MAL-2026-13787

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/biklirouter/MAL-2026-13787.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2026-13787

Aliases

GHSA-f5c6-4rpr-wjhp

Published

2026-08-12T10:20:39Z

Modified

2026-08-12T13:00:21.985117291Z

Summary

Malicious code in biklirouter (npm)

Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (aa35b0b8fe046a8dd43a4307742214223c3f908b5ba65fa6d24dae18b33cff9b)

Package ships a compiled Next.js application (server routes under app/.next-cli-build/server/app/api/) implementing an LLM/AI-provider router: OAuth import flows for provider CLIs (codex, cursor, cline, kilo, droid, hermes, jcode, deepseek, opencode, openclaw, grok, devin, cowork), OpenAI-compatible endpoints (/api/v1/chat/completions, /embeddings, /images/generations, /videos/*, /responses, /messages), provider validation/testing (ping, curl), and Tailscale tunnel management. Many API route bundles include childprocess, os, http/https, and process.env because Next.js server bundling co-locates these Node built-ins per route file; static keyword co-occurrence of require('childprocess') + POST + process.env in minified route bundles matches the exfiltration pattern shape but reflects normal Next.js server-side rendering plus the app's documented purpose (spawn CLI tools, validate providers via ping, test provider endpoints). cli.js performs a version check against https://registry.npmjs.org (the official npm registry) and reads os.homedir() for local config. No traced code path shows installer-secret paths (~/.aws, ~/.ssh, ~/.npmrc contents) being read and sent to an author-controlled host; no lifecycle scripts fetch-and-exec remote content; no hardcoded non-registry C2 destination is confirmed in the evidence. The behavior surface (spawning CLIs, reading provider credentials that the user configures into the app, contacting external LLM providers) is consistent with the app's declared router purpose, but the density of shell-exec + network primitives across dozens of route handlers plus a MITM server module (app/src/mitm/server.js) warrants human review of the maintainer and endpoints before trust.

Source: ghsa-malware (22940b637d3ee937dbb5f7ab3c9caa4a9509ea1d22eff921706dbbf5915dd847)

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

Database specific

{
    "malicious-packages-origins": [
        {
            "ranges": [
                {
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ],
                    "type": "SEMVER"
                }
            ],
            "id": "GHSA-f5c6-4rpr-wjhp",
            "import_time": "2026-08-12T10:39:02.401160997Z",
            "sha256": "22940b637d3ee937dbb5f7ab3c9caa4a9509ea1d22eff921706dbbf5915dd847",
            "modified_time": "2026-08-12T10:20:40Z",
            "source": "ghsa-malware"
        },
        {
            "id": "IN-MAL-2026-017464",
            "import_time": "2026-08-12T12:51:43.655398539Z",
            "sha256": "aa35b0b8fe046a8dd43a4307742214223c3f908b5ba65fa6d24dae18b33cff9b",
            "versions": [
                "0.5.47"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-12T12:25:18Z"
        },
        {
            "id": "IN-MAL-2026-017466",
            "import_time": "2026-08-12T12:51:43.883249049Z",
            "sha256": "bc79835ed6721e5aa390905e44a7419d1f65fa36918827412824b6b171e211fc",
            "versions": [
                "0.5.46"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-12T12:25:34Z"
        }
    ]
}

References

Credits

- Amazon Inspector - FINDER
- - inspector-research@amazon.com

Affected packages

npm / biklirouter

Package

Name: biklirouter; View open source insights on deps.dev
Purl: pkg:npm/biklirouter

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.5.46

0.5.47

Database specific

cwes

[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    }
]

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/biklirouter/MAL-2026-13787.json"

indicators

{
    "evidence_files": [
        {
            "path": "app/.next-cli-build/server/app/(dashboard)/dashboard/basic-chat/page.js",
            "tlsh": "c3b2a740b1a2dbdeb73914d8b15e8a48b00fca65d60f5470bab4786a06c5cc877fa7c8",
            "sha256": "f1085a09ee13894fa17f1f356a82b28e64640afc70a9a24ec361fc3f6f39f277"
        },
        {
            "path": "app/.next-cli-build/server/app/(dashboard)/dashboard/combos/page.js",
            "tlsh": "84531ac177a2757ee36a80e8907f4949732d2b91e0098435f2b5ddce24441d8b3baf3a",
            "sha256": "0165afc68671c9179de0b221dbcf08db875b1d4c4dbe4380faad43da7e9f39ea"
        },
        {
            "path": "app/.next-cli-build/server/app/(dashboard)/dashboard/media-providers/[kind]/[id]/page.js",
            "tlsh": "5c83c744f1a26fdefd6b05e8756ec60ca00f0f98e61b4572f9b8381a05494c47ea7bc9",
            "sha256": "73c1d9c44282c5ee4af95d8b4803c8ccbc935219d927c4200e7db591b5902904"
        },
        {
            "path": "app/.next-cli-build/server/app/(dashboard)/dashboard/media-providers/[kind]/page.js",
            "tlsh": "b25288c5a1d2a9cf767504dcf6abce09f04bc870520a5120bfe4ad9b05c69cc23b9bd8",
            "sha256": "6dbccbc285b8f70a7730d66434da31d520de40b65186b91338da8814f03b039a"
        },
        {
            "path": "app/.next-cli-build/server/app/(dashboard)/dashboard/media-providers/combo/[id]/page.js",
            "tlsh": "cf82ba85a1e2ae9faa7504dcf66fce08b00b8964d60a4531bbf4785b05c58c837ba7d4",
            "sha256": "961c2d94c1879c036b0a34ce8f7ec62c6493738e00a3fc6387ba7503b9a533ee"
        },
        {
            "path": "app/.next-cli-build/server/app/(dashboard)/dashboard/media-providers/web/page.js",
            "tlsh": "7f427685a1d2a98fb77504dcf6abce04b047c970520e6120aff4ad5b15c69cc27fabd8",
            "sha256": "2eb60d6dd5a4b9a676f8261bce89e2531d06567f836ab08fda55b9e4cf7fe2f8"
        },
        {
            "path": "app/.next-cli-build/server/app/(dashboard)/dashboard/profile/page.js",
            "tlsh": "98f2a840e1a69feeee7d05e8b46dc608710b4f64d60b4471bbb5b81e064a4c4bfa67c8",
            "sha256": "9c66fbe352119b7b626c6ff9e5a3007d5dab3104679e3a11e8144460b335cdf8"
        },
        {
            "path": "app/.next-cli-build/server/app/(dashboard)/dashboard/providers/[id]/page.js",
            "tlsh": "e383d901f1b6bfeebe2e04d8b56e860c701f0f98da1a4471f9f4781a05499c47ea67c9",
            "sha256": "b7aca7a08dddae1ac4a55caf7e63e1d2eb7609403f85087174a4deaa7420b057"
        },
        {
            "path": "app/.next-cli-build/server/app/(dashboard)/dashboard/providers/new/page.js",
            "tlsh": "1d326489a1d2aadfa77409dcf6a6ce04f0078474520a1561efe1adab05c3dcc27f97d8",
            "sha256": "aa7be04daa0a4f9ef542528a2fcf0350e0e2b8343879b9e80e54e2147d357f08"
        },
        {
            "path": "app/.next-cli-build/server/app/(dashboard)/dashboard/providers/page.js",
            "tlsh": "2ce2d944f1a2afdfba7604dcb9aec50cf01f4a94d61e4471f6f8781a14894c47ea67c8",
            "sha256": "4bed13ef4a6e7415da47f96e6a0d1224f08cdfa3399ea6fde664efd3337b93bf"
        },
        {
            "path": "app/.next-cli-build/server/app/(dashboard)/dashboard/proxy-pools/page.js",
            "tlsh": "69e2a741e1f6eadfbe3d05eca06ec74cb11f4a58d60a4070bae0785e15489c47aa7bcd",
            "sha256": "9b06a5e7c16d7bc4913243c840db1ec2085b2d657245c8fd77f5cac6a2cd9f66"
        },
        {
            "path": "app/.next-cli-build/server/app/(dashboard)/dashboard/quota/page.js",
            "tlsh": "79230944b161ff9fab7e05e8b51fca0cb01e4b48da0a58b5f6f8781a14498c47e677c8",
            "sha256": "017bbd6a2a0b34c735c057d715de76515d628a13df3975af7a6caacf8af8aa5a"
        },
        {
            "path": "app/.next-cli-build/server/app/(dashboard)/dashboard/translator/page.js",
            "tlsh": "be52a78561e399dfb7740adcf6a98e00b00bc974920a5421bfe46d8f09c69dc27fd798",
            "sha256": "b40bad6f393a002a01b450df19fcd3dc10c4a5dfb5b8e8e1cf2f3a635236f870"
        },
        {
            "path": "app/.next-cli-build/server/app/api/auth/login/route.js",
            "tlsh": "a4a21c75b2f376a2ab9122b8d8178541b1d88c80530d0074bb9cdecb39ad4d977bdb78",
            "sha256": "dc79192536517ca891060ef95e61dced3e979307631a1860850210699327d619"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/all-statuses/route.js",
            "tlsh": "9c43f972b7bfae768f681335e14b0532f1599e892b2c8021f39b5c653c4c850aef57a4",
            "sha256": "da082acbd4ab19cd3f5967c2cd385ad7901efca091430670f9e112884d029a69"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/antigravity-mitm/alias/route.js",
            "tlsh": "9a32087396f937a66e7163ece1574e40b0908c60230981a0bb4daedb11cc9d876fd7b8",
            "sha256": "52bf9407b4e044042d5e5bd67d3efb47a5547d8edeac8d32e6b20de28c68de0b"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/antigravity-mitm/route.js",
            "tlsh": "b142f9b2e6fd7a665f7033dda1174e207190cc54230a40a1bb9dde6b20ccc969bb47b5",
            "sha256": "2cc0bb82e0c45cc9d8a0b91097d35b3c777ce3de1f55872f98d27bf84072b162"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/cline-settings/route.js",
            "tlsh": "c0421a75d6bb7a665e7023ece4138a51f0809c7512098472bbdf9d8b24cccdc56bd3a8",
            "sha256": "b59ca85714bbcdc6385cfe31b830d430778f514fb369aa810343dd1f47e09882"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/codex-settings/route.js",
            "tlsh": "94320a76d6be7b6a5fb413fce5534a10b0858c6422058031bf9ead5b14cccd856bd3e8",
            "sha256": "d1cf2db0cf0e7afe9ff36920ff72ea9fe91d310fda66ca1a5ebb11ec57f37a27"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/cowork-settings/route.js",
            "tlsh": "9302e972d5bc7ba75d7423ecd5638e40b090cca4220945717f8eee9b10cc9d992ad778",
            "sha256": "2589c5f8ac460b2c5a09c63749327b5b7a88ae7c90d05b67e9a07ee3d40178af"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/deepseek-tui-settings/route.js",
            "tlsh": "1932f9b5d1bbb6aa5e7422ece4638e52b0418c74130940317fedad9b14cccdc66bd7a8",
            "sha256": "243668cc1d48d74f61756bdb5c1cd7bf82a5c8a3237d3451a1ebd87fc64051bb"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/devin-settings/route.js",
            "tlsh": "31220875ca6a77675e7413ece0678a41f0828874220954b17fdfad1b20ccccd52bd3a8",
            "sha256": "0e24ad5831645340f9a306cdf8e87cec76011f61e64f4ce1bb9008806c6d2743"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/droid-settings/route.js",
            "tlsh": "46420936927a7b765eb513ecd45b4a01b0918cb422198170bfdead5728dcccc52fd3a4",
            "sha256": "6aefe491e01cbf972bce6eeea8187c643fd673ca99b6dc110492bac0badc12f1"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/grok-build-settings/route.js",
            "tlsh": "d2624cb2a6b7b9a30b7522ece15b4a51f0a0cc66620d4531ffdc9c6b24c8c9c51fd7a4",
            "sha256": "559e13faecfd1863f1d94d59f9fd3f4320534535cc199ee81ebb124c77fbc440"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/hermes-settings/route.js",
            "tlsh": "76321a75e6ba7aa65f7022ece4238e51f0818cb4120990717fde6d5b24cccdc56bd3a8",
            "sha256": "ecc2d3d66e3ae0d93bbaf4d7bf8c7463d174dc0e7b8f0f565d02797759966bef"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/jcode-settings/route.js",
            "tlsh": "f8321971d67b7aa75eb413ece5534e51f0989c6422098430bfdfae4b008ccd897b83a8",
            "sha256": "65f0c26f72b535251d300123c37cdea1f990b6bade84bf2a2c55a8131babbc26"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/kilo-settings/route.js",
            "tlsh": "ae320875d6bb7aa64eb423fcd0238a11f1458c64220984727fdead5b14cccdc66bd3a8",
            "sha256": "d881a16857fe19cf545b3df4bf8c9bacb553b973a983bda77443eeea61ab3176"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/openclaw-settings/route.js",
            "tlsh": "dd52197995767af64fa813fdf1924e21f0458cb816089031bfed9d9b348ccd856b83a8",
            "sha256": "5f70853f456a8bc66422d6b7270f8709632ffcd1201db6e840800a475f5fad02"
        },
        {
            "path": "app/.next-cli-build/server/app/api/cli-tools/opencode-settings/route.js",
            "tlsh": "45520a71d17b7aa65e7423fce5474a21f0494ca417088071bfdeedab148ccd866f93a8",
            "sha256": "e6f62277e5b91400d11f79d6bd131e12e39c07568493cd9dd583defc6e6cf5df"
        },
        {
            "path": "app/.next-cli-build/server/app/api/keys/route.js",
            "tlsh": "e0d2c699b6d275918673b5b8913f480bb0b7a8b4b04c8c60a796c6d23e7849c513bf7c",
            "sha256": "cb7c35b436fef0680384bf0753e8c00775a2b44936338de03db42ed589d5573d"
        },
        {
            "path": "app/.next-cli-build/server/app/api/models/test/route.js",
            "tlsh": "ab624ca296e73db70e3413b8fb164a8061e4cc5167064070bbc5ee97118ccd9eabdb79",
            "sha256": "ce6e72588409ea401c8dbf05e45dca00bef5f296072257ac15a70485e0eac1cb"
        },
        {
            "path": "app/.next-cli-build/server/app/api/oauth/[provider]/[action]/route.js",
            "tlsh": "26a2f897d2ee3aa69f692699a6434e50398c8c5037094010fb468ff7669ccc0f9f8b75",
            "sha256": "f71af7ad4361100d139b6d913c91df2abedb657b93894667a904932fa1bf9c36"
        },
        {
            "path": "app/.next-cli-build/server/app/api/oauth/codex/bulk-import/route.js",
            "tlsh": "2b925be382e662d7af3057eca2934bc071d4c8a0670c8410ab489ee712d89d476fd77c",
            "sha256": "d0013eabb43e2ebe1830f685841432b2d145ce06a93f282ad78097fc0034f1af"
        },
        {
            "path": "app/.next-cli-build/server/app/api/oauth/codex/import-token/route.js",
            "tlsh": "f3924ae392d676e79f3067f8a2934bc071d5c8a0270c8420ab449feb16d88d576bd778",
            "sha256": "9a8ae27ed9edbb9b640a54995b46d0b07e056d30e0b6e8f4700cea35f57901eb"
        },
        {
            "path": "app/.next-cli-build/server/app/api/oauth/cursor/auto-import/route.js",
            "tlsh": "d1320a72d766356b2fa462ece1564a51e0d5c86d220980717fceaddb20ccd8882bd7bc",
            "sha256": "d503ffb2c5b9b984448dcfc19c6a265cfc2965b78eccd297288f68208d14ecc6"
        },
        {
            "path": "app/.next-cli-build/server/app/api/provider-nodes/validate/route.js",
            "tlsh": "aa721ab2e2e676d25fa433a8a54b4981f5988c5413094020bf4addd724cdcd8abb97b8",
            "sha256": "483d60eb8922b6c786b721adba19f04ac3d29517edcdb757c7a48b576b058d55"
        },
        {
            "path": "app/.next-cli-build/server/app/api/providers/[id]/models/route.js",
            "tlsh": "ecb21bf396fabba66f2c63d8f7851b047489c894950c8401fb4499fb0cc99c866f676c",
            "sha256": "056eaeba8ebf9175d74cf97d007efa051e4b28bc1d8e11e49d5f0a67a1f36661"
        },
        {
            "path": "app/.next-cli-build/server/app/api/providers/[id]/test/route.js",
            "tlsh": "082265a396fd37aaae7463dc97938e007051c861320d8161eb4a9faf41ccac557ec778",
            "sha256": "159ba818fcf968baed619171a1d5489bd4e9f3cb752c252c0b2d04bcf0f43113"
        },
        {
            "path": "app/.next-cli-build/server/app/api/providers/[id]/test-models/route.js",
            "tlsh": "8a723db197f739770e7422b4fa154a40a5e4cca1670740307b85eea7218ccd8eabdb79",
            "sha256": "e70653928757c7f5b7519e99a5c01210ce816ced8bb5cfbb0825435dd32d84ca"
        },
        {
            "path": "app/.next-cli-build/server/app/api/providers/client/route.js",
            "tlsh": "57a24ba792d572e7af3167f8b6934ac074d8c8a0130c4410eb889ee715cd8d576bdbb8",
            "sha256": "40e65a0e86e1383e6bfc9a3372b76a9123c8d6cb88fb9937423040f8a422d840"
        },
        {
            "path": "app/.next-cli-build/server/app/api/providers/test-batch/route.js",
            "tlsh": "ae32c7b392fd36aaaf3467d8a7c38e007045c822220d9161e74e9fab40cc9c557ec778",
            "sha256": "becf4806239d91621a4bdd801425a0a53b0059f1b5bc157ca073e72ea58e4025"
        },
        {
            "path": "app/.next-cli-build/server/app/api/providers/validate/route.js",
            "tlsh": "77036ce3b3e675a71fa562f5b6d61081b0d4cc10d20d8860e781dae704ccdf892bab74",
            "sha256": "f96d4b4e58897c56c1528a6e7f8036b0fb034b2f7838f51fa51e21fe82f676b2"
        },
        {
            "path": "app/.next-cli-build/server/app/api/settings/route.js",
            "tlsh": "4082fa93a3ea399bab7413fc932a49407499cc10630d4020e799ebeb25dc5d5a7fd738",
            "sha256": "a6b6f3f0d92cc8d9261d132b9da963a1d498e2ef6b8195cd9110995cfbc48e4a"
        },
        {
            "path": "app/.next-cli-build/server/app/api/translator/send/route.js",
            "tlsh": "9e23e989b6e2b596877274f8516f4807b0a79870b08c8c60e795c6e62e788dc517ff3c",
            "sha256": "13e768499ae16e6144075d9da52d785cfd39c953bde374bc25c1640f9d0f6929"
        },
        {
            "path": "app/.next-cli-build/server/app/api/translator/translate/route.js",
            "tlsh": "f013e999b6e2b596877274f8616f4807f0a79870b04c8c60e795c6e22e788dc517ef3c",
            "sha256": "736f2d902423b0c63807eb544a2e551e3c1287a6b348c6f44e7d4b3f5389821d"
        },
        {
            "path": "app/.next-cli-build/server/app/api/tunnel/disable/route.js",
            "tlsh": "e32264a356fd26aa6e7463ecd7938e007141c861320d8161e749af9f41cc9c553ecb78",
            "sha256": "2b9416e1e52aa1c2083087350e31351a82426f106f0cf3783452c2ff745afe5c"
        },
        {
            "path": "app/.next-cli-build/server/app/api/tunnel/enable/route.js",
            "tlsh": "f52275a356fd36aa6e7463ecd7938e407041c861320d8561e74aafaf41cc9c563ecb78",
            "sha256": "99ba0cabd44c51a5815a1b9fa9059c885ed1cad24e263786e5876040d4faa599"
        },
        {
            "path": "app/.next-cli-build/server/app/api/tunnel/status/route.js",
            "tlsh": "5602b6b396bd36666e7463ecd6578e507080cc61220a8171bb4daf9b10cc9c597fc7b8",
            "sha256": "6d099a637ef66c1a40805a0c2c14f098250ca9bfe10d61c813eb2ed3997513fa"
        },
        {
            "path": "app/.next-cli-build/server/app/api/tunnel/tailscale-check/route.js",
            "tlsh": "8e12d8b396f9376a6e7063ecd6578e507050c864620a8560bb4dae4b10cc9c9a3f97bc",
            "sha256": "b5ca26c7ea0c5367b656f3e43a86036c865c215e8952bcf1a8bae353e56fd4e3"
        },
        {
            "path": "app/.next-cli-build/server/app/api/tunnel/tailscale-disable/route.js",
            "tlsh": "a42264a356fd26aeae7463ec97938e407041c861320d8561e74aaf9f41cc9c563ecb78",
            "sha256": "3494ce5b75c6cce102d10ac3b9dc5a6e7b68960d5e875ea90629e483199eba20"
        },
        {
            "path": "app/.next-cli-build/server/app/api/tunnel/tailscale-enable/route.js",
            "tlsh": "9e2273a356fd26ae7a7463ec97938e007051c861320d8561e74aafaf41cc9c563ecb78",
            "sha256": "33c7a088e96fced51b3ea7bc79a49395051f263539a9ac9eefe08f2d73cd2fef"
        },
        {
            "path": "app/.next-cli-build/server/app/api/tunnel/tailscale-install/route.js",
            "tlsh": "01320a72a6fd3b676e7023ecd6578e407090c860220a8560bf9dae4f10cc9d956fa77d",
            "sha256": "069501a6478ae665f3a4fe00784a8b1b950829b49f78f33d6eb9e051c1ace8d3"
        },
        {
            "path": "app/.next-cli-build/server/app/api/usage/[connectionId]/codex-reset-credits/route.js",
            "tlsh": "1f23f789b2d2b5968b7334f8a16f4447b0a79870b04c8c60e7d5d6e62e788dc517af3c",
            "sha256": "b16277361e43f4e9595e7b55a426f6f4d73e23d4fbcdbf9ef4a62bf0a35e600d"
        },
        {
            "path": "app/.next-cli-build/server/app/api/usage/[connectionId]/route.js",
            "tlsh": "af2308c9b2d2b59a877234f8a16f4447b0a79870b04c8c60d795d6e62e788ec517ef3c",
            "sha256": "ea6802d306fddf0d63a4370bea56e9523da62e9960022a35eb6a8e68b07f00fa"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/api/chat/route.js",
            "tlsh": "2432a7a396f937aaaf7463d8e3968e403181c86132098560f749af9b00cc9d553edb7c",
            "sha256": "6ec090bab5b9adb526170377bb4e578d55eeb4c064bed4569c397e09775be1df"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/chat/completions/route.js",
            "tlsh": "5d22a7a356fd37aaae7063dcd7938e403141c861320d8161eb4aafab41cc6d553edb78",
            "sha256": "0863fa91b09d67450ebc26243e9e2e5a80fc285209c56a13aa1377c59cd7556d"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/embeddings/route.js",
            "tlsh": "c823fad9b6a2b556877634f8a16f4407f0a79870b08c8c51e791c9e62eb88dc417bf3c",
            "sha256": "28f0d13e03a09f009a9f7d691e36397300285e1df3e4dc36fbb427afb2a6317e"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/images/generations/route.js",
            "tlsh": "c44309e5b2b37553877634f8a12f4807f0a69874b08cc960e791c9d329b889c51bbf6c",
            "sha256": "aa3c0203ad442a0cea93849abd5c5365c918632b2ad93326baa6e64a04a4f700"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/messages/route.js",
            "tlsh": "091296a396fd37aaae7063dcd7938e407040c86132098161eb4aafaf41cc5d553edb78",
            "sha256": "6cb4ca8e3be52b7bf6a7f2b07210e2f2c2d6490e63921477a2314df9a00575b6"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/models/[kind]/route.js",
            "tlsh": "0022a8a396fd37aaae7453dcd7938e403081c87132098161eb4aafab01c85d557ed778",
            "sha256": "d2d447e76f457df4f32575d2d678ab5328a4838d4728bb56d5f8387392b713ad"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/models/route.js",
            "tlsh": "751277b396fd27aa6e7463dcd7928e407091c861320d8161eb4a9faf41ccac553ec778",
            "sha256": "6287d54d0d5b7db1338c1528b82d56fa32265b1c9f471858d5a5f3be70601ff8"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/responses/compact/route.js",
            "tlsh": "072286a396fd37aaae7463dcd7938e403041c86532098161eb4aafaf41cc6d553ec778",
            "sha256": "6e9283ec8b85cd0fba5223595a697714a5c9ae861b6a24d5ccaf1592ebb98fcf"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/responses/route.js",
            "tlsh": "6e12a7a396fd37aaae7063dcd7978e403040c86132098161eb4aafaf41cc6d553ec778",
            "sha256": "ed9a0036fe40a294ae8ecc92c55a991e5cd961ce22228b8d45330b7945bc5ea0"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/route.js",
            "tlsh": "421276b396fd27aaae7463dcd7928e407081c861320d8161eb4a9f9f41ccac553ec778",
            "sha256": "9c5304ed368b426439ddd9ce90c2ecb01a369694031669b52ba71e95fe436d71"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/search/route.js",
            "tlsh": "3af24de2b2f63543df791269f18e1440b268ec17654cc8a4e7a94d9b54c8cf492ffb28",
            "sha256": "70b8e377c0a3ddc705f2a70a69ccd640475956fe064429394da0b16a8dfaa916"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/videos/[id]/route.js",
            "tlsh": "a31276a396fd37aaae7463dcd7928e403141c861320d8161eb4aaf9f41cc6d563ec778",
            "sha256": "6f177a049b49dae1e65a9f1b2aa001f13e2f2afb9060f1f1fa512c0b9b1e5bd9"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/videos/edits/route.js",
            "tlsh": "931275b396fd37aaae7063dcd7938e403140c861220d8161eb4aafaf41c86d557ec778",
            "sha256": "887e828758d3e76f23f4d172732168391cebab60e481117386ea202c1f6d49ad"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/videos/extensions/route.js",
            "tlsh": "881286a396fd37aaae7463dcd7928e407150c861320d8161eb4aaf9f01cc6d563ec778",
            "sha256": "d834612aadecb7e1f75ccedc332ac21adba04f5ae500a1ec9abf8ecda2648c79"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/videos/generations/route.js",
            "tlsh": "ce1276b396fd37aaae7063dcd7928e403150c861320d8161eb4aaf9b41ccad553ec778",
            "sha256": "a956dcd72bc1ed446f1e2c34820c44cb3f4ee9675d42f20bf99814fec0950517"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1/web/fetch/route.js",
            "tlsh": "7d922af3b6fb76579f7052aca68249007188cc20a60dc525f3856e5f15d88d89bfdb38",
            "sha256": "79152e6b9c9b095e0910bfeb367e2644037733a6dff46737397a77793d387d11"
        },
        {
            "path": "app/.next-cli-build/server/app/api/v1beta/models/[...path]/route.js",
            "tlsh": "0582f9b6b6fa37a5af7523e8f3938d003090cc5562488161e74aeedb04d85c596fdb38",
            "sha256": "cfe34d05e6a4ca56e2839690e9a9d58b03e92ad617e83a8b45e17f795780fe49"
        },
        {
            "path": "app/.next-cli-build/server/app/api/version/shutdown/route.js",
            "tlsh": "24521975d26a6b7b9ef022f8f0268b4195d98464120541b17f8dee8b344ccc9a73d7bc",
            "sha256": "2a8a9fd15dc77b565b8b49779a63638f676c9779f5a101a9243ac28f48caa2a2"
        },
        {
            "path": "app/.next-cli-build/server/app/api/version/update/route.js",
            "tlsh": "0a521a75d26a7b7b9eb022fcf0368b4195d58464120541716f8dee8b248c8c9a63d7bc",
            "sha256": "cc44b32989a7092a7709d81c2fe514d134f430b8a4ed61f45ae30bb3bb90f024"
        },
        {
            "path": "app/.next-cli-build/server/app/login/page.js",
            "tlsh": "3f3264c591e6dadeb6b404dcf26acd05b007c874920a6460abf0aa5f05c5dcc36f9798",
            "sha256": "b7b2af48ddc8dea0a889bebf2b3eccbf04c17dbd51cd05fcaaed540d4dab8f5a"
        },
        {
            "path": "app/.next-cli-build/server/chunks/162.js",
            "tlsh": "4c148705b171afdebd7f0aa8a96e820c611f0b89db0fc4b5b9b8b41d15090d47e47bc9",
            "sha256": "a33eff807db446205ec354be70de2598b5c167ffa4f1d02cdad48269b2141c7e"
        },
        {
            "path": "app/.next-cli-build/server/chunks/318.js",
            "tlsh": "e9146da5f7b379230fce22a2f5ca1501e1ec8856e18c4465f194cdea1c986d9d3b7f28",
            "sha256": "73d2bf7bbef7c6df0c9b1e871e0603ce29c397873a2687dcbc462a23e249372a"
        },
        {
            "path": "app/.next-cli-build/server/chunks/3943.js",
            "tlsh": "c7c208d97bf7b0a28f973933fc8a6102722d864dc00d4515ebd058da2d1c227a3b7b68",
            "sha256": "a0af5205d95448b7ab4854753420c16787284b87ea74a4086b22879e97730425"
        },
        {
            "path": "app/.next-cli-build/server/chunks/5612.js",
            "tlsh": "48920a78f7f7bae38f8b3866f6991606f0ac4988404c95c5f3d05aa61c54489e377b28",
            "sha256": "aacb9460e29d6b81618c5d2675598d934ed14b5e53559e5b4a11a6743109d70a"
        },
        {
            "path": "app/.next-cli-build/server/chunks/6457.js",
            "tlsh": "22c2e8a673a3723ed7f40861c11e5741e29a0e24890d04a0b579da4f392c53da6f7fbd",
            "sha256": "dc12ec98bd41861423b8fbb897d9091a8aae742b2c263359620814e2848d85f4"
        },
        {
            "path": "app/.next-cli-build/server/chunks/827.js",
            "tlsh": "bff21ae633f3a4830faf59b278c9308360ed8e98991e1c04ef9046d71c9dda559b7b58",
            "sha256": "3b7edf875bf428976f5a9ec941a83f8b42460aa92b0ed255fab4482d512d9d41"
        },
        {
            "path": "app/.next-cli-build/server/chunks/915.js",
            "tlsh": "c7f24b66b3aa7f735fb42071e1066140e1fdca16a3089550b68ccdcb7b1d07892bbfa5",
            "sha256": "c4ea12329535dcaffb6b162aeea4edfa75d5a41e85ecaf90dae39b768f9ba138"
        },
        {
            "path": "app/.next-cli-build/server/middleware.js",
            "tlsh": "767408b473e6b95246a750e8c03b0003f2699da1a05c44b4f7d5dccb38a89dd92bbf79",
            "sha256": "753ad8046a44b5614aebaf5c2b3e15be416d217b60e5f908991d1f6b28bdd9a8"
        },
        {
            "path": "app/.next-cli-build/static/chunks/8281-3e327c3712762c44.js",
            "tlsh": "00145405a161afdcfdbf06a4ad6e805ca11f0f89ca0fc475b6b8b41915860d8be47bcd",
            "sha256": "976bc7fc0fa0e7030cba4fdc8b88bbcea48750ca51f248ba89a62e93862fcb63"
        },
        {
            "path": "app/.next-cli-build/static/chunks/app/(dashboard)/dashboard/providers/[id]/page-5afd8ee01b4fead7.js",
            "tlsh": "9c73a691f3a6bfecae6f04d5656e800ca11e4f88cb3a4475f5b4382a1509584be93bcd",
            "sha256": "38519f07fc046ef98b61815414682d594870b7ec0e0bfe3d240384a8428c6212"
        },
        {
            "path": "app/src/lib/oauth/services/xai.js",
            "tlsh": "32f1940825b3957216bb169a8a1fe035a33a81473c4cb8647f8cc3941f4e92dd67fad8",
            "sha256": "89be1640c3298b4af35585863788259a684306873a0d59efbb0a9142777278c5"
        },
        {
            "path": "app/src/mitm/server.js",
            "tlsh": "81644b8436b078f043b262f7182f814bf139a515941e8925f665dcdab8acf9cd13af78",
            "sha256": "e037cd6acc0c09ee05818a2e5d4fdc0952afbf55963cc495e31319ca4c1b0cd0"
        },
        {
            "path": "cli.js",
            "tlsh": "70e2b749a5fb21345ab3e0696b9b5017776ad0132209dfa87e9d83413f8253c82b27fd",
            "sha256": "560270ee6e9a10110f58d98fe6be942eb179c55dc2094a8ef72769602ea076b1"
        },
        {
            "path": "hooks/sqliteRuntime.js",
            "tlsh": "7cd195c5c4f332761be6d1a2763b24d6a7e8c802651ad5c0a4ac41c53f8746982779bf",
            "sha256": "ac96b20e2a396cc0283e311af65625c718b805bc41346e6437a81dfeaf1344d3"
        }
    ]
}