@agentprojectcontext/apx@1.113.0: Suspicious npm security report

Loading npm security reports…

@agentprojectcontext/apx@1.113.0: Suspicious npm security report | LPM Firewall

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The manifest runs a postinstall script that invokes the package's skill refresh and global skill installation routines.
Postinstall invokes both routines automatically unless skill refresh is skipped; skipping refresh does not skip global skill installation.
The install routine targets global skill directories used by Claude Code, Cursor, Codex, and other skills.sh adopters.
The postinstall refresh can fetch the APC skill from the package's named GitHub source.
The Claude integration target writes the package skill to a Claude skill file; this is package-owned skill setup.
The listed MCP configuration files are discovered as project sources for reading existing server settings.

Evidence against

The inspected install behavior sets up skill files; these excerpts do not show credential collection, destructive changes, or remote code execution.
The foreign MCP configuration paths are listed as sources for discovery, not as automatic installation targets.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,110 file(s), 9.36 MB of source, external domains: 127.0.0.1, 192.168.1.50, accounts.google.com, agentprojectcontext.com, agentprojectcontext.github.io, api.anthropic.com, api.cerebras.ai, api.elevenlabs.io, api.example.com, api.github.com, api.groq.com, api.openai.com, api.search.brave.com, api.telegram.org, app.asana.com, base-ui.com, box.lan, bun.sh, cdn.tailwindcss.com, console.cloud.google.com, discord.gg, example.com, generativelanguage.googleapis.com, github.com, html.duckduckgo.com, maquina.lan, mcp.example.com, nominatim.openstreetmap.org, oauth2.googleapis.com, opencode.ai, opencode.internal, openrouter.ai, raw.githubusercontent.com, react.dev, reactrouter.com, registry.npmjs.org, router.project-osrm.org, routing.openstreetmap.de, t.me, tailscale.com, unpkg.com, valhalla1.openstreetmap.de, wttr.in, www.apple.com, www.google.com, www.googleapis.com, www.w3.org

Source & flagged code

27 flagged

package.jsonView file

Lines 29-69json

29 "!**/test-results/**",

30 "!**/*.tsbuildinfo"

31 ],

32 "engines": {

33 "node": ">=22"

34 },

35 "scripts": {

36 "start": "node src/host/daemon/index.js",

37 "smoke": "node src/host/daemon/smoke.js",

38 "test": "node scripts/test.js",

39 "test:ci": "node scripts/test-ci.js",

40 "lint": "eslint .",

41 "lint:fix": "eslint . --fix",

42 "lint:web": "node scripts/lint-web.js",

43 "typecheck:tui": "node scripts/typecheck-tui.js",

44 "build:web": "node scripts/build-web.js",

45 "preflight": "npm run lint && npm run lint:web && npm run test:ci && node scripts/build-web.js && (cd src/interfaces/web && npx --no-install tsc --noEmit) && npm run typecheck:tui",

46 "upgrade": "pnpm install && pnpm add -g .",

47 "prepare": "node scripts/install-githooks.js && node scripts/sync-apc-skill.js",

48 "prepack": "node scripts/sync-apc-skill.js && node scripts/build-web.js",

49 "postinstall": "node src/interfaces/cli/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L49

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L49

50 "smoke:seam": "node --test --test-reporter=spec tests/smoke/*.smoke.js"

51 },

52 "dependencies": {

53 "@modelcontextprotocol/sdk": "^1.29.0",

54 "@opentui/core": "^0.2.16",

55 "@opentui/keymap": "^0.2.16",

56 "@opentui/solid": "^0.2.16",

57 "@solid-primitives/event-bus": "^1.1.3",

58 "@solid-primitives/scheduled": "^1.5.2",

59 "cli-sound": "^1.1.3",

60 "clipboardy": "^4.0.0",

61 "cron-parser": "^5.5.0",

62 "effect": "^3.21.2",

63 "express": "^4.21.0",

64 "fuzzysort": "^3.1.0",

65 "node-fetch": "^3.3.2",

66 "open": "^10.1.2",

67 "opentui-spinner": "^0.0.6",

68 "qrcode-terminal": "^0.12.0",

69 "remeda": "^2.21.0",

src/core/artifacts/tunnel.jsView file

Lines 1-32javascript

1// Quick public tunnels for local preview ports.

2//

3// Wraps zero-config tunnel providers so an ephemeral artifact preview running

4// on http://localhost:<port> can be shared with a temporary public URL:

5// - cloudflared → `cloudflared tunnel --url http://localhost:PORT`

6// (no account needed; prints an https://*.trycloudflare.com URL)

7// - localtunnel → `npx -y localtunnel --port PORT`

8// (prints https://*.loca.lt; fallback when cloudflared absent)

9//

10// The manager spawns the provider, scrapes the public URL from its output, and

src/core/net/tailscale.jsView file

Lines 25-65javascript

25const CANDIDATES = [

26 "/Applications/Tailscale.app/Contents/MacOS/Tailscale",

27 "/usr/local/bin/tailscale",

28 "/opt/homebrew/bin/tailscale",

29 "/usr/bin/tailscale",

30 "/usr/sbin/tailscale"

src/core/http-tools/browser.jsView file

Lines 710-750javascript

710 if (!code) throw new Error("code required");

711 return onPage((page) => evaluateOnPage(page, code));

712}

src/core/voice/transcription.js#virtual:normalized:round1View file

52* else faster-whisper cpu. L53: * Safety net: if the chosen mlx model isn"t downloaded yet, fall back to\n * faster-whisper so a live voice turn never stalls on a multi-GB download —\n * the model-manager UI hand... L54: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/core/voice/transcription.js#virtual:normalized:round1View on unpkg · L52

src/core/channels/whatsapp/stickers.jsView file

Lines 16-56javascript

16// across senders and chats (the same sticker pack sends identical bytes), which

17// is exactly the property a lexicon needs and exactly what a per-message id

18// lacks.

19//

20// The owner can overwrite any entry with their own words (`meaning_source:

21// "owner"`), and a human meaning is never overwritten by a later automatic

22// description — the point of learning is that it accumulates.

23import fs from "node:fs";

src/core/desktop/autostart.jsView file

Lines 1-27javascript

1// Per-user "launch APX Desktop at login" wiring. Used by BOTH the CLI

2// (`apx desktop install` / `uninstall`) and the daemon's

3// /api/desktop/autostart endpoint so the web admin can toggle the same setting

4// without shelling out.

5//

6// Per-user, never sudo, fully reversible. Three platforms supported:

7//

8// macOS → ~/Library/LaunchAgents/dev.apx.desktop.plist + launchctl load -w

9// win32 → HKCU\Software\Microsoft\Windows\CurrentVersion\Run\APXDesktop

10// linux → ~/.config/autostart/apx-desktop.desktop

src/interfaces/cli/http.jsView file

7import fs from "node:fs"; L8: import nodeHttp from "node:http"; L9: import os from "node:os"; ... L11: import { TOKEN_PATH, LOG_PATH } from "#core/config/paths.js"; L12: import { spawn } from "node:child_process"; L13: import { fileURLToPath } from "node:url"; ... L17: L18: const DEFAULT_PORT = parseInt(process.env.APX_PORT || "7430", 10); L19: const DEFAULT_HOST = process.env.APX_HOST || "127.0.0.1";

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/interfaces/cli/http.jsView on unpkg · L7

•matchType = normalized_sha256 matchedPackage = @agentprojectcontext/apx@1.111.0 matchedPath = src/interfaces/cli/http.js matchedIdentity = npm:[redacted]:1.111.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/interfaces/cli/http.jsView on unpkg

src/host/daemon/pty-bridge.pyView file

•path = src/host/daemon/pty-bridge.py kind = build_helper sizeBytes = 3335 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/host/daemon/pty-bridge.pyView on unpkg

src/interfaces/web/dist/sw.js.gzView file

•path = src/interfaces/web/dist/sw.js.gz kind = compressed_blob sizeBytes = 1818 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

src/interfaces/web/dist/sw.js.gzView on unpkg

src/interfaces/web/dist/modules/blobs/onyx.svg.brView file

•path = [redacted].svg.br kind = high_entropy_blob sizeBytes = 37288 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/interfaces/web/dist/modules/blobs/onyx.svg.brView on unpkg

src/core/agent/shell/background.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 12

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/core/agent/shell/background.js#virtual:normalized:round1View on unpkg

src/interfaces/cli/commands/image.jsView file

•matchType = normalized_sha256 matchedPackage = @agentprojectcontext/apx@1.111.0 matchedPath = [redacted].js matchedIdentity = npm:[redacted]:1.111.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/interfaces/cli/commands/image.jsView on unpkg

src/host/daemon/api/admin.jsView file

•matchType = normalized_sha256 matchedPackage = @agentprojectcontext/apx@1.111.0 matchedPath = src/host/daemon/api/admin.js matchedIdentity = npm:[redacted]:1.111.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/host/daemon/api/admin.jsView on unpkg

src/interfaces/cli/commands/desktop.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/interfaces/cli/commands/desktop.jsView on unpkg

src/core/agent/shell/background.jsView file

•matchType = normalized_sha256 matchedPackage = @agentprojectcontext/apx@1.111.0 matchedPath = src/core/agent/shell/background.js matchedIdentity = npm:[redacted]:1.111.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/core/agent/shell/background.jsView on unpkg

src/core/desktop/process.jsView file

•matchType = normalized_sha256 matchedPackage = @agentprojectcontext/apx@1.111.0 matchedPath = src/core/desktop/process.js matchedIdentity = npm:[redacted]:1.111.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/core/desktop/process.jsView on unpkg

src/core/voice/engines/gemini.jsView file

•matchType = normalized_sha256 matchedPackage = @agentprojectcontext/apx@1.111.0 matchedPath = src/core/voice/engines/gemini.js matchedIdentity = npm:[redacted]:1.111.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/core/voice/engines/gemini.jsView on unpkg

src/host/daemon/deck-exec.jsView file

•matchType = normalized_sha256 matchedPackage = @agentprojectcontext/apx@1.111.0 matchedPath = src/host/daemon/deck-exec.js matchedIdentity = npm:[redacted]:1.111.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/host/daemon/deck-exec.jsView on unpkg

src/host/daemon/terminal-ws.jsView file

•matchType = normalized_sha256 matchedPackage = @agentprojectcontext/apx@1.111.0 matchedPath = src/host/daemon/terminal-ws.js matchedIdentity = npm:[redacted]:1.111.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/host/daemon/terminal-ws.jsView on unpkg

src/host/daemon/whisper-server.jsView file

•matchType = normalized_sha256 matchedPackage = @agentprojectcontext/apx@1.111.0 matchedPath = src/host/daemon/whisper-server.js matchedIdentity = npm:[redacted]:1.111.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/host/daemon/whisper-server.jsView on unpkg

Source & flagged code

27 flagged · loading source

package.jsonView file

•scripts.postinstall = node src/interfaces/cli/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node src/interfaces/cli/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/core/artifacts/tunnel.jsView file

12// on daemon exit. L13: import { spawn, spawnSync } from "node:child_process"; L14: import { randomUUID } from "node:crypto";

High

Child Process

Package source references child process execution.

src/core/artifacts/tunnel.jsView on unpkg · L12

6// (no account needed; prints an https://*.trycloudflare.com URL) L7: // - localtunnel → `npx -y localtunnel --port PORT` L8: // (prints https://*.loca.lt; fallback when cloudflared absent) ... L12: // on daemon exit. L13: import { spawn, spawnSync } from "node:child_process"; L14: import { randomUUID } from "node:crypto";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/core/artifacts/tunnel.jsView on unpkg · L6

src/core/net/tailscale.jsView file

45try { L46: const found = execFileSync("command", ["-v", "tailscale"], { shell: true, encoding: "utf8" }).trim(); L47: if (found) return (cachedBinary = found);

High

Shell

Package source references shell execution.

src/core/net/tailscale.jsView on unpkg · L45

•matchType = normalized_sha256 matchedPackage = @agentprojectcontext/apx@1.111.0 matchedPath = src/core/net/tailscale.js matchedIdentity = npm:[redacted]:1.111.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/core/net/tailscale.jsView on unpkg

src/core/http-tools/browser.jsView file

730// eslint-disable-next-line no-new-func L731: result = await page.evaluate(new Function(code)); L732: } catch (e) {

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/core/http-tools/browser.jsView on unpkg · L730

src/core/voice/transcription.js#virtual:normalized:round1View file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/core/voice/transcription.js#virtual:normalized:round1View on unpkg · L52

src/core/channels/whatsapp/stickers.jsView file

36* L37: * The key is base64 of WhatsApp's content hash, so it carries "/" and "+" — a L38: * path built from it straight would escape the directory on the first slash. ... L309: // sticker came back unnamed and nothing said why. L310: images: [{ data: fs.readFileSync(localPath).toString("base64"), mime }], L311: }],

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/core/channels/whatsapp/stickers.jsView on unpkg · L36

src/core/desktop/autostart.jsView file

7Trigger-reachable persistence chain: scripts.start -> src/host/daemon/index.js -> src/host/daemon/api.js -> src/host/daemon/api/desktop.js -> src/core/desktop/autostart.js L7: // L8: // macOS → ~/Library/LaunchAgents/dev.apx.desktop.plist + launchctl load -w L9: // win32 → HKCU\Software\Microsoft\Windows\CurrentVersion\Run\APXDesktop ... L19: import { DESKTOP_AUTOSTART_LOG_PATH } from "#core/config/paths.js"; L20: import { execFileSync } from "node:child_process"; L21: import { fileURLToPath } from "node:url"; ... L24: const __filename = fileURLToPath(import.meta.url); L25: const __dirname = path.dirname(__filename); L26: ... L90: L91: // The three functions below take `platform` instead of reading process.platform L92: // inline so the unsupported-platform branch is reachable fro

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

src/core/desktop/autostart.jsView on unpkg · L7

•matchType = normalized_sha256 matchedPackage = @agentprojectcontext/apx@1.111.0 matchedPath = src/core/desktop/autostart.js matchedIdentity = npm:[redacted]:1.111.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/core/desktop/autostart.jsView on unpkg

7// L8: // macOS → ~/Library/LaunchAgents/dev.apx.desktop.plist + launchctl load -w L9: // win32 → HKCU\Software\Microsoft\Windows\CurrentVersion\Run\APXDesktop ... L19: import { DESKTOP_AUTOSTART_LOG_PATH } from "#core/config/paths.js"; L20: import { execFileSync } from "node:child_process"; L21: import { fileURLToPath } from "node:url"; ... L24: const __filename = fileURLToPath(import.meta.url); L25: const __dirname = path.dirname(__filename); L26: ... L90: L91: // The three functions below take `platform` instead of reading process.platform L92: // inline so the unsupported-platform branch is reachable from a test on any

src/interfaces/cli/http.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/interfaces/cli/http.jsView on unpkg · L7

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/interfaces/cli/http.jsView on unpkg

src/host/daemon/pty-bridge.pyView file

•path = src/host/daemon/pty-bridge.py kind = build_helper sizeBytes = 3335 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/host/daemon/pty-bridge.pyView on unpkg

src/interfaces/web/dist/sw.js.gzView file

•path = src/interfaces/web/dist/sw.js.gz kind = compressed_blob sizeBytes = 1818 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

src/interfaces/web/dist/sw.js.gzView on unpkg

src/interfaces/web/dist/modules/blobs/onyx.svg.brView file

•path = [redacted].svg.br kind = high_entropy_blob sizeBytes = 37288 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/interfaces/web/dist/modules/blobs/onyx.svg.brView on unpkg

src/core/agent/shell/background.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 12

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/core/agent/shell/background.js#virtual:normalized:round1View on unpkg

src/interfaces/cli/commands/image.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/interfaces/cli/commands/image.jsView on unpkg

src/host/daemon/api/admin.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/host/daemon/api/admin.jsView on unpkg

src/interfaces/cli/commands/desktop.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/interfaces/cli/commands/desktop.jsView on unpkg

src/core/agent/shell/background.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/core/agent/shell/background.jsView on unpkg

src/core/desktop/process.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/core/desktop/process.jsView on unpkg

src/core/voice/engines/gemini.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/core/voice/engines/gemini.jsView on unpkg

src/host/daemon/deck-exec.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/host/daemon/deck-exec.jsView on unpkg

src/host/daemon/terminal-ws.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/host/daemon/terminal-ws.jsView on unpkg

src/host/daemon/whisper-server.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/host/daemon/whisper-server.jsView on unpkg

Source & flagged code

27 flagged

package.jsonView file

Lines 29-69json

29 "!**/test-results/**",

30 "!**/*.tsbuildinfo"

31 ],

32 "engines": {

33 "node": ">=22"

34 },

35 "scripts": {

36 "start": "node src/host/daemon/index.js",

37 "smoke": "node src/host/daemon/smoke.js",

38 "test": "node scripts/test.js",

39 "test:ci": "node scripts/test-ci.js",

40 "lint": "eslint .",

41 "lint:fix": "eslint . --fix",

42 "lint:web": "node scripts/lint-web.js",

43 "typecheck:tui": "node scripts/typecheck-tui.js",

44 "build:web": "node scripts/build-web.js",

45 "preflight": "npm run lint && npm run lint:web && npm run test:ci && node scripts/build-web.js && (cd src/interfaces/web && npx --no-install tsc --noEmit) && npm run typecheck:tui",

46 "upgrade": "pnpm install && pnpm add -g .",

47 "prepare": "node scripts/install-githooks.js && node scripts/sync-apc-skill.js",

48 "prepack": "node scripts/sync-apc-skill.js && node scripts/build-web.js",

49 "postinstall": "node src/interfaces/cli/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L49

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L49

50 "smoke:seam": "node --test --test-reporter=spec tests/smoke/*.smoke.js"

51 },

52 "dependencies": {

53 "@modelcontextprotocol/sdk": "^1.29.0",

54 "@opentui/core": "^0.2.16",

55 "@opentui/keymap": "^0.2.16",

56 "@opentui/solid": "^0.2.16",

57 "@solid-primitives/event-bus": "^1.1.3",

58 "@solid-primitives/scheduled": "^1.5.2",

59 "cli-sound": "^1.1.3",

60 "clipboardy": "^4.0.0",

61 "cron-parser": "^5.5.0",

62 "effect": "^3.21.2",

63 "express": "^4.21.0",

64 "fuzzysort": "^3.1.0",

65 "node-fetch": "^3.3.2",

66 "open": "^10.1.2",

67 "opentui-spinner": "^0.0.6",

68 "qrcode-terminal": "^0.12.0",

69 "remeda": "^2.21.0",

src/core/artifacts/tunnel.jsView file

Lines 1-32javascript

1// Quick public tunnels for local preview ports.

2//

3// Wraps zero-config tunnel providers so an ephemeral artifact preview running

4// on http://localhost:<port> can be shared with a temporary public URL:

5// - cloudflared → `cloudflared tunnel --url http://localhost:PORT`

6// (no account needed; prints an https://*.trycloudflare.com URL)

7// - localtunnel → `npx -y localtunnel --port PORT`

8// (prints https://*.loca.lt; fallback when cloudflared absent)

9//

10// The manager spawns the provider, scrapes the public URL from its output, and

src/core/net/tailscale.jsView file

Lines 25-65javascript

25const CANDIDATES = [

26 "/Applications/Tailscale.app/Contents/MacOS/Tailscale",

27 "/usr/local/bin/tailscale",

28 "/opt/homebrew/bin/tailscale",

29 "/usr/bin/tailscale",

30 "/usr/sbin/tailscale"

src/core/http-tools/browser.jsView file

Lines 710-750javascript

710 if (!code) throw new Error("code required");

711 return onPage((page) => evaluateOnPage(page, code));

712}

src/core/voice/transcription.js#virtual:normalized:round1View file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/core/voice/transcription.js#virtual:normalized:round1View on unpkg · L52

src/core/channels/whatsapp/stickers.jsView file

Lines 16-56javascript

16// across senders and chats (the same sticker pack sends identical bytes), which

17// is exactly the property a lexicon needs and exactly what a per-message id

18// lacks.

19//

20// The owner can overwrite any entry with their own words (`meaning_source:

21// "owner"`), and a human meaning is never overwritten by a later automatic

22// description — the point of learning is that it accumulates.

23import fs from "node:fs";

src/core/desktop/autostart.jsView file

Lines 1-27javascript

1// Per-user "launch APX Desktop at login" wiring. Used by BOTH the CLI

2// (`apx desktop install` / `uninstall`) and the daemon's

3// /api/desktop/autostart endpoint so the web admin can toggle the same setting

4// without shelling out.

5//

6// Per-user, never sudo, fully reversible. Three platforms supported:

7//

8// macOS → ~/Library/LaunchAgents/dev.apx.desktop.plist + launchctl load -w

9// win32 → HKCU\Software\Microsoft\Windows\CurrentVersion\Run\APXDesktop

10// linux → ~/.config/autostart/apx-desktop.desktop

src/interfaces/cli/http.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/interfaces/cli/http.jsView on unpkg · L7

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/interfaces/cli/http.jsView on unpkg

src/host/daemon/pty-bridge.pyView file

•path = src/host/daemon/pty-bridge.py kind = build_helper sizeBytes = 3335 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/host/daemon/pty-bridge.pyView on unpkg

src/interfaces/web/dist/sw.js.gzView file

•path = src/interfaces/web/dist/sw.js.gz kind = compressed_blob sizeBytes = 1818 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

src/interfaces/web/dist/sw.js.gzView on unpkg

src/interfaces/web/dist/modules/blobs/onyx.svg.brView file

•path = [redacted].svg.br kind = high_entropy_blob sizeBytes = 37288 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/interfaces/web/dist/modules/blobs/onyx.svg.brView on unpkg

src/core/agent/shell/background.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 12

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/core/agent/shell/background.js#virtual:normalized:round1View on unpkg

src/interfaces/cli/commands/image.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/interfaces/cli/commands/image.jsView on unpkg

src/host/daemon/api/admin.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/host/daemon/api/admin.jsView on unpkg

src/interfaces/cli/commands/desktop.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/interfaces/cli/commands/desktop.jsView on unpkg

src/core/agent/shell/background.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/core/agent/shell/background.jsView on unpkg

src/core/desktop/process.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/core/desktop/process.jsView on unpkg

src/core/voice/engines/gemini.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/core/voice/engines/gemini.jsView on unpkg

src/host/daemon/deck-exec.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/host/daemon/deck-exec.jsView on unpkg

src/host/daemon/terminal-ws.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/host/daemon/terminal-ws.jsView on unpkg

src/host/daemon/whisper-server.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/host/daemon/whisper-server.jsView on unpkg

@agentprojectcontext/apx@1.113.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code