@alumbwe/anvil@1.0.4: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@alumbwe/anvil@1.0.4: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

9 flagged · loading source

bin/anvil.jsView file

8*/ L9: const { execFileSync, spawnSync } = require('child_process'); L10: const path = require('path');

High

Child Process

Package source references child process execution.

bin/anvil.jsView on unpkg · L8

8Cross-file remote execution chain: bin/anvil.js spawns dist/bundled.js; helper contains network access plus dynamic code execution. L8: */ L9: const { execFileSync, spawnSync } = require('child_process'); L10: const path = require('path'); ... L12: L13: const bundledPath = path.join(__dirname, '..', 'dist', 'bundled.js'); L14: ... L37: 'Error: neither bun nor node found on PATH.\n' + L38: 'Install bun: https://bun.sh', L39: );

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/anvil.jsView on unpkg · L8

dist/bundled.jsView file

257var getBaseEnv = () => ({ L258: SHELL: process.env.SHELL, L259: COMSPEC: process.env.COMSPEC, ... L261: USERPROFILE: process.env.USERPROFILE, L262: APPDATA: process.env.APPDATA, L263: XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME, ... L432: IS_PROD = env.NEXT_PUBLIC_CB_ENVIRONMENT === "prod"; L433: IS_CI = process.env.ANVIL_GITHUB_ACTIONS === "true"; L434: }); ... L487: for (let i = 0;i < input.length; i++) { L488: hash ^= input.charCodeAt(i); L489: hash = Math.imul(hash, 16777619);

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/bundled.jsView on unpkg · L257

5228inputSchema21 = z32.object({ L5229: command: z32.string().min(1, "Command cannot be empty").describe(`CLI command. Always executed with bash (Git Bash on Windows), so use POSIX syntax on every OS: \`mv\`/\`rm\`, \`/d... L5230: process_type: z32.enum(["SYNC", "BACKGROUND"]).default("SYNC").describe(`Either SYNC (waits, returns output) or BACKGROUND (runs in background). Default SYNC`),

High

Shell

Package source references shell execution.

dist/bundled.jsView on unpkg · L5228

1038function getDirnameDynamically() { L1039: return new Function(`try { return __dirname; } catch (e) { return undefined; }`)(); L1040: }

High

Eval

Package source references dynamic code evaluation.

dist/bundled.jsView on unpkg · L1038

257var getBaseEnv = () => ({ L258: SHELL: process.env.SHELL, L259: COMSPEC: process.env.COMSPEC, ... L261: USERPROFILE: process.env.USERPROFILE, L262: APPDATA: process.env.APPDATA, L263: XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME, ... L432: IS_PROD = env.NEXT_PUBLIC_CB_ENVIRONMENT === "prod"; L433: IS_CI = process.env.ANVIL_GITHUB_ACTIONS === "true"; L434: }); ... L487: for (let i = 0;i < input.length; i++) { L488: hash ^= input.charCodeAt(i); L489: hash = Math.imul(hash, 16777619);

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bundled.jsView on unpkg · L257

257var getBaseEnv = () => ({ L258: SHELL: process.env.SHELL, L259: COMSPEC: process.env.COMSPEC, ... L261: USERPROFILE: process.env.USERPROFILE, L262: APPDATA: process.env.APPDATA, L263: XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME, ... L432: IS_PROD = env.NEXT_PUBLIC_CB_ENVIRONMENT === "prod"; L433: IS_CI = process.env.ANVIL_GITHUB_ACTIONS === "true"; L434: }); ... L487: for (let i = 0;i < input.length; i++) { L488: hash ^= input.charCodeAt(i); L489: hash = Math.imul(hash, 16777619);

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/bundled.jsView on unpkg · L257

627try { L628: const raw = fs.readFileSync(getAnonymousIdPath(), "utf8"); L629: const parsed = JSON.parse(raw); ... L668: // ../packages/code-map/src/init-node.ts L669: import { execFileSync } from "child_process"; L670: import * as fs2 from "fs"; ... L3030: } L3031: var SPAWN_AGENTS_OUTPUT_BLACKLIST, USER_MESSAGE_LIMIT = 13000, ASSISTANT_MESSAGE_LIMIT = 1300, TOOL_ENTRY_LIMIT = 5000, CHARS_PER_TOKEN = 3, DEFAULT_ASSISTANT_TOOL_BUDGET = 20000, ... L3032: ... L9591: env: env2, L9592: baseUrl: params.baseUrl, L9593: apiKey: params.apiKey,

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/bundled.jsView on unpkg · L627

bin/tree-sitter.wasmView file

•path = bin/tree-sitter.wasm kind = wasm_module sizeBytes = 205488 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

bin/tree-sitter.wasmView on unpkg

Source & flagged code

9 flagged

bin/anvil.jsView file

Lines 1-28javascript

1#!/usr/bin/env node

2/**

3 * npm bin wrapper — launches the bundled CLI via bun.

4 *

5 * npm rejects shebangs other than `node`, so this thin shim exec's bun

6 * with the bundled entry point. When the user has bun installed globally

7 * (`npm i -g bun`) the CLI works out of the box.

8 */

9const { execFileSync, spawnSync } = require('child_process');

10const path = require('path');

High

Child Process

Package source references child process execution.

bin/anvil.jsView on unpkg · L8

11const fs = require('fs');

12

13const bundledPath = path.join(__dirname, '..', 'dist', 'bundled.js');

14

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/anvil.jsView on unpkg · L8

15if (!fs.existsSync(bundledPath)) {

16 console.error(

17 'Error: bundled CLI not found at ' + bundledPath + '\n' +

18 'Try reinstalling: npm i -g @alumbwe/anvil',

19 );

20 process.exit(1);

21}

22

23// Try bun first (preferred), then fall back to node.

24function tryRun(cmd, args) {

25 try {

26 const child = spawnSync(cmd, args, { stdio: 'inherit' });

27 if (child.error && child.error.code === 'ENOENT') return false;

28 process.exit(child.status ?? 1);

dist/bundled.jsView file

257var getBaseEnv = () => ({ L258: SHELL: process.env.SHELL, L259: COMSPEC: process.env.COMSPEC, ... L261: USERPROFILE: process.env.USERPROFILE, L262: APPDATA: process.env.APPDATA, L263: XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME, ... L432: IS_PROD = env.NEXT_PUBLIC_CB_ENVIRONMENT === "prod"; L433: IS_CI = process.env.ANVIL_GITHUB_ACTIONS === "true"; L434: }); ... L487: for (let i = 0;i < input.length; i++) { L488: hash ^= input.charCodeAt(i); L489: hash = Math.imul(hash, 16777619);

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/bundled.jsView on unpkg · L257

5228inputSchema21 = z32.object({ L5229: command: z32.string().min(1, "Command cannot be empty").describe(`CLI command. Always executed with bash (Git Bash on Windows), so use POSIX syntax on every OS: \`mv\`/\`rm\`, \`/d... L5230: process_type: z32.enum(["SYNC", "BACKGROUND"]).default("SYNC").describe(`Either SYNC (waits, returns output) or BACKGROUND (runs in background). Default SYNC`),

High

Shell

Package source references shell execution.

dist/bundled.jsView on unpkg · L5228

1038function getDirnameDynamically() { L1039: return new Function(`try { return __dirname; } catch (e) { return undefined; }`)(); L1040: }

High

Eval

Package source references dynamic code evaluation.

dist/bundled.jsView on unpkg · L1038

bin/tree-sitter.wasmView file

•path = bin/tree-sitter.wasm kind = wasm_module sizeBytes = 205488 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

bin/tree-sitter.wasmView on unpkg