@0xmaxma/claude-gateway@1.7.10: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

@0xmaxma/claude-gateway@1.7.10: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = if command -v bun >/dev/null 2>&1; then bun install --cwd mcp; else echo 'Warning: bun not found. Run `cd mcp && bun install` manually to enable MCP tools.'; fi

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = if command -v bun >/dev/null 2>&1; then bun install --cwd mcp; else echo 'Warning: bun not found. Run `cd mcp && bun install` manually to enable MCP tools.'; fi

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/discord/receiver.jsView file

36exports.DiscordReceiver = void 0; L37: const child_process_1 = require("child_process"); L38: const path = __importStar(require("path"));

High

Child Process

Package source references child process execution.

dist/discord/receiver.jsView on unpkg · L36

dist/api/router.jsView file

44Source sends the broad process environment to a literal external destination. L44: const path = __importStar(require("path")); L45: const child_process_1 = require("child_process"); L46: const runner_1 = require("../agent/runner"); ... L65: try { L66: const res = await fetch('https://slack.com/api/auth.test', { L67: method: 'POST', ... L72: }); L73: const json = (await res.json()); L74: return { ok: json.ok, error: json.error }; ... L123: }; L124: const TELEGRAM_API_BASE = process.env.TELEGRAM_API_BASE ?? 'https://api.telegram.org'; L125: /** Max simultaneous wizard/start Claude subprocesses to prevent resource exhaustion. */

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/api/router.jsView on unpkg · L44

123}; L124: const TELEGRAM_API_BASE = process.env.TELEGRAM_API_BASE ?? 'https://api.telegram.org'; L125: /** Max simultaneous wizard/start Claude subprocesses to prevent resource exhaustion. */ ... L130: return new Promise((resolve, reject) => { L131: const child = (0, child_process_1.spawn)('claude', ['--print', '--dangerously-sk[redacted]'], { L132: env: { ...process.env },

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/api/router.jsView on unpkg · L123

dist/api/packages.jsView file

225// Native-installer packages (e.g. claude-code) update the binary on PATH L226: // via their own updater. npm install -g would write a separate npm copy L227: // that isn't the running binary, so it must not be used here. ... L230: try { L231: (0, child_process_1.execSync)(`${config.bin} update`, { L232: stdio: ['pipe', 'pipe', 'pipe'],

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/api/packages.jsView on unpkg · L225

dist/session/process.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @0xmaxma/claude-gateway@1.7.8 matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.7.8 similarity = 0.717 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/session/process.jsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 12-52json

12 },

13 "engines": {

14 "node": ">=22"

15 },

16 "files": [

17 "dist/",

18 "lib/",

19 "resource/",

20 "mcp/",

21 "!mcp/node_modules",

22 "!mcp/node_modules/**",

23 "README.md",

24 "config.template.json"

25 ],

26 "publishConfig": {

27 "access": "public"

28 },

29 "scripts": {

30 "build": "tsc",

31 "start": "node --no-warnings=ExperimentalWarning --env-file-if-exists=.env dist/index.js",

32 "postinstall": "if command -v bun >/dev/null 2>&1; then bun install --cwd mcp; else echo 'Warning: bun not found. Run `cd mcp && bun install` manually to enable MCP tools.'; fi",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L32

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 "pretest": "npm run build",

34 "test": "NODE_OPTIONS=--max-old-space-size=2560 jest",

35 "pretest:unit": "npm run build",

36 "test:unit": "jest --testPathPattern=unit",

37 "test:e2e": "jest --testPathPattern=tests/e2e --forceExit",

38 "integration": "jest --testPathPattern=integration --testTimeout=15000",

39 "integration:ma": "jest --testPathPattern=multi-agent --testTimeout=15000",

40 "test:manual": "jest --testPathPattern=phase-manual --testTimeout=15000",

41 "integration:hb": "jest --testPathPattern=heartbeat-e2e --testTimeout=15000",

42 "integration:cs": "jest --testPathPattern=character-system --testTimeout=15000",

43 "typecheck": "tsc --noEmit"

44 },

45 "dependencies": {

46 "@line/bot-sdk": "^11.0.2",

47 "@xterm/headless": "^6.0.0",

48 "chokidar": "^3.5.0",

49 "cron-parser": "^5.5.0",

50 "express": "^4.18.0",

51 "js-yaml": "^4.1.0",

52 "lru-cache": "^10.0.0",

dist/discord/receiver.jsView file

Lines 16-56javascript

16 o["default"] = v;

17});

18var __importStar = (this && this.__importStar) || (function () {

19 var ownKeys

dist/api/router.jsView file

44Source sends the broad process environment to a literal external destination. L44: const path = __importStar(require("path")); L45: const child_process_1 = require("child_process"); L46: const runner_1 = require("../agent/runner"); ... L65: try { L66: const res = await fetch('https://slack.com/api/auth.test', { L67: method: 'POST', ... L72: }); L73: const json = (await res.json()); L74: return { ok: json.ok, error: json.error }; ... L123: }; L124: const TELEGRAM_API_BASE = process.env.TELEGRAM_API_BASE ?? 'https://api.telegram.org'; L125: /** Max simultaneous wizard/start Claude subprocesses to prevent resource exhaustion. */

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/api/router.jsView on unpkg · L44

123}; L124: const TELEGRAM_API_BASE = process.env.TELEGRAM_API_BASE ?? 'https://api.telegram.org'; L125: /** Max simultaneous wizard/start Claude subprocesses to prevent resource exhaustion. */ ... L130: return new Promise((resolve, reject) => { L131: const child = (0, child_process_1.spawn)('claude', ['--print', '--dangerously-sk[redacted]'], { L132: env: { ...process.env },

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/api/router.jsView on unpkg · L123

dist/api/packages.jsView file

225// Native-installer packages (e.g. claude-code) update the binary on PATH L226: // via their own updater. npm install -g would write a separate npm copy L227: // that isn't the running binary, so it must not be used here. ... L230: try { L231: (0, child_process_1.execSync)(`${config.bin} update`, { L232: stdio: ['pipe', 'pipe', 'pipe'],

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/api/packages.jsView on unpkg · L225

dist/session/process.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @0xmaxma/claude-gateway@1.7.8 matchedIdentity = npm:QDB4bWF4bWEvY2xhdWRlLWdhdGV3YXk:1.7.8 similarity = 0.717 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/session/process.jsView on unpkg