zed-context-manipulator

v1.0.0 suspicious
4.0
Medium Risk

Search, filter, edit, and prune Zed agent conversation threads

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows no direct signs of malicious intent, but its metadata and potential for shell exploitation raise concerns. Further scrutiny is advised.

  • High metadata risk due to recent creation and lack of maintainer information.
  • Potential shell risk from subprocess calls.
Per-check LLM notes
  • Network: No network calls detected, which is normal and not indicative of malicious activity.
  • Shell: Subprocess call to an editor might be legitimate for editing purposes, but could potentially be exploited. Further investigation into the context of use is recommended.
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious obfuscation.
  • Credentials: No credential harvesting patterns detected, indicating low risk of malicious credential theft.
  • Metadata: The package is highly suspicious due to its recent creation and lack of maintainer information.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 2.0

Found 1 shell execution pattern(s)

  • curses.endwin() subprocess.call([editor, tmp]) except OSError: return No
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: live.com>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 5.0

Git history flags: Repository created very recently: 0 day(s) ago (2026-06-05T01:28:30Z)

  • Repository created very recently: 0 day(s) ago (2026-06-05T01:28:30Z)
  • All 13 commits happened within 24 hours
⚠ Maintainer History score 8.0

4 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Package uploaded less than 24 hours ago (2026-06-05T05:44:48.000Z)
  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!