@askexenow/exe-os@0.9.373: Suspicious npm security report (Warn)

Loading npm security reports…

@askexenow/exe-os@0.9.373: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

19 flagged

package.jsonView file

Lines 99-139json

99 "@opentelemetry/exporter-metrics-otlp-grpc": ">=0.219.0",

100 "@opentelemetry/exporter-metrics-otlp-http": ">=0.219.0",

101 "@opentelemetry/exporter-metrics-otlp-proto": ">=0.219.0",

102 "@opentelemetry/exporter-prometheus": ">=0.219.0",

103 "@opentelemetry/exporter-trace-otlp-grpc": ">=0.219.0",

104 "@opentelemetry/exporter-trace-otlp-http": ">=0.219.0",

105 "@opentelemetry/exporter-trace-otlp-proto": ">=0.219.0"

106 },

107 "engines": {

108 "node": ">=20.0.0"

109 },

110 "scripts": {

111 "prepare": "git config core.hooksPath .githooks || true",

112 "test": "vitest run",

113 "test:watch": "vitest",

114 "lint": "eslint src/ --max-warnings 53",

115 "typecheck": "tsc --noEmit",

116 "typecheck:workers": "tsc --noEmit -p api-router/tsconfig.json && tsc --noEmit -p api-router/tsconfig.test.json && tsc --noEmit -p worker/tsconfig.json",

117 "build": "node scripts/dist-ownership-guard.mjs && bash scripts/build-lock.sh && mkdir -p dist/assets && cp src/assets/tmux.conf dist/assets/ && cp src/assets/ghostty.conf dist/assets/ && cp src/assets/statusline-command.sh dist/assets/ && cp src/assets/wezterm.lua dist/assets/ && cp src/assets/com.askexe.exed.plist dist/assets/ && cp src/bin/exe-start.sh dist/bin/exe-start.sh && (node dist/bin/generate-hook-manifest.js 2>/dev/null || true) && node scripts/dist-integrity.mjs --record",

118 "deploy": "node dist/bin/pre-build-guard.js && EXE_DIST_OP_RESTARTS_DAEMON=1 EXE_DIST_CLEAN=1 npm run build && node scripts/dist-integrity.mjs --verify && (node dist/bin/prune-orphan-chunks.js || true) && npm install -g . && node dist/bin/install.js --global && echo '[exe-os] Deploy complete. Run /mcp in active sessions to reconnect.'",

119 "postinstall": "node postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L119

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L119

120 "prepublishOnly": "npm run typecheck && EXE_DIST_OP_RESTARTS_DAEMON=1 EXE_DIST_CLEAN=1 npm run build && node dist/bin/prune-orphan-chunks.js --force && node scripts/dist-integrity.mjs --prune && npm run guard:esm-require && npm run guard:defect-classes && npm run guard:ref-provenance && npm run guard:upstream-content && npm run check:schema-version && node dist/bin/customer-readiness.js && node dist/bin/pre-publish.js",

121 "test:publish": "npx vitest run --maxWorkers=4 --exclude 'tests/tui/**' --exclude 'tests/lib/tmux-routing.test.ts' --exclude 'tests/lib/intercom-routing.test.ts' --exclude 'tests/gateway/**' --exclude 'tests/mcp/ingest-document.test.ts' --exclude 'tests/lib/hybrid-search.test.ts' --exclude 'tests/lib/worker-gate.test.ts' --exclude 'tests/daemon-perf-stress.test.ts' --exclude 'tests/lib/gateway-client.test.ts' --exclude 'tests/lib/ws-client.test.ts' --exclude 'tests/lib/ws-auth.test.ts' --exclude 'tests/integration/clean-stack-projection.test.ts' --exclude 'tests/orchestration/dispatch-chai ...

122 "benchmark:longmemeval": "npx tsx tests/benchmarks/longmemeval.ts",

123 "guard:esm-require": "node scripts/check-no-runtime-require.mjs",

124 "guard:defect-classes": "node scripts/check-defect-gates.mjs",

125 "guard:ref-provenance": "node scripts/check-ref-provenance.mjs",

126 "guard:upstream-content": "node scripts/check-upstream-content.mjs",

127 "guard:required-checks": "node scripts/check-required-checks-evaluable.mjs",

128 "check:schema-version": "node scripts/check-schema-version.mjs",

129 "check:migration-drift": "node scripts/migration-drift-check.mjs",

130 "gate:migration-apply": "node scripts/migration-apply-gate.mjs",

131 "check:perms-ui-sync": "node packages/permissions-ui/sync.mjs --check",

132 "check:switcher-ui-sync": "node packages/exe-service-switcher/sync.mjs --check",

133 "check:stack-manifest-signature": "node scripts/verify-stack-manifest-signature.mjs",

134 "check:sso-cookie-contract": "node scripts/sso-cookie-contract-check.mjs",

135 "check:sso-cookie-contract-edge": "node scripts/sso-cookie-contract-check.mjs --edge-only",

136 "check:delivery-liveness": "node scripts/delivery-liveness-check.mjs",

137 "check:runner-liveness": "node scripts/runner-liveness-check.mjs",

138 "release:status": "node scripts/release-status.mjs",

139 "release:publish": "node scripts/publish-stack-release.mjs",

Long lines were clipped for display.

dist/chunk-75H4R62K.jsView file

Lines 1-21javascript

1// src/lib/cc-binary-detect.ts

2import { execSync } from "child_process";

3import { existsSync, readFileSync, readdirSync } from "fs";

High

Child Process

Package source references child process execution.

dist/chunk-75H4R62K.jsView on unpkg · L1

4import path from "path"

postinstall.mjsView file

Lines 1-28javascript

1#!/usr/bin/env node

2/**

3 * npm postinstall entry point.

4 *

5 * This used to be an inline shell expression in package.json:

6 *

7 * [ ! -f dist/bin/install.js ] || node dist/bin/install.js --commands-only || true

8 *

9 * npm runs lifecycle scripts through `cmd.exe` on Windows, which has no `[`

10 * test builtin and no `true`. Every Windows user therefore saw

High

dist/chunk-XPPQ4PBN.jsView file

1002Cross-file remote execution chain: dist/chunk-XPPQ4PBN.js spawns dist/chunk-3OEVDGIY.js; helper contains network access plus dynamic code execution. L1002: agent_role: agentRole, L1003: session_id: process.env.SESSION_ID ?? "manual", L1004: timestamp: (/* @__PURE__ */ new Date()).toISOString(), ... L1112: } catch (err) { L1113: process.stderr.write( L1114: `[commit-memory] Failed to archive superseded memory ${supersedes_id}: ${err instanceof Error ? err.message : String(err)} ... L2520: try { L2521: const receipts = JSON.parse(String(row.verification_receipts)); L2522: if (Array.isArray(receipts) && receipts.length > 0) { ... L2576: process.stderr.write( L2577: `[close-task] respawn SKIPPED for ${input.assignee}: task has no project_name to resolve \u2014 never respawning into process.cwd

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-XPPQ4PBN.jsView on unpkg · L1002

649{ L650: const { ensureReadDbReady } = await import("./fast-db-init-OW6Z4YDB.js"); L651: if (!await ensureReadDbReady()) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-XPPQ4PBN.jsView on unpkg · L649

dist/chunk-5V7BD7Z4.jsView file

Lines 1-32javascript

1import {

2 resolveEmbeddingsEnabled

3} from "./chunk-KWOAM7TA.js";

4import {

5 computeDaemonHeapCapMb

6} from "./chunk-NLEW62VC.js";

7import {

dist/chunk-52EK7KIA.jsView file

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/chunk-52EK7KIA.js: import { chmodSync, copyFileSync, existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "fs"; writeFileSync(selPath, JSON.stringify(data, null, 2) + "\n", { mode: 420 }); copyFileSync(options.envFile, preRollbackBackup); copyFileSync(options.composeFile, options.composeFile + `.pre-rollback-${Date.now()}`); copyFileSync(backupComposeFile, options.composeFile); copyFileSync(backupComposeOverrideFile, composeOverrideFile); writeFileSync(lockFile, JSON.stringify(data, null, 2) + "\n", { mode: 420 }); return domain ? `https://crm.${domain}` : void 0;

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/chunk-52EK7KIA.jsView on unpkg

dist/bin/install.jsView file

Lines 220-260javascript

220 isUnitActive,

221 readPid1Comm,

222 runCommand

223} from "../chunk-A7JYF4RG.js";

224import {

225 WINDOWS_UNSUPPORTED_EXIT,

226 windowsRefusalText

227} from "../chunk-ARX6TAGN.js";

228import

dist/bin/update.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. #!/usr/bin/env node import { channeltoinstalltag, checkforupdate, getlocalversion, getremoteversion } from "../chunk-f55p3h4s.js"; import { ismainmodule } from "../chunk-6y4b3qf6.js"; import { resolveinstalldir } from "../chunk-jkkzgdlp.js"; import "../chunk-mlkgabmk.js"; import { execsync } from "child_process"; import { createinterface } from "readline"; import { copyfile, readfile, readdir, writefile, rm, mkdir, cp } from "fs/promises"; import { existssync } from "fs"; import path from "path"; import os from "os"; var backup_dir_name = ".update-backup"; function resolvedatadir() { return resolveinstalldir(); } v

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/bin/update.jsView on unpkg

150try { L151: execSync(`npm install -g @askexenow/exe-os@${manifest.version}`, { L152: stdio: ["pipe", "pipe", "inherit"],

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/update.jsView on unpkg · L150

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.372 matchedPath = dist/bin/update.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.372 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

dist/bin/exe-start.shView file

•path = dist/bin/exe-start.sh kind = build_helper sizeBytes = 10459 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/bin/exe-start.shView on unpkg

dist/bin/deferred-daemon-restart.jsView file

•matchType = token_shingles matchedPackage = @askexenow/exe-os@0.9.372 matchedPath = dist/bin/deferred-daemon-restart.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.372 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/deferred-daemon-restart.jsView on unpkg

dist/chunk-JG4IOKQE.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.372 matchedPath = dist/chunk-QLA3RTH4.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.372 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-JG4IOKQE.jsView on unpkg

dist/bin/codex-reviewd-cli.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.372 matchedPath = dist/bin/codex-reviewd-cli.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.372 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/codex-reviewd-cli.jsView on unpkg

Source & flagged code

19 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/chunk-75H4R62K.jsView file

1// src/lib/cc-binary-detect.ts L2: import { execSync } from "child_process"; L3: import { existsSync, readFileSync, readdirSync } from "fs";

High

Child Process

Package source references child process execution.

dist/chunk-75H4R62K.jsView on unpkg · L1

postinstall.mjsView file

8* L9: * npm runs lifecycle scripts through `cmd.exe` on Windows, which has no `[` L10: * test builtin and no `true`. Every Windows user therefore saw

High

Shell

Package source references shell execution.

postinstall.mjsView on unpkg · L8

dist/chunk-XPPQ4PBN.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-XPPQ4PBN.jsView on unpkg · L1002

649{ L650: const { ensureReadDbReady } = await import("./fast-db-init-OW6Z4YDB.js"); L651: if (!await ensureReadDbReady()) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-XPPQ4PBN.jsView on unpkg · L649

dist/chunk-5V7BD7Z4.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.372 matchedPath = dist/chunk-5V7BD7Z4.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.372 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-5V7BD7Z4.jsView on unpkg

12import { chmodSync, chownSync, readFileSync, writeFileSync, mkdirSync, existsSync, readdirSync } from "fs"; L13: import { execSync } from "child_process"; L14: import path from "path"; ... L221: function [redacted](opts = {}) { L222: const platformName = opts.platform ?? process.platform; L223: if (platformName !== "darwin") { ... L232: } L233: const env = opts.env ?? process.env; L234: const targetUser = env.SUDO_USER && env.SUDO_USER !== "root" ? env.SUDO_USER : ""; ... L348: try { L349: execSync(`launchctl bootout gui/${targetUid}/${label} 2>/dev/null`, { timeout: 5e3 }); L350: } catch {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunk-5V7BD7Z4.jsView on unpkg · L12

dist/chunk-52EK7KIA.jsView file

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/chunk-52EK7KIA.jsView on unpkg

dist/bin/install.jsView file

240import { existsSync, openSync, closeSync, writeFileSync, readFileSync, unlinkSync, statSync, mkdirSync, chmodSync, renameSync, readdirSync } from "fs"; L241: import { spawn, execSync } from "child_process"; L242: import path from "path"; L243: import os from "os"; L244: var homedir = os.homedir; L245: function exeDir() { ... L255: try { L256: const pkg = JSON.parse(readFileSync(path.join(pkgRoot, "package.json"), "utf8")); L257: return pkg.version; ... L276: versionMismatchWarned = true; L277: process.stderr.write( L278: `exe-os: daemon/client version mismatch (daemon ${daemonVersion}, client ${clientVersion}). Run: exe-os-install --global

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/bin/install.jsView on unpkg · L240

240Trigger-reachable chain: manifest.bin -> dist/bin/install.js L240: import { existsSync, openSync, closeSync, writeFileSync, readFileSync, unlinkSync, statSync, mkdirSync, chmodSync, renameSync, readdirSync } from "fs"; L241: import { spawn, execSync } from "child_process"; L242: import path from "path"; L243: import os from "os"; L244: var homedir = os.homedir; L245: function exeDir() { ... L255: try { L256: const pkg = JSON.parse(readFileSync(path.join(pkgRoot, "package.json"), "utf8")); L257: return pkg.version; ... L276: versionMismatchWarned = true; L277: process.stderr.write( L278: `exe-os: daemon/client version mismatch (daemon ${daemonVersion}, client ${clientVersion}). Run: exe-os-install --global

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/bin/install.jsView on unpkg · L240

240

dist/bin/update.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/bin/update.jsView on unpkg

150try { L151: execSync(`npm install -g @askexenow/exe-os@${manifest.version}`, { L152: stdio: ["pipe", "pipe", "inherit"],

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/update.jsView on unpkg · L150

High

dist/bin/exe-start.shView file

•path = dist/bin/exe-start.sh kind = build_helper sizeBytes = 10459 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/bin/exe-start.shView on unpkg

dist/bin/deferred-daemon-restart.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/deferred-daemon-restart.jsView on unpkg

dist/chunk-JG4IOKQE.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-JG4IOKQE.jsView on unpkg

dist/bin/codex-reviewd-cli.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/codex-reviewd-cli.jsView on unpkg