{"id":"MAL-2026-13787","summary":"Malicious code in biklirouter (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (aa35b0b8fe046a8dd43a4307742214223c3f908b5ba65fa6d24dae18b33cff9b)\nPackage ships a compiled Next.js application (server routes under app/.next-cli-build/server/app/api/) implementing an LLM/AI-provider router: OAuth import flows for provider CLIs (codex, cursor, cline, kilo, droid, hermes, jcode, deepseek, opencode, openclaw, grok, devin, cowork), OpenAI-compatible endpoints (/api/v1/chat/completions, /embeddings, /images/generations, /videos/*, /responses, /messages), provider validation/testing (ping, curl), and Tailscale tunnel management. Many API route bundles include child_process, os, http/https, and process.env because Next.js server bundling co-locates these Node built-ins per route file; static keyword co-occurrence of require('child_process') + POST + process.env in minified route bundles matches the exfiltration pattern shape but reflects normal Next.js server-side rendering plus the app's documented purpose (spawn CLI tools, validate providers via ping, test provider endpoints). cli.js performs a version check against https://registry.npmjs.org (the official npm registry) and reads os.homedir() for local config. No traced code path shows installer-secret paths (~/.aws, ~/.ssh, ~/.npmrc contents) being read and sent to an author-controlled host; no lifecycle scripts fetch-and-exec remote content; no hardcoded non-registry C2 destination is confirmed in the evidence. The behavior surface (spawning CLIs, reading provider credentials that the user configures into the app, contacting external LLM providers) is consistent with the app's declared router purpose, but the density of shell-exec + network primitives across dozens of route handlers plus a MITM server module (app/src/mitm/server.js) warrants human review of the maintainer and endpoints before trust.\n\n## Source: ghsa-malware (22940b637d3ee937dbb5f7ab3c9caa4a9509ea1d22eff921706dbbf5915dd847)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","aliases":["GHSA-f5c6-4rpr-wjhp"],"modified":"2026-08-12T13:00:21.985117291Z","published":"2026-08-12T10:20:39Z","database_specific":{"malicious-packages-origins":[{"import_time":"2026-08-12T10:39:02.401160997Z","modified_time":"2026-08-12T10:20:40Z","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"sha256":"22940b637d3ee937dbb5f7ab3c9caa4a9509ea1d22eff921706dbbf5915dd847","source":"ghsa-malware","id":"GHSA-f5c6-4rpr-wjhp"},{"modified_time":"2026-08-12T12:25:18Z","sha256":"aa35b0b8fe046a8dd43a4307742214223c3f908b5ba65fa6d24dae18b33cff9b","source":"amazon-inspector","versions":["0.5.47"],"id":"IN-MAL-2026-017464","import_time":"2026-08-12T12:51:43.655398539Z"},{"versions":["0.5.46"],"id":"IN-MAL-2026-017466","import_time":"2026-08-12T12:51:43.883249049Z","modified_time":"2026-08-12T12:25:34Z","sha256":"bc79835ed6721e5aa390905e44a7419d1f65fa36918827412824b6b171e211fc","source":"amazon-inspector"}]},"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-f5c6-4rpr-wjhp"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/biklirouter/v/0.5.47"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/biklirouter/v/0.5.46"}],"affected":[{"package":{"name":"biklirouter","ecosystem":"npm","purl":"pkg:npm/biklirouter"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["0.5.47","0.5.46"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/biklirouter/MAL-2026-13787.json","indicators":{"evidence_files":[{"path":"app/.next-cli-build/server/app/(dashboard)/dashboard/basic-chat/page.js","sha256":"f1085a09ee13894fa17f1f356a82b28e64640afc70a9a24ec361fc3f6f39f277","tlsh":"c3b2a740b1a2dbdeb73914d8b15e8a48b00fca65d60f5470bab4786a06c5cc877fa7c8"},{"sha256":"0165afc68671c9179de0b221dbcf08db875b1d4c4dbe4380faad43da7e9f39ea","tlsh":"84531ac177a2757ee36a80e8907f4949732d2b91e0098435f2b5ddce24441d8b3baf3a","path":"app/.next-cli-build/server/app/(dashboard)/dashboard/combos/page.js"},{"path":"app/.next-cli-build/server/app/(dashboard)/dashboard/media-providers/[kind]/[id]/page.js","sha256":"73c1d9c44282c5ee4af95d8b4803c8ccbc935219d927c4200e7db591b5902904","tlsh":"5c83c744f1a26fdefd6b05e8756ec60ca00f0f98e61b4572f9b8381a05494c47ea7bc9"},{"sha256":"6dbccbc285b8f70a7730d66434da31d520de40b65186b91338da8814f03b039a","tlsh":"b25288c5a1d2a9cf767504dcf6abce09f04bc870520a5120bfe4ad9b05c69cc23b9bd8","path":"app/.next-cli-build/server/app/(dashboard)/dashboard/media-providers/[kind]/page.js"},{"path":"app/.next-cli-build/server/app/(dashboard)/dashboard/media-providers/combo/[id]/page.js","sha256":"961c2d94c1879c036b0a34ce8f7ec62c6493738e00a3fc6387ba7503b9a533ee","tlsh":"cf82ba85a1e2ae9faa7504dcf66fce08b00b8964d60a4531bbf4785b05c58c837ba7d4"},{"path":"app/.next-cli-build/server/app/(dashboard)/dashboard/media-providers/web/page.js","sha256":"2eb60d6dd5a4b9a676f8261bce89e2531d06567f836ab08fda55b9e4cf7fe2f8","tlsh":"7f427685a1d2a98fb77504dcf6abce04b047c970520e6120aff4ad5b15c69cc27fabd8"},{"tlsh":"98f2a840e1a69feeee7d05e8b46dc608710b4f64d60b4471bbb5b81e064a4c4bfa67c8","path":"app/.next-cli-build/server/app/(dashboard)/dashboard/profile/page.js","sha256":"9c66fbe352119b7b626c6ff9e5a3007d5dab3104679e3a11e8144460b335cdf8"},{"tlsh":"e383d901f1b6bfeebe2e04d8b56e860c701f0f98da1a4471f9f4781a05499c47ea67c9","path":"app/.next-cli-build/server/app/(dashboard)/dashboard/providers/[id]/page.js","sha256":"b7aca7a08dddae1ac4a55caf7e63e1d2eb7609403f85087174a4deaa7420b057"},{"path":"app/.next-cli-build/server/app/(dashboard)/dashboard/providers/new/page.js","sha256":"aa7be04daa0a4f9ef542528a2fcf0350e0e2b8343879b9e80e54e2147d357f08","tlsh":"1d326489a1d2aadfa77409dcf6a6ce04f0078474520a1561efe1adab05c3dcc27f97d8"},{"sha256":"4bed13ef4a6e7415da47f96e6a0d1224f08cdfa3399ea6fde664efd3337b93bf","tlsh":"2ce2d944f1a2afdfba7604dcb9aec50cf01f4a94d61e4471f6f8781a14894c47ea67c8","path":"app/.next-cli-build/server/app/(dashboard)/dashboard/providers/page.js"},{"tlsh":"69e2a741e1f6eadfbe3d05eca06ec74cb11f4a58d60a4070bae0785e15489c47aa7bcd","path":"app/.next-cli-build/server/app/(dashboard)/dashboard/proxy-pools/page.js","sha256":"9b06a5e7c16d7bc4913243c840db1ec2085b2d657245c8fd77f5cac6a2cd9f66"},{"tlsh":"79230944b161ff9fab7e05e8b51fca0cb01e4b48da0a58b5f6f8781a14498c47e677c8","path":"app/.next-cli-build/server/app/(dashboard)/dashboard/quota/page.js","sha256":"017bbd6a2a0b34c735c057d715de76515d628a13df3975af7a6caacf8af8aa5a"},{"path":"app/.next-cli-build/server/app/(dashboard)/dashboard/translator/page.js","sha256":"b40bad6f393a002a01b450df19fcd3dc10c4a5dfb5b8e8e1cf2f3a635236f870","tlsh":"be52a78561e399dfb7740adcf6a98e00b00bc974920a5421bfe46d8f09c69dc27fd798"},{"path":"app/.next-cli-build/server/app/api/auth/login/route.js","sha256":"dc79192536517ca891060ef95e61dced3e979307631a1860850210699327d619","tlsh":"a4a21c75b2f376a2ab9122b8d8178541b1d88c80530d0074bb9cdecb39ad4d977bdb78"},{"sha256":"da082acbd4ab19cd3f5967c2cd385ad7901efca091430670f9e112884d029a69","tlsh":"9c43f972b7bfae768f681335e14b0532f1599e892b2c8021f39b5c653c4c850aef57a4","path":"app/.next-cli-build/server/app/api/cli-tools/all-statuses/route.js"},{"tlsh":"9a32087396f937a66e7163ece1574e40b0908c60230981a0bb4daedb11cc9d876fd7b8","path":"app/.next-cli-build/server/app/api/cli-tools/antigravity-mitm/alias/route.js","sha256":"52bf9407b4e044042d5e5bd67d3efb47a5547d8edeac8d32e6b20de28c68de0b"},{"sha256":"2cc0bb82e0c45cc9d8a0b91097d35b3c777ce3de1f55872f98d27bf84072b162","tlsh":"b142f9b2e6fd7a665f7033dda1174e207190cc54230a40a1bb9dde6b20ccc969bb47b5","path":"app/.next-cli-build/server/app/api/cli-tools/antigravity-mitm/route.js"},{"tlsh":"c0421a75d6bb7a665e7023ece4138a51f0809c7512098472bbdf9d8b24cccdc56bd3a8","path":"app/.next-cli-build/server/app/api/cli-tools/cline-settings/route.js","sha256":"b59ca85714bbcdc6385cfe31b830d430778f514fb369aa810343dd1f47e09882"},{"tlsh":"94320a76d6be7b6a5fb413fce5534a10b0858c6422058031bf9ead5b14cccd856bd3e8","path":"app/.next-cli-build/server/app/api/cli-tools/codex-settings/route.js","sha256":"d1cf2db0cf0e7afe9ff36920ff72ea9fe91d310fda66ca1a5ebb11ec57f37a27"},{"tlsh":"9302e972d5bc7ba75d7423ecd5638e40b090cca4220945717f8eee9b10cc9d992ad778","path":"app/.next-cli-build/server/app/api/cli-tools/cowork-settings/route.js","sha256":"2589c5f8ac460b2c5a09c63749327b5b7a88ae7c90d05b67e9a07ee3d40178af"},{"path":"app/.next-cli-build/server/app/api/cli-tools/deepseek-tui-settings/route.js","sha256":"243668cc1d48d74f61756bdb5c1cd7bf82a5c8a3237d3451a1ebd87fc64051bb","tlsh":"1932f9b5d1bbb6aa5e7422ece4638e52b0418c74130940317fedad9b14cccdc66bd7a8"},{"path":"app/.next-cli-build/server/app/api/cli-tools/devin-settings/route.js","sha256":"0e24ad5831645340f9a306cdf8e87cec76011f61e64f4ce1bb9008806c6d2743","tlsh":"31220875ca6a77675e7413ece0678a41f0828874220954b17fdfad1b20ccccd52bd3a8"},{"sha256":"6aefe491e01cbf972bce6eeea8187c643fd673ca99b6dc110492bac0badc12f1","tlsh":"46420936927a7b765eb513ecd45b4a01b0918cb422198170bfdead5728dcccc52fd3a4","path":"app/.next-cli-build/server/app/api/cli-tools/droid-settings/route.js"},{"tlsh":"d2624cb2a6b7b9a30b7522ece15b4a51f0a0cc66620d4531ffdc9c6b24c8c9c51fd7a4","path":"app/.next-cli-build/server/app/api/cli-tools/grok-build-settings/route.js","sha256":"559e13faecfd1863f1d94d59f9fd3f4320534535cc199ee81ebb124c77fbc440"},{"path":"app/.next-cli-build/server/app/api/cli-tools/hermes-settings/route.js","sha256":"ecc2d3d66e3ae0d93bbaf4d7bf8c7463d174dc0e7b8f0f565d02797759966bef","tlsh":"76321a75e6ba7aa65f7022ece4238e51f0818cb4120990717fde6d5b24cccdc56bd3a8"},{"path":"app/.next-cli-build/server/app/api/cli-tools/jcode-settings/route.js","sha256":"65f0c26f72b535251d300123c37cdea1f990b6bade84bf2a2c55a8131babbc26","tlsh":"f8321971d67b7aa75eb413ece5534e51f0989c6422098430bfdfae4b008ccd897b83a8"},{"path":"app/.next-cli-build/server/app/api/cli-tools/kilo-settings/route.js","sha256":"d881a16857fe19cf545b3df4bf8c9bacb553b973a983bda77443eeea61ab3176","tlsh":"ae320875d6bb7aa64eb423fcd0238a11f1458c64220984727fdead5b14cccdc66bd3a8"},{"path":"app/.next-cli-build/server/app/api/cli-tools/openclaw-settings/route.js","sha256":"5f70853f456a8bc66422d6b7270f8709632ffcd1201db6e840800a475f5fad02","tlsh":"dd52197995767af64fa813fdf1924e21f0458cb816089031bfed9d9b348ccd856b83a8"},{"path":"app/.next-cli-build/server/app/api/cli-tools/opencode-settings/route.js","sha256":"e6f62277e5b91400d11f79d6bd131e12e39c07568493cd9dd583defc6e6cf5df","tlsh":"45520a71d17b7aa65e7423fce5474a21f0494ca417088071bfdeedab148ccd866f93a8"},{"path":"app/.next-cli-build/server/app/api/keys/route.js","sha256":"cb7c35b436fef0680384bf0753e8c00775a2b44936338de03db42ed589d5573d","tlsh":"e0d2c699b6d275918673b5b8913f480bb0b7a8b4b04c8c60a796c6d23e7849c513bf7c"},{"tlsh":"ab624ca296e73db70e3413b8fb164a8061e4cc5167064070bbc5ee97118ccd9eabdb79","path":"app/.next-cli-build/server/app/api/models/test/route.js","sha256":"ce6e72588409ea401c8dbf05e45dca00bef5f296072257ac15a70485e0eac1cb"},{"path":"app/.next-cli-build/server/app/api/oauth/[provider]/[action]/route.js","sha256":"f71af7ad4361100d139b6d913c91df2abedb657b93894667a904932fa1bf9c36","tlsh":"26a2f897d2ee3aa69f692699a6434e50398c8c5037094010fb468ff7669ccc0f9f8b75"},{"sha256":"d0013eabb43e2ebe1830f685841432b2d145ce06a93f282ad78097fc0034f1af","tlsh":"2b925be382e662d7af3057eca2934bc071d4c8a0670c8410ab489ee712d89d476fd77c","path":"app/.next-cli-build/server/app/api/oauth/codex/bulk-import/route.js"},{"path":"app/.next-cli-build/server/app/api/oauth/codex/import-token/route.js","sha256":"9a8ae27ed9edbb9b640a54995b46d0b07e056d30e0b6e8f4700cea35f57901eb","tlsh":"f3924ae392d676e79f3067f8a2934bc071d5c8a0270c8420ab449feb16d88d576bd778"},{"tlsh":"d1320a72d766356b2fa462ece1564a51e0d5c86d220980717fceaddb20ccd8882bd7bc","path":"app/.next-cli-build/server/app/api/oauth/cursor/auto-import/route.js","sha256":"d503ffb2c5b9b984448dcfc19c6a265cfc2965b78eccd297288f68208d14ecc6"},{"sha256":"483d60eb8922b6c786b721adba19f04ac3d29517edcdb757c7a48b576b058d55","tlsh":"aa721ab2e2e676d25fa433a8a54b4981f5988c5413094020bf4addd724cdcd8abb97b8","path":"app/.next-cli-build/server/app/api/provider-nodes/validate/route.js"},{"tlsh":"ecb21bf396fabba66f2c63d8f7851b047489c894950c8401fb4499fb0cc99c866f676c","path":"app/.next-cli-build/server/app/api/providers/[id]/models/route.js","sha256":"056eaeba8ebf9175d74cf97d007efa051e4b28bc1d8e11e49d5f0a67a1f36661"},{"sha256":"159ba818fcf968baed619171a1d5489bd4e9f3cb752c252c0b2d04bcf0f43113","tlsh":"082265a396fd37aaae7463dc97938e007051c861320d8161eb4a9faf41ccac557ec778","path":"app/.next-cli-build/server/app/api/providers/[id]/test/route.js"},{"tlsh":"8a723db197f739770e7422b4fa154a40a5e4cca1670740307b85eea7218ccd8eabdb79","path":"app/.next-cli-build/server/app/api/providers/[id]/test-models/route.js","sha256":"e70653928757c7f5b7519e99a5c01210ce816ced8bb5cfbb0825435dd32d84ca"},{"sha256":"40e65a0e86e1383e6bfc9a3372b76a9123c8d6cb88fb9937423040f8a422d840","tlsh":"57a24ba792d572e7af3167f8b6934ac074d8c8a0130c4410eb889ee715cd8d576bdbb8","path":"app/.next-cli-build/server/app/api/providers/client/route.js"},{"path":"app/.next-cli-build/server/app/api/providers/test-batch/route.js","sha256":"becf4806239d91621a4bdd801425a0a53b0059f1b5bc157ca073e72ea58e4025","tlsh":"ae32c7b392fd36aaaf3467d8a7c38e007045c822220d9161e74e9fab40cc9c557ec778"},{"path":"app/.next-cli-build/server/app/api/providers/validate/route.js","sha256":"f96d4b4e58897c56c1528a6e7f8036b0fb034b2f7838f51fa51e21fe82f676b2","tlsh":"77036ce3b3e675a71fa562f5b6d61081b0d4cc10d20d8860e781dae704ccdf892bab74"},{"path":"app/.next-cli-build/server/app/api/settings/route.js","sha256":"a6b6f3f0d92cc8d9261d132b9da963a1d498e2ef6b8195cd9110995cfbc48e4a","tlsh":"4082fa93a3ea399bab7413fc932a49407499cc10630d4020e799ebeb25dc5d5a7fd738"},{"tlsh":"9e23e989b6e2b596877274f8516f4807b0a79870b08c8c60e795c6e62e788dc517ff3c","path":"app/.next-cli-build/server/app/api/translator/send/route.js","sha256":"13e768499ae16e6144075d9da52d785cfd39c953bde374bc25c1640f9d0f6929"},{"sha256":"736f2d902423b0c63807eb544a2e551e3c1287a6b348c6f44e7d4b3f5389821d","tlsh":"f013e999b6e2b596877274f8616f4807f0a79870b04c8c60e795c6e22e788dc517ef3c","path":"app/.next-cli-build/server/app/api/translator/translate/route.js"},{"tlsh":"e32264a356fd26aa6e7463ecd7938e007141c861320d8161e749af9f41cc9c553ecb78","path":"app/.next-cli-build/server/app/api/tunnel/disable/route.js","sha256":"2b9416e1e52aa1c2083087350e31351a82426f106f0cf3783452c2ff745afe5c"},{"tlsh":"f52275a356fd36aa6e7463ecd7938e407041c861320d8561e74aafaf41cc9c563ecb78","path":"app/.next-cli-build/server/app/api/tunnel/enable/route.js","sha256":"99ba0cabd44c51a5815a1b9fa9059c885ed1cad24e263786e5876040d4faa599"},{"tlsh":"5602b6b396bd36666e7463ecd6578e507080cc61220a8171bb4daf9b10cc9c597fc7b8","path":"app/.next-cli-build/server/app/api/tunnel/status/route.js","sha256":"6d099a637ef66c1a40805a0c2c14f098250ca9bfe10d61c813eb2ed3997513fa"},{"sha256":"b5ca26c7ea0c5367b656f3e43a86036c865c215e8952bcf1a8bae353e56fd4e3","tlsh":"8e12d8b396f9376a6e7063ecd6578e507050c864620a8560bb4dae4b10cc9c9a3f97bc","path":"app/.next-cli-build/server/app/api/tunnel/tailscale-check/route.js"},{"path":"app/.next-cli-build/server/app/api/tunnel/tailscale-disable/route.js","sha256":"3494ce5b75c6cce102d10ac3b9dc5a6e7b68960d5e875ea90629e483199eba20","tlsh":"a42264a356fd26aeae7463ec97938e407041c861320d8561e74aaf9f41cc9c563ecb78"},{"tlsh":"9e2273a356fd26ae7a7463ec97938e007051c861320d8561e74aafaf41cc9c563ecb78","path":"app/.next-cli-build/server/app/api/tunnel/tailscale-enable/route.js","sha256":"33c7a088e96fced51b3ea7bc79a49395051f263539a9ac9eefe08f2d73cd2fef"},{"path":"app/.next-cli-build/server/app/api/tunnel/tailscale-install/route.js","sha256":"069501a6478ae665f3a4fe00784a8b1b950829b49f78f33d6eb9e051c1ace8d3","tlsh":"01320a72a6fd3b676e7023ecd6578e407090c860220a8560bf9dae4f10cc9d956fa77d"},{"sha256":"b16277361e43f4e9595e7b55a426f6f4d73e23d4fbcdbf9ef4a62bf0a35e600d","tlsh":"1f23f789b2d2b5968b7334f8a16f4447b0a79870b04c8c60e7d5d6e62e788dc517af3c","path":"app/.next-cli-build/server/app/api/usage/[connectionId]/codex-reset-credits/route.js"},{"path":"app/.next-cli-build/server/app/api/usage/[connectionId]/route.js","sha256":"ea6802d306fddf0d63a4370bea56e9523da62e9960022a35eb6a8e68b07f00fa","tlsh":"af2308c9b2d2b59a877234f8a16f4447b0a79870b04c8c60d795d6e62e788ec517ef3c"},{"path":"app/.next-cli-build/server/app/api/v1/api/chat/route.js","sha256":"6ec090bab5b9adb526170377bb4e578d55eeb4c064bed4569c397e09775be1df","tlsh":"2432a7a396f937aaaf7463d8e3968e403181c86132098560f749af9b00cc9d553edb7c"},{"path":"app/.next-cli-build/server/app/api/v1/chat/completions/route.js","sha256":"0863fa91b09d67450ebc26243e9e2e5a80fc285209c56a13aa1377c59cd7556d","tlsh":"5d22a7a356fd37aaae7063dcd7938e403141c861320d8161eb4aafab41cc6d553edb78"},{"tlsh":"c823fad9b6a2b556877634f8a16f4407f0a79870b08c8c51e791c9e62eb88dc417bf3c","path":"app/.next-cli-build/server/app/api/v1/embeddings/route.js","sha256":"28f0d13e03a09f009a9f7d691e36397300285e1df3e4dc36fbb427afb2a6317e"},{"path":"app/.next-cli-build/server/app/api/v1/images/generations/route.js","sha256":"aa3c0203ad442a0cea93849abd5c5365c918632b2ad93326baa6e64a04a4f700","tlsh":"c44309e5b2b37553877634f8a12f4807f0a69874b08cc960e791c9d329b889c51bbf6c"},{"sha256":"6cb4ca8e3be52b7bf6a7f2b07210e2f2c2d6490e63921477a2314df9a00575b6","tlsh":"091296a396fd37aaae7063dcd7938e407040c86132098161eb4aafaf41cc5d553edb78","path":"app/.next-cli-build/server/app/api/v1/messages/route.js"},{"tlsh":"0022a8a396fd37aaae7453dcd7938e403081c87132098161eb4aafab01c85d557ed778","path":"app/.next-cli-build/server/app/api/v1/models/[kind]/route.js","sha256":"d2d447e76f457df4f32575d2d678ab5328a4838d4728bb56d5f8387392b713ad"},{"sha256":"6287d54d0d5b7db1338c1528b82d56fa32265b1c9f471858d5a5f3be70601ff8","tlsh":"751277b396fd27aa6e7463dcd7928e407091c861320d8161eb4a9faf41ccac553ec778","path":"app/.next-cli-build/server/app/api/v1/models/route.js"},{"tlsh":"072286a396fd37aaae7463dcd7938e403041c86532098161eb4aafaf41cc6d553ec778","path":"app/.next-cli-build/server/app/api/v1/responses/compact/route.js","sha256":"6e9283ec8b85cd0fba5223595a697714a5c9ae861b6a24d5ccaf1592ebb98fcf"},{"path":"app/.next-cli-build/server/app/api/v1/responses/route.js","sha256":"ed9a0036fe40a294ae8ecc92c55a991e5cd961ce22228b8d45330b7945bc5ea0","tlsh":"6e12a7a396fd37aaae7063dcd7978e403040c86132098161eb4aafaf41cc6d553ec778"},{"sha256":"9c5304ed368b426439ddd9ce90c2ecb01a369694031669b52ba71e95fe436d71","tlsh":"421276b396fd27aaae7463dcd7928e407081c861320d8161eb4a9f9f41ccac553ec778","path":"app/.next-cli-build/server/app/api/v1/route.js"},{"sha256":"70b8e377c0a3ddc705f2a70a69ccd640475956fe064429394da0b16a8dfaa916","tlsh":"3af24de2b2f63543df791269f18e1440b268ec17654cc8a4e7a94d9b54c8cf492ffb28","path":"app/.next-cli-build/server/app/api/v1/search/route.js"},{"sha256":"6f177a049b49dae1e65a9f1b2aa001f13e2f2afb9060f1f1fa512c0b9b1e5bd9","tlsh":"a31276a396fd37aaae7463dcd7928e403141c861320d8161eb4aaf9f41cc6d563ec778","path":"app/.next-cli-build/server/app/api/v1/videos/[id]/route.js"},{"path":"app/.next-cli-build/server/app/api/v1/videos/edits/route.js","sha256":"887e828758d3e76f23f4d172732168391cebab60e481117386ea202c1f6d49ad","tlsh":"931275b396fd37aaae7063dcd7938e403140c861220d8161eb4aafaf41c86d557ec778"},{"tlsh":"881286a396fd37aaae7463dcd7928e407150c861320d8161eb4aaf9f01cc6d563ec778","path":"app/.next-cli-build/server/app/api/v1/videos/extensions/route.js","sha256":"d834612aadecb7e1f75ccedc332ac21adba04f5ae500a1ec9abf8ecda2648c79"},{"tlsh":"ce1276b396fd37aaae7063dcd7928e403150c861320d8161eb4aaf9b41ccad553ec778","path":"app/.next-cli-build/server/app/api/v1/videos/generations/route.js","sha256":"a956dcd72bc1ed446f1e2c34820c44cb3f4ee9675d42f20bf99814fec0950517"},{"tlsh":"7d922af3b6fb76579f7052aca68249007188cc20a60dc525f3856e5f15d88d89bfdb38","path":"app/.next-cli-build/server/app/api/v1/web/fetch/route.js","sha256":"79152e6b9c9b095e0910bfeb367e2644037733a6dff46737397a77793d387d11"},{"sha256":"cfe34d05e6a4ca56e2839690e9a9d58b03e92ad617e83a8b45e17f795780fe49","tlsh":"0582f9b6b6fa37a5af7523e8f3938d003090cc5562488161e74aeedb04d85c596fdb38","path":"app/.next-cli-build/server/app/api/v1beta/models/[...path]/route.js"},{"tlsh":"24521975d26a6b7b9ef022f8f0268b4195d98464120541b17f8dee8b344ccc9a73d7bc","path":"app/.next-cli-build/server/app/api/version/shutdown/route.js","sha256":"2a8a9fd15dc77b565b8b49779a63638f676c9779f5a101a9243ac28f48caa2a2"},{"path":"app/.next-cli-build/server/app/api/version/update/route.js","sha256":"cc44b32989a7092a7709d81c2fe514d134f430b8a4ed61f45ae30bb3bb90f024","tlsh":"0a521a75d26a7b7b9eb022fcf0368b4195d58464120541716f8dee8b248c8c9a63d7bc"},{"tlsh":"3f3264c591e6dadeb6b404dcf26acd05b007c874920a6460abf0aa5f05c5dcc36f9798","path":"app/.next-cli-build/server/app/login/page.js","sha256":"b7b2af48ddc8dea0a889bebf2b3eccbf04c17dbd51cd05fcaaed540d4dab8f5a"},{"tlsh":"4c148705b171afdebd7f0aa8a96e820c611f0b89db0fc4b5b9b8b41d15090d47e47bc9","path":"app/.next-cli-build/server/chunks/162.js","sha256":"a33eff807db446205ec354be70de2598b5c167ffa4f1d02cdad48269b2141c7e"},{"path":"app/.next-cli-build/server/chunks/318.js","sha256":"73d2bf7bbef7c6df0c9b1e871e0603ce29c397873a2687dcbc462a23e249372a","tlsh":"e9146da5f7b379230fce22a2f5ca1501e1ec8856e18c4465f194cdea1c986d9d3b7f28"},{"tlsh":"c7c208d97bf7b0a28f973933fc8a6102722d864dc00d4515ebd058da2d1c227a3b7b68","path":"app/.next-cli-build/server/chunks/3943.js","sha256":"a0af5205d95448b7ab4854753420c16787284b87ea74a4086b22879e97730425"},{"path":"app/.next-cli-build/server/chunks/5612.js","sha256":"aacb9460e29d6b81618c5d2675598d934ed14b5e53559e5b4a11a6743109d70a","tlsh":"48920a78f7f7bae38f8b3866f6991606f0ac4988404c95c5f3d05aa61c54489e377b28"},{"tlsh":"22c2e8a673a3723ed7f40861c11e5741e29a0e24890d04a0b579da4f392c53da6f7fbd","path":"app/.next-cli-build/server/chunks/6457.js","sha256":"dc12ec98bd41861423b8fbb897d9091a8aae742b2c263359620814e2848d85f4"},{"tlsh":"bff21ae633f3a4830faf59b278c9308360ed8e98991e1c04ef9046d71c9dda559b7b58","path":"app/.next-cli-build/server/chunks/827.js","sha256":"3b7edf875bf428976f5a9ec941a83f8b42460aa92b0ed255fab4482d512d9d41"},{"tlsh":"c7f24b66b3aa7f735fb42071e1066140e1fdca16a3089550b68ccdcb7b1d07892bbfa5","path":"app/.next-cli-build/server/chunks/915.js","sha256":"c4ea12329535dcaffb6b162aeea4edfa75d5a41e85ecaf90dae39b768f9ba138"},{"tlsh":"767408b473e6b95246a750e8c03b0003f2699da1a05c44b4f7d5dccb38a89dd92bbf79","path":"app/.next-cli-build/server/middleware.js","sha256":"753ad8046a44b5614aebaf5c2b3e15be416d217b60e5f908991d1f6b28bdd9a8"},{"sha256":"976bc7fc0fa0e7030cba4fdc8b88bbcea48750ca51f248ba89a62e93862fcb63","tlsh":"00145405a161afdcfdbf06a4ad6e805ca11f0f89ca0fc475b6b8b41915860d8be47bcd","path":"app/.next-cli-build/static/chunks/8281-3e327c3712762c44.js"},{"path":"app/.next-cli-build/static/chunks/app/(dashboard)/dashboard/providers/[id]/page-5afd8ee01b4fead7.js","sha256":"38519f07fc046ef98b61815414682d594870b7ec0e0bfe3d240384a8428c6212","tlsh":"9c73a691f3a6bfecae6f04d5656e800ca11e4f88cb3a4475f5b4382a1509584be93bcd"},{"sha256":"89be1640c3298b4af35585863788259a684306873a0d59efbb0a9142777278c5","tlsh":"32f1940825b3957216bb169a8a1fe035a33a81473c4cb8647f8cc3941f4e92dd67fad8","path":"app/src/lib/oauth/services/xai.js"},{"tlsh":"81644b8436b078f043b262f7182f814bf139a515941e8925f665dcdab8acf9cd13af78","path":"app/src/mitm/server.js","sha256":"e037cd6acc0c09ee05818a2e5d4fdc0952afbf55963cc495e31319ca4c1b0cd0"},{"sha256":"560270ee6e9a10110f58d98fe6be942eb179c55dc2094a8ef72769602ea076b1","tlsh":"70e2b749a5fb21345ab3e0696b9b5017776ad0132209dfa87e9d83413f8253c82b27fd","path":"cli.js"},{"tlsh":"7cd195c5c4f332761be6d1a2763b24d6a7e8c802651ad5c0a4ac41c53f8746982779bf","path":"hooks/sqliteRuntime.js","sha256":"ac96b20e2a396cc0283e311af65625c718b805bc41346e6437a81dfeaf1344d3"}]},"cwes":[{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."},{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."},{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."}]}}],"schema_version":"1.9.0","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}