/.project.json" ROLE_DIR_REL="${ROLE_DIR#"$REPO_ROOT"/}" # pj <dotted.key> — read a string value from .project.json (empty if absent). pj() { [ -f "$PROJECT_JSON" ] || { printf ''; return 0; } pytho