@aiyiran/myclaw@1.1.203: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

@aiyiran/myclaw@1.1.203: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

14 flagged · loading source

delete_agents.jsView file

22const os = require('os'); L23: const { spawnSync, execSync } = require('child_process'); L24:

High

Child Process

Package source references child process execution.

delete_agents.jsView on unpkg · L22

173const psCmd = `Add-Type -AssemblyName Microsoft.VisualBasic; [Microsoft.VisualBasic.FileIO.FileSystem]::${method}(${extraArgs})`; L174: const ret = spawnSync('powershell', ['-NoProfile', '-Command', psCmd], { timeout: 15000 }); L175: if (ret.status === 0) return { ok: true, method: 'powershell' };

High

Shell

Package source references shell execution.

delete_agents.jsView on unpkg · L173

19L20: const fs = require('fs'); L21: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

delete_agents.jsView on unpkg · L19

index.jsView file

1624console.log(' ' + colors.dim + '→ 正在打开浏览器...' + colors.nc); L1625: const { exec } = require('child_process'); L1626: const fs = require('fs'); L1627: const machineUrl = 'https://' + selected.claw + '.kekouen.cn?token=aiyiran'; L1628: const platform = os.platform(); ... L1632: const chromeCandidates = [ L1633: path.join(process.env.PROGRAMFILES || 'C:\\Program Files', 'Google', 'Chrome', 'Application', 'chrome.exe'), L1634: path.join(process.env['PROGRAMFILES(X86)'] || 'C:\\Program Files (x86)', 'Google', 'Chrome', 'Application', 'chrome.exe'),

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L1624

•Trigger-reachable chain: manifest.main -> index.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.jsView on unpkg

14* - Windows 7/8/10 旧版本: 颜色代码会被 stripped，避免乱码 L15: * - 推荐 Windows 用户使用 Windows Terminal 或 PowerShell 7+ 获得最佳体验 L16: * - Emoji 符号在 Windows 命令行可能显示为方块，属正常现象 ... L30: const { createAgent } = require('./create_agent'); L31: const { version } = require(path.join(__dirname, 'package.json')); L32: const { TOKEN, DEFAULT_URL } = require(path.join(__dirname, 'config')); ... L81: console.log('[Windows] 检测到 Windows 系统，正在安装...'); L82: const cmd = 'powershell -c "irm https://openclaw.ai/install.ps1 | iex"'; L83: console.log('> ' + cmd); ... L165: stdio: 'inherit', L166: env: { ...process.env, npm[redacted]: 'true' } L167: });

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.js

prepare.jsView file

22L23: const { execSync } = require('child_process'); L24: const os = require('os'); ... L39: // 检测是否在 npm postinstall 中运行（非交互模式） L40: const isPostInstall = process.env.npm[redacted] === 'postinstall'; L41: ... L64: input: process.stdin, L65: output: process.stdout, L66: }); ... L157: console.log(' 请前往以下地址下载安装 Chrome:'); L158: console.log(' ' + C.y + 'https://www.google.cn/intl/zh-CN/chrome/' + C.nc); L159: console.log('');

Critical

Download Execute

Source downloads or fetches remote code and executes it.

prepare.jsView on unpkg · L22

•matchType = normalized_sha256 matchedPackage = @aiyiran/myclaw@1.1.192 matchedPath = prepare.js matchedIdentity = npm:QGFpeWlyYW4vbXljbGF3:1.1.192 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

prepare.jsView on unpkg

publish.shView file

•path = publish.sh kind = build_helper sizeBytes = 1521 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

publish.shView on unpkg

fix.jsView file

•matchType = normalized_sha256 matchedPackage = @aiyiran/myclaw@1.1.192 matchedPath = fix.js matchedIdentity = npm:QGFpeWlyYW4vbXljbGF3:1.1.192 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

fix.jsView on unpkg

wsl2.jsView file

•matchType = normalized_sha256 matchedPackage = @aiyiran/myclaw@1.1.192 matchedPath = wsl2.js matchedIdentity = npm:QGFpeWlyYW4vbXljbGF3:1.1.192 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

wsl2.jsView on unpkg

gateway.jsView file

•matchType = normalized_sha256 matchedPackage = @aiyiran/myclaw@1.1.192 matchedPath = gateway.js matchedIdentity = npm:QGFpeWlyYW4vbXljbGF3:1.1.192 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

gateway.jsView on unpkg

launch.jsView file

•matchType = normalized_sha256 matchedPackage = @aiyiran/myclaw@1.1.192 matchedPath = launch.js matchedIdentity = npm:QGFpeWlyYW4vbXljbGF3:1.1.192 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

launch.jsView on unpkg

Source & flagged code

14 flagged

delete_agents.jsView file

Lines 1-42javascript

1/**

2 * ============================================================================

3 * MyClaw — delete_agents 核心模块

4 * ============================================================================

5 *

6 * 提供 Agent 批量删除的底层能力，被以下两处复用：

7 * 1. CLI：mc delete (交互式批量删除)

8 * 2. API：sync_workspace.py /api/agents /api/agents/trash

9 *

10 * 导出：

11 * listAllAgents() → 取 JSON注册 ∪ agents文件夹的并集，附统计信息

12 * trashPath(p) → 跨平台移入回收站（macOS/Windows/Linux）

13 * deleteRegisteredAgent(id)→ 调用 openclaw agents delete --force

14 * deleteOrphanAgent(ag) → 对孤立 agent 的所有路径执行 trashPath

15 * ============================================================================

16 */

17

18'use strict';

19

20const fs = require('fs');

21const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

delete_agents.jsView on unpkg · L19

22const os = require('os');

23const { spawnSync, execSync } = require('child_process');

24

High

Child Process

Package source references child process execution.

delete_agents.jsView on unpkg · L22

25// ─────────────────────────────────────────────

26// 路径工具

27// ─────────────────────────────────────────────

28

29function getOpenclawDir() {

30 // Windows 上 '/' 会被解释成当前盘符根目录（如 E:\root\.openclaw），

31 // 不是真正的文件系统根，因此 /root/.openclaw 判断只在非 Windows 上有意义。

32 if (process.platform !== 'win32' && fs.existsSync('/root/.openclaw')) {

33 return '/root/.openclaw';

34 }

35 return path.join(os.homedir(), '.openclaw');

36}

37

38// ─────────────────────────────────────────────

39// listAllAgents

40// ─────────────────────────────────────────────

41

42/**

Lines 153-193javascript

153

154 // ── macOS ──

155 if (plat === 'darwin') {

156 const trashDir = path.join(os.homedir(), '.Trash');

157 const base

index.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2

3/**

4 * ============================================================================

5 * MyClaw - 学生友好的 OpenClaw 工具

6 * ============================================================================

7 *

8 * 跨平台要求 / Cross-Platform Requirements:

9 * ----------------------------------------

10 * 本脚本支持 macOS、Linux 和 Windows。

11 *

12

prepare.jsView file

Lines 2-42javascript

2

3/**

4 * ============================================================================

5 * MyClaw Prepare - 智能初始化链条

6 * ============================================================================

7 *

8 * 使用: myclaw prepare

9 *

10 * 按顺序执行以下检测和操作：

11 * Step 1: 检测环境（Windows / Mac / Linux-WSL）

12 * Step 2: 检测 Chrome 浏览器

13

publish.shView file

•path = publish.sh kind = build_helper sizeBytes = 1521 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

publish.shView on unpkg

fix.jsView file

•matchType = normalized_sha256 matchedPackage = @aiyiran/myclaw@1.1.192 matchedPath = fix.js matchedIdentity = npm:QGFpeWlyYW4vbXljbGF3:1.1.192 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

fix.jsView on unpkg

wsl2.jsView file

•matchType = normalized_sha256 matchedPackage = @aiyiran/myclaw@1.1.192 matchedPath = wsl2.js matchedIdentity = npm:QGFpeWlyYW4vbXljbGF3:1.1.192 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

wsl2.jsView on unpkg

gateway.jsView file

•matchType = normalized_sha256 matchedPackage = @aiyiran/myclaw@1.1.192 matchedPath = gateway.js matchedIdentity = npm:QGFpeWlyYW4vbXljbGF3:1.1.192 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

gateway.jsView on unpkg

launch.jsView file

•matchType = normalized_sha256 matchedPackage = @aiyiran/myclaw@1.1.192 matchedPath = launch.js matchedIdentity = npm:QGFpeWlyYW4vbXljbGF3:1.1.192 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

launch.jsView on unpkg

Lines 1604-1644javascript

1604const MACHINE_ZERO = { name: '依然', claw: 'claw', desc: '依然的机器' };

1605

1606const MACHINE_CONFIG = [

1607 { name: 'kendy', claw: 'claw1', desc: 'kendy 的机器' },

1608 { name: 'Ethan', claw: 'claw2', desc: 'Ethan 的机器' },

1609 { name: 'HENRY', claw: 'claw3', desc: 'HENRY 的机器' },

1610 { name: 'Mo靖宇', claw: 'claw4', desc: 'Mo靖宇的机器' },

1611 { name: '高兴', claw: 'claw5', desc: '高兴的机器' },

1612 { name: '伊伊', claw: 'claw6', desc: '伊伊的机器' },

1613 { name: '梓浩', claw: 'claw7', desc: '梓浩的机器' },

1614 { name: '刘泓毅', claw: 'claw8', desc: '刘泓毅的机器' },

1615 { name: '袁驿博', claw: 'claw9', desc: '袁驿博的机器' },

1616 { name: '雨熙', claw: 'claw10', desc: '雨熙的机器' },

1617 { name: '绍博', claw: 'claw11', desc: '绍博的机器' },

1618 { name: '黄玺澄', claw: 'claw12', desc: '玺澄的机器' },

1619];

1620

1621function openMachine(selected) {

1622 console.log('');

1623 console.log(colors.green + ' → 已选择: ' + selected.name + ' (' + selected.claw + ')' + colors.nc);

1624 console.log(' ' + colors.dim + '→ 正在打开浏览器...' + colors.nc);

1625 const { exec } = require('child_process');

1626 const fs = require('fs');

1627 const machineUrl = 'https://' + selected.claw + '.kekouen.cn?token=aiyiran';

1628 const platform = os.platform();

1629 if (platform === 'darwin') {

1630 exec('open -a "Google Chrome" "' + machineUrl + '"');

1631 } else if (platform === 'win32') {

1632 const chromeCandidates = [

1633 path.join(process.env.PROGRAMFILES || 'C:\\Program Files', 'Google', 'Chrome', 'Application', 'chrome.exe'),

1634 path.join(process.env['PROGRAMFILES(X86)'] || 'C:\\Program Files (x86)', 'Google', 'Chrome', 'Application', 'chrome.exe'),

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

index.jsView on unpkg · L1624

1635 path.join(process.env.LOCALAPPDATA || path.join(os.homedir(), 'AppData', 'Local'), 'Google', 'Chrome', 'Application', 'chrome.exe'),

1636 ];

1637 const chromePath = chromeCandidates.find(function (p) { try { return fs.existsSync(p); } catch { return false; } });

1638 if (chromePath) {

1639 exec('"' + chromePath + '" "' + machineUrl + '"');

1640 } else {

1641 exec('start "" "' + machineUrl + '"', { shell: true });

1642 }

1643 } else {

1644 exec('xdg-open "' + machineUrl + '"');