@agentai2027/openclaw-zh@2026.6.11-zh: Clean npm security report | LPM Firewall

Loading npm security reports…

@agentai2027/openclaw-zh@2026.6.11-zh: Clean npm security report | LPM Firewall

Decision evidence

public snapshot

AI called this Clean at 82.0% confidence as Benign with medium false-positive risk.

Evidence for block

package.json defines preinstall, postinstall, prepare lifecycle scripts.
scripts/postinstall-bundled-plugins.mjs can prune dist files, legacy plugin-runtime-deps, compile cache, and write OpenClaw plugin index state.
scripts/prepare-git-hooks.mjs would set core.hooksPath only when a git-hooks directory exists in a worktree.

Evidence against

scripts/preinstall-package-manager-warning.mjs only emits a package-manager warning.
No git-hooks directory was present in the inspected package root, so prepare skips hook mutation in this package.
Postinstall file writes/removals are bounded to package dist, known OpenClaw state/cache paths, and a Baileys node_modules hotfix.
dist/src-Cp7ODFk2.js and dist/dist-7SQswLRi.js metadata/secret patterns are bundled Google/Azure auth libraries, not install-time harvesting.
dist/schtasks-BSBYFHUM.js persistence code is a user-invoked Windows gateway daemon installer, not lifecycle execution.
No source-grounded credential exfiltration, destructive behavior, or attacker endpoint was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4,880 file(s), 52.5 MB of source, external domains: 127.0.0.1, 169.254.169.254, 169.254.170.2, a.co, account.minimax.io, account.minimaxi.com, accounts.feishu.cn, accounts.google.com, accounts.larksuite.com, agentskills.io, ai.azure.com, ai.ollama.com, aiplatform.googleapis.com, aistudio.google.com, aka.ms, albumart.url, api-dashboard.search.brave.com, api-data.line.me, api.anthropic.com, api.botframework.com, api.chutes.ai, api.cohere.ai, api.dev.runwayml.com, api.elevenlabs.io, api.example.com, api.github.com, api.imgflip.com, api.individual.githubcopilot.com, api.line.me, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.novita.ai, api.openai.com, api.plivo.com, api.pluralkit.me, api.push.apple.com, api.sandbox.push.apple.com, api.search.brave.com, api.senseaudio.cn, api.synthetic.new, api.telegram.org, api.telnyx.com, api.together.xyz, api.twilio.com, api.voyageai.com, api.x.ai, api.xiaomimimo.com

Source & flagged code

20 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-bundled-plugins.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/dist-7SQswLRi.jsView file

5588patternName = private_key_rsa severity = critical line = 5588 matchedText = if (type...g");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/dist-7SQswLRi.jsView on unpkg · L5588

5588patternName = private_key_rsa severity = critical line = 5588 matchedText = if (type...g");

Critical

Secret Pattern

RSA private key in dist/dist-7SQswLRi.js

dist/dist-7SQswLRi.jsView on unpkg · L5588

13656patternName = generic_password severity = medium line = 13656 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/dist-7SQswLRi.js

dist/dist-7SQswLRi.jsView on unpkg · L13656

21205patternName = generic_password severity = medium line = 21205 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/dist-7SQswLRi.js

dist/dist-7SQswLRi.jsView on unpkg · L21205

dist/loader-frTDr6Tq.jsView file

125maybeWarnTrustedHookSource(entry.hook.source); L126: const mod = await import(buildImportUrl(safeHandlerPath, entry.hook.source)); L127: const exportName = entry.metadata?.export ?? "default";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/loader-frTDr6Tq.jsView on unpkg · L125

dist/dreaming-phases-Bs2VYR3s.jsView file

1import { n as asNullableRecord } from "./record-coerce-DHZ4bFlT.js"; L2: import { i as formatErrorMessage } from "./errors-CEcTGQhf.js";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/dreaming-phases-Bs2VYR3s.jsView on unpkg · L1

dist/schtasks-BSBYFHUM.jsView file

7import { n as resolveGatewayTaskScriptPath } from "./paths-t9LtxoUy.js"; L8: import { a as getWindowsSystem32ExePath, r as getWindowsPowerShellExePath, t as getWindowsCmdExePath } from "./windows-install-roots-C10Fw_vo.js"; L9: import { o as inspectPortUsage } from "./ports-DPVI8Qf_.js"; ... L13: import { t as [redacted] } from "./gateway-processes-D139VAwC.js"; L14: import { t as execSchtasks } from "./schtasks-exec-9yEnZ3_P.js"; L15: import path from "node:path"; ... L65: return `<?xml version="1.0" encoding="UTF-16"?> L66: <Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task"> L67: <RegistrationInfo> ... L108: const xmlPath = path.join(tmpDir, "task.xml"); L109: const bom = Buffer.from([255, 254]); L110: const body = Buffer.from(xml, "utf16le");

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/schtasks-BSBYFHUM.jsView on unpkg · L7

dist/src-Cp7ODFk2.jsView file

4import { t as require_json_bigint } from "./json-bigint-BvSgUeOL.js"; L5: //#region node_modules/gaxios/build/cjs/src/util.cjs L6: var require_util$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => { ... L61: * L62: * @privateRemarks L63: * ... L155: case "stream": return data; L156: case "json": return JSON.parse(JSON.stringify(data)); L157: case "arraybuffer": return JSON.parse(Buffer.from(data).toString("utf8")); ... L185: if (!obj || typeof obj !== "object") return; L186: else if (obj instanceof FormData || obj instanceof URLSearchParams || "forEach" in obj && "set" in obj) obj.forEach((_, key) => { L187: if (["grant_type", "assertion"].includes(key) || /secret/.test(key)) obj.set(key, REDACT);

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/src-Cp7ODFk2.jsView on unpkg · L4

dist/control-ui/assets/config-runtime-Chws_C6h.jsView file

2contains invisible/control Unicode U+FEFF (zero width no-break space) `?(o++,s=0):e?s+=e.length:s++,e&&(a+=e.length),e}var te={default(){switch(_){case` `:case`\v`:case`\f`:case` `:case`\xA0`:case`<U+FEFF>`:case`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/control-ui/assets/config-runtime-Chws_C6h.jsView on unpkg · L2

skills/model-usage/scripts/test_model_usage.pyView file

•path = skills/model-usage/scripts/test_model_usage.py kind = build_helper sizeBytes = 5654 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/model-usage/scripts/test_model_usage.pyView on unpkg

dist/proxy-cli.runtime-Dk8MA3v6.jsView file

856patternName = generic_password severity = medium line = 856 matchedText = url.pass...ed";

Medium

Secret Pattern

Hardcoded password in dist/proxy-cli.runtime-Dk8MA3v6.js

dist/proxy-cli.runtime-Dk8MA3v6.jsView on unpkg · L856

dist/i18n-lgLUhBUJ.jsView file

11patternName = generic_password severity = medium line = 11 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in dist/i18n-lgLUhBUJ.js

dist/i18n-lgLUhBUJ.jsView on unpkg · L11

docs/help/faq.mdView file

1511patternName = generic_password severity = medium line = 1511 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/help/faq.md

docs/help/faq.mdView on unpkg · L1511

docs/gateway/tailscale.mdView file

118patternName = generic_password severity = medium line = 118 matchedText = auth: { ..." },

Medium

Secret Pattern

Hardcoded password in docs/gateway/tailscale.md

docs/gateway/tailscale.mdView on unpkg · L118

docs/gateway/configuration-reference.mdView file

515patternName = generic_password severity = medium line = 515 matchedText = // passw...WORD

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L515

545patternName = generic_password severity = medium line = 545 matchedText = // passw...rd",

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L545

docs/gateway/config-channels.mdView file

756patternName = generic_password severity = medium line = 756 matchedText = password...D}",

Medium

Secret Pattern

Hardcoded password in docs/gateway/config-channels.md

docs/gateway/config-channels.mdView on unpkg · L756

docs/channels/matrix.mdView file

74patternName = generic_password severity = medium line = 74 matchedText = password...cret

Medium

Secret Pattern

Hardcoded password in docs/channels/matrix.md

docs/channels/matrix.mdView on unpkg · L74

docs/channels/irc.mdView file

206patternName = generic_password severity = medium line = 206 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/channels/irc.md

docs/channels/irc.mdView on unpkg · L206