w3bs.AccountStart building
PACKAGES / Profullstack

pairux

Screen sharing app whose pairux command brings AI agents into a live PairUX session as participants.

ThreatCrush · No malware found
INSTALLw3bs install pairux.com/pairux

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install pairux.com/pairuxInstall pairux and track it for updates
  2. pairuxLaunch the PairUX desktop app
  3. pairux join <join-code> --name <name>Join a live session from the terminal as a labelled participant
  4. pairux say "<message>"Post a message in the session chat
  5. pairux leaveLeave the session

Every option: pairux --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in pairux 0.22.0. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-11-02 23:01 UTC · threatcrush 0.13.30
Files
1175 (installer + github.com/profullstack/pairux.com@0a907472aae4)
Findings
4 high · 24 medium · 21 low
49 other findings (not malware)
  • high
    eval on an expanded stringsource/.githooks/pre-commit:33sh-eval-expansion · CWE-78
  • high
    Electron renderer given Node accesssource/apps/desktop/src/main/window.ts:49js-electron-node-integration · CWE-1188
  • high
    unquoted expansion in a destructive commandsource/apps/installer/scripts/install.sh:717sh-unquoted-expansion-destructive · CWE-78
  • high
    unquoted expansion in a destructive commandsource/apps/installer/scripts/install.sh:948sh-unquoted-expansion-destructive · CWE-78
  • medium
    network output piped into a shellsource/apps/installer/scripts/install.sh:693sh-remote-script-execution · CWE-494
  • medium
    network output piped into a shellsource/apps/installer/scripts/install.sh:840sh-remote-script-execution · CWE-494
  • medium
    network output piped into a shellsource/apps/installer/scripts/install.sh:842sh-remote-script-execution · CWE-494
  • medium
    network output piped into a shellsource/apps/installer/scripts/install.sh:1138sh-remote-script-execution · CWE-494
  • medium
    network output piped into a shellsource/apps/installer/scripts/install.sh:1140sh-remote-script-execution · CWE-494
  • medium
    network output piped into a shellsource/apps/livekit/setup-livekit-server.sh:93sh-remote-script-execution · CWE-494
  • medium
    network output piped into a shellsource/apps/turn/deploy-droplet.sh:62sh-remote-script-execution · CWE-494
  • medium
    unescaped HTML renderingsource/apps/web/src/app/blog/[slug]/page.tsx:52js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/apps/web/src/app/blog/[slug]/page.tsx:79js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/apps/web/src/app/c/[handle]/page.tsx:199js-unescaped-html-sink · CWE-79
  • medium
    redirect to a non-constant destinationsource/apps/web/src/app/cli/authorize/consent.tsx:68js-open-redirect · CWE-601
  • medium
    unescaped HTML renderingsource/apps/web/src/app/l/[joinCode]/page.tsx:146js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/apps/web/src/app/l/[joinCode]/page.tsx:230js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/apps/web/src/app/layout.tsx:150js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/apps/web/src/app/live/page.tsx:154js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/apps/web/src/app/page.tsx:98js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/apps/web/src/app/pricing/page.tsx:262js-unescaped-html-sink · CWE-79
  • medium
    redirect to a non-constant destinationsource/apps/web/src/app/settings/copilot/copilot-settings.tsx:144js-open-redirect · CWE-601
  • medium
    unescaped HTML renderingsource/apps/web/src/app/u/[username]/page.tsx:285js-unescaped-html-sink · CWE-79
  • medium
    redirect to a non-constant destinationsource/apps/web/src/components/billing/useCheckout.ts:81js-open-redirect · CWE-601
  • medium
    unescaped HTML renderingsource/apps/web/src/components/universal-footer.tsx:29js-unescaped-html-sink · CWE-79
  • medium
    redirect to a non-constant destinationsource/apps/web/src/hooks/useDesktopHandoff.ts:24js-open-redirect · CWE-601
  • medium
    regex with nested unbounded quantifierssource/apps/web/src/lib/deliverable.ts:11redos-nested-quantifier · CWE-1333
  • medium
    SQL built from a template literal or f-stringsource/packages/ai-core/src/prompts.ts:36sql-template-interpolation · CWE-89
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:138secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:139secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:340secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:341secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:371secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:372secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:383secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:397secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:398secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:405secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:415secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:416secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:453secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/commands.test.ts:454secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/desktop/src/main/agent-cli/copilot.test.ts:92secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/livekit/fly.toml:12secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/apps/turn/fly.toml:11secret-generic-credential · CWE-798
  • low
    OpenAI API Keysource/apps/web/src/lib/copilot/keys.test.ts:62secret-openai-key · CWE-798
  • low
    Hardcoded Credentialsource/apps/web/src/lib/youtubeAutoLive.test.ts:90secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/docs/API.md:747secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/docs/API.md:753secret-generic-credential · CWE-798

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/pairux.com/pairux/badge.svg)](https://w3bs.org/packages/pairux.com/pairux)