Loading npm security reports…

@askexenow/exe-os@0.9.383: Malicious npm security report (Block) | LPM Firewall

registry / @askexenow/exe-os / 0.9.383

@askexenow/exe-os@0.9.383

AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.

AI Security Review

scanned 26d ago · by lpm-firewall-ai

An automatic npm postinstall modifies the user's global Claude AI-agent configuration. It copies skills on install and, after setup exists, registers an MCP server and hooks that run package code for broad agent events.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm installation of the package

Impact

Package code can be invoked by Claude Code prompts, sessions, and tool-use events without a fresh setup command.

Mechanism

Automatic mutation of global Claude skills, MCP, and hook configuration

Attack narrative

Installing the package runs postinstall, which starts its installer. The installer copies package-controlled skills into the global Claude directory. When the user has an existing exe-os setup, the same automatic path registers an MCP server and broad Claude hooks that execute package scripts after tool use and at session events. This is an unconsented lifecycle mutation of a foreign AI-agent control surface.

AI rationale

The package has a concrete automatic install-hook chain that changes global Claude agent behavior and executes package hooks. This meets the install-hook abuse blocking policy despite its setup-state guard.

Evidence

package.jsonpostinstall.mjsdist/bin/install.jsdist/chunk-7TDDSOJQ.js~/.claude/skills/exe-*/SKILL.md~/.claude.json~/.claude/settings.json~/.exe-os/logs/hooks.log

Decision evidence

Source & flagged code

29 flagged

package.jsonView file

Lines 106-146json

106 "@opentelemetry/exporter-prometheus": ">=0.219.0",

107 "@opentelemetry/exporter-trace-otlp-grpc": ">=0.219.0",

108 "@opentelemetry/exporter-trace-otlp-http": ">=0.219.0",

109 "@opentelemetry/exporter-trace-otlp-proto": ">=0.219.0"

110 },

111 "engines": {

112 "node": ">=20.0.0"

113 },

114 "scripts": {

115 "prepare": "git config core.hooksPath .githooks || true",

116 "test": "vitest run",

117 "test:watch": "vitest",

118 "test:e2e:sso-contract": "playwright test --config tests/e2e/playwright.config.ts tests/e2e/sso-contract.spec.ts",

119 "lint": "eslint src/ --max-warnings 53",

120 "typecheck": "tsc --noEmit",

121 "typecheck:tests": "tsc --noEmit -p tsconfig.tests.json",

122 "guard:mock-shape": "node scripts/check-mock-shape.mjs",

123 "typecheck:workers": "tsc --noEmit -p api-router/tsconfig.json && tsc --noEmit -p api-router/tsconfig.test.json && tsc --noEmit -p worker/tsconfig.json",

124 "build": "node scripts/dist-ownership-guard.mjs && node scripts/dist-integrity.mjs --pre-build-guard && bash scripts/build-lock.sh && mkdir -p dist/assets && cp src/assets/tmux.conf dist/assets/ && cp src/assets/ghostty.conf dist/assets/ && cp src/assets/statusline-command.sh dist/assets/ && cp src/assets/wezterm.lua dist/assets/ && cp src/assets/com.askexe.exed.plist dist/assets/ && cp src/bin/exe-start.sh dist/bin/exe-start.sh && node dist/bin/generate-hook-manifest.js && node scripts/dist-integrity.mjs --record",

125 "deploy": "node dist/bin/pre-build-guard.js && EXE_DIST_OP_RESTARTS_DAEMON=1 EXE_DIST_CLEAN=1 npm run build && node scripts/dist-integrity.mjs --verify && (node dist/bin/prune-orphan-chunks.js || true) && npm install -g . && node dist/bin/install.js --global && echo '[exe-os] Deploy complete. Run /mcp in active sessions to reconnect.'",

126 "postinstall": "node postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L126

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L126

127 "prepublishOnly": "npm run typecheck && EXE_DIST_OP_RESTARTS_DAEMON=1 EXE_DIST_CLEAN=1 npm run build && node dist/bin/prune-orphan-chunks.js --force && node scripts/dist-integrity.mjs --prune && npm run guard:esm-require && npm run guard:defect-classes && npm run guard:ref-provenance && npm run guard:upstream-content && npm run guard:handler-reachability && npm run check:schema-version && node dist/bin/customer-readiness.js && node dist/bin/pre-publish.js",

128 "test:publish": "npx vitest run --maxWorkers=4 --exclude 'tests/tui/**' --exclude 'tests/lib/tmux-routing.test.ts' --exclude 'tests/lib/intercom-routing.test.ts' --exclude 'tests/gateway/**' --exclude 'tests/mcp/ingest-document.test.ts' --exclude 'tests/lib/hybrid-search.test.ts' --exclude 'tests/lib/worker-gate.test.ts' --exclude 'tests/daemon-perf-stress.test.ts' --exclude 'tests/lib/gateway-client.test.ts' --exclude 'tests/lib/ws-client.test.ts' --exclude 'tests/lib/ws-auth.test.ts' --exclude 'tests/integration/clean-stack-projection.test.ts' --exclude 'tests/orchestration/dispatch-chai ...

129 "benchmark:longmemeval": "npx tsx tests/benchmarks/longmemeval.ts",

130 "guard:esm-require": "node scripts/check-no-runtime-require.mjs",

131 "guard:defect-classes": "node scripts/check-defect-gates.mjs",

132 "guard:ref-provenance": "node scripts/check-ref-provenance.mjs",

133 "guard:upstream-content": "node scripts/check-upstream-content.mjs",

134 "guard:handler-reachability": "node scripts/check-handler-reachability.mjs",

135 "guard:required-checks": "node scripts/check-required-checks-evaluable.mjs",

136 "check:applicability-fresh": "node scripts/check-applicability-fresh.mjs",

137 "check:schema-version": "node scripts/check-schema-version.mjs",

138 "check:migration-drift": "node scripts/migration-drift-check.mjs",

139 "gate:migration-apply": "node scripts/migration-apply-gate.mjs",

140 "check:perms-ui-sync": "node packages/permissions-ui/sync.mjs --check",

141 "check:switcher-ui-sync": "node packages/exe-service-switcher/sync.mjs --check",

142 "check:error-pages-sync": "node packages/exe-error-pages/sync.mjs --check",

143 "check:stack-manifest-signature": "node scripts/verify-stack-manifest-signature.mjs --require-signature",

144 "check:sso-cookie-contract": "node scripts/sso-cookie-contract-check.mjs",

145 "check:sso-cookie-contract-edge": "node scripts/sso-cookie-contract-check.mjs --edge-only",

146 "check:delivery-liveness": "node scripts/delivery-liveness-check.mjs",

Long lines were clipped for display.

dist/chunk-ZGTA4TXQ.jsView file

Lines 1-33javascript

1import {

2 getActiveAgent

3} from "./chunk-4KNZKUDK.js";

4import {

5 loadEmployeesSync

6} from "./chunk-ZVPVLYBG.js";

7import {

postinstall.mjsView file

Lines 1-28javascript

1#!/usr/bin/env node

2/**

3 * npm postinstall entry point.

4 *

5 * This used to be an inline shell expression in package.json:

6 *

7 * [ ! -f dist/bin/install.js ] || node dist/bin/install.js --commands-only || true

8 *

9 * npm runs lifecycle scripts through `cmd.exe` on Windows, which has no `[`

10 * test builtin and no `true`. Every Windows user therefore saw

High

dist/chunk-XD6D4RNQ.jsView file

Lines 51-91javascript

51 }

52 const permissions = ROLE_PERMISSIONS[role];

53 let allowed = permissions.has(operation);

54 let reason;

55 if (

dist/chunk-5V7BD7Z4.jsView file

Lines 1-32javascript

1import {

2 resolveEmbeddingsEnabled

3} from "./chunk-KWOAM7TA.js";

4import {

5 computeDaemonHeapCapMb

6} from "./chunk-NLEW62VC.js";

7import {

dist/lib/exe-daemon.jsView file

Lines 175-215javascript

175 EMBEDDING_DIM

176} from "../chunk-FXU7JOXK.js";

177import "../chunk-WNBZJSQT.js";

178import "../chunk-TTLPYAM7.js";

179import "../chunk-A7XLR3K7.js";

180import "../chunk-4WU2UNXL.js"

dist/bin/install.jsView file

250import { existsSync, openSync, closeSync, writeFileSync, readFileSync, unlinkSync, statSync, mkdirSync, chmodSync, renameSync, readdirSync } from "fs"; L251: import { spawn, execSync } from "child_process"; L252: import path from "path"; L253: import os from "os"; L254: var homedir = os.homedir; L255: function exeDir() { ... L267: try { L268: const pkg = JSON.parse(readFileSync(path.join(pkgRoot, "package.json"), "utf8")); L269: return pkg.version; ... L288: versionMismatchWarned = true; L289: process.stderr.write( L290: `exe-os: daemon/client version mismatch (daemon ${daemonVersion}, client ${clientVersion}). Run: exe-os-install --global

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/bin/install.jsView on unpkg · L250

250Trigger-reachable chain: manifest.bin -> dist/bin/install.js L250: import { existsSync, openSync, closeSync, writeFileSync, readFileSync, unlinkSync, statSync, mkdirSync, chmodSync, renameSync, readdirSync } from "fs"; L251: import { spawn, execSync } from "child_process"; L252: import path from "path"; L253: import os from "os"; L254: var homedir = os.homedir; L255: function exeDir() { ... L267: try { L268: const pkg = JSON.parse(readFileSync(path.join(pkgRoot, "package.json"), "utf8")); L269: return pkg.version; ... L288: versionMismatchWarned = true; L289: process.stderr.write( L290: `exe-os: daemon/client version mismatch (daemon ${daemonVersion}, client ${clientVersion}). Run: exe-os-install --global

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/bin/install.jsView on unpkg · L250

250

dist/installer-YFNGAHNG.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import { resolvepackageroot } from "./chunk-7tddsojq.js"; import { loadpreferences } from "./chunk-xbolfvmd.js"; import { exe_hooks, islegacysplitposttoolcommand } from "./chunk-km6xsfhp.js"; import { buildmcphttpheaders, mcphttpurl } from "./chunk-zgta4txq.js"; import "./chunk-4knzkudk.js"; import "./chunk-mucnysjp.js"; import "./chunk-nrhfygqh.js"; import "./chunk-cvyc6duw.js"; import "./chunk-hyzv25ly.js"; import "./chunk-gjv3wdwm.js"; import "./chunk-zvpvlybg.js"; import "./chunk-bbmtvae3.js"; import "./chunk-tkditwdn.js"; import "./chunk-5yeupuv4.js"; import "./chunk-fpapxmja.js"; import "./chunk-yyb5pmtk.js"; import "./chunk-l5cgxezc.js"; import "./chunk-cl4j47

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/installer-YFNGAHNG.jsView on unpkg

dist/bin/deferred-daemon-restart.jsView file

207Cross-file remote execution chain: dist/bin/deferred-daemon-restart.js spawns dist/chunk-3OEVDGIY.js; helper contains network access plus dynamic code execution. L207: import { existsSync, openSync, closeSync, writeFileSync, unlinkSync, readFileSync } from "fs"; L208: import { spawn, execSync } from "child_process"; L209: import path from "path"; ... L222: try { L223: const pkg = JSON.parse(readFileSync(path.join(pkgRoot, "package.json"), "utf8")); L224: return pkg.version; ... L243: versionMismatchWarned = true; L244: process.stderr.write( L245: `[deferred-restart] daemon/client version mismatch (daemon ${daemonVersion}, client ${clientVersion}). Run: exe-os-install --global ... L251: const result2 = await new Promise((resolve) => { L252: const req = http.get(`http://127.0.0.1:${daemonPor

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/bin/deferred-daemon-restart.jsView on unpkg · L207

dist/bin/update.jsView file

154try { L155: execSync(`npm install -g @askexenow/exe-os@${manifest.version}`, { L156: stdio: ["pipe", "pipe", "inherit"],

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/update.jsView on unpkg · L154

dist/bin/exe-start.shView file

•path = dist/bin/exe-start.sh kind = build_helper sizeBytes = 10931 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/bin/exe-start.shView on unpkg

deploy/compose/generate-env.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

deploy/compose/generate-env.ts#virtual:normalized:round1View on unpkg

dist/bin/codex-reviewd-cli.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.381 matchedPath = dist/bin/codex-reviewd-cli.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.381 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/codex-reviewd-cli.jsView on unpkg

dist/bin/exe-agent.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.381 matchedPath = dist/bin/exe-agent.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.381 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-agent.jsView on unpkg

dist/bin/exe-launch-agent.jsView file

•matchType = token_shingles matchedPackage = @askexenow/exe-os@0.9.381 matchedPath = dist/bin/exe-launch-agent.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.381 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-launch-agent.jsView on unpkg

dist/bin/exe-start-codex.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.381 matchedPath = dist/bin/exe-start-codex.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.381 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-start-codex.jsView on unpkg

dist/chunk-2NIURKEP.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.381 matchedPath = dist/chunk-WLB5M4VC.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.381 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-2NIURKEP.jsView on unpkg

dist/chunk-4JF42BVF.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.381 matchedPath = dist/chunk-ZKJ5S23O.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.381 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-4JF42BVF.jsView on unpkg

dist/chunk-7TDDSOJQ.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.381 matchedPath = dist/chunk-EQWKSGBY.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.381 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-7TDDSOJQ.jsView on unpkg

dist/chunk-EYZKJY7K.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.381 matchedPath = dist/chunk-JZGMDMN7.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.381 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-EYZKJY7K.jsView on unpkg

dist/chunk-QZW4T3GM.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.381 matchedPath = dist/chunk-HESUCM6A.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.381 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-QZW4T3GM.jsView on unpkg

dist/chunk-ZE2GXNVJ.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.381 matchedPath = dist/chunk-PTY2N23C.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.381 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-ZE2GXNVJ.jsView on unpkg

dist/project-boot-AFWDFRTX.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.381 matchedPath = dist/project-boot-2JBCNWZH.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.381 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/project-boot-AFWDFRTX.jsView on unpkg

Source & flagged code

29 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/chunk-ZGTA4TXQ.jsView file

13import { randomBytes } from "crypto"; L14: import { execFileSync } from "child_process"; L15: import path from "path";

High

Child Process

Package source references child process execution.

dist/chunk-ZGTA4TXQ.jsView on unpkg · L13

postinstall.mjsView file

8* L9: * npm runs lifecycle scripts through `cmd.exe` on Windows, which has no `[` L10: * test builtin and no `true`. Every Windows user therefore saw

High

Shell

Package source references shell execution.

postinstall.mjsView on unpkg · L8

dist/chunk-XD6D4RNQ.jsView file

71const dreamingPath = "./dreaming.js"; L72: const dreaming = await import( L73: /* @vite-ignore */

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-XD6D4RNQ.jsView on unpkg · L71

dist/chunk-5V7BD7Z4.jsView file

12import { chmodSync, chownSync, readFileSync, writeFileSync, mkdirSync, existsSync, readdirSync } from "fs"; L13: import { execSync } from "child_process"; L14: import path from "path"; ... L221: function [redacted](opts = {}) { L222: const platformName = opts.platform ?? process.platform; L223: if (platformName !== "darwin") { ... L232: } L233: const env = opts.env ?? process.env; L234: const targetUser = env.SUDO_USER && env.SUDO_USER !== "root" ? env.SUDO_USER : ""; ... L348: try { L349: execSync(`launchctl bootout gui/${targetUid}/${label} 2>/dev/null`, { timeout: 5e3 }); L350: } catch {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunk-5V7BD7Z4.jsView on unpkg · L12

dist/lib/exe-daemon.jsView file

195import os4 from "os"; L196: import net from "net"; L197: import v8 from "v8"; ... L201: import { access, appendFile, mkdir, readdir, readFile, rename, stat, unlink, writeFile } from "fs/promises"; L202: import { execSync as execSyncNode, execFile as execFileNode } from "child_process"; L203: import { promisify } from "util"; ... L206: var NPM_ROOT_RETRY_MS = (() => { L207: const raw = process.env.EXE_NPM_ROOT_RETRY_MS; L208: const n = raw !== void 0 ? Number(raw) : NaN;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/lib/exe-daemon.jsView on unpkg · L195

195import os4 from "os"; L196: import net from "net"; L197: import v8 from "v8"; ... L201: import { access, appendFile, mkdir, readdir, readFile, rename, stat, unlink, writeFile } from "fs/promises"; L202: import { execSync as execSyncNode, execFile as execFileNode } from "child_process"; L203: import { promisify } from "util"; ... L210: })(); L211: function [redacted](execFile, log = (m) => void process.stderr.write(m), opts = {}) { L212: const retryMs = opts.retryMs ?? NPM_ROOT_RETRY_MS;

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/lib/exe-daemon.jsView on unpkg · L195

195Trigger-reachable command-output exfiltration chain: manifest.exports -> dist/mcp/server.js -> dist/chunk-3SWW7CHT.js -> dist/lib/exe-daemon.js L195: import os4 from "os"; L196: import net from "net"; L197: import v8 from "v8"; ... L201: import { access, appendFile, mkdir, readdir, readFile, rename, stat, unlink, writeFile } from "fs/promises"; L202: import { execSync as execSyncNode, execFile as execFileNode } from "child_process"; L203: import { promisify } from "util"; ... L210: })(); L211: function [redacted](execFile, log = (m) => void process.stderr.write(m), opts = {}) { L212: const retryMs = opts.retryMs ?? NPM_ROOT_RETRY_MS;

dist/bin/install.jsView file

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/bin/install.jsView on unpkg · L250

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/bin/install.jsView on unpkg · L250

250

dist/installer-YFNGAHNG.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/installer-YFNGAHNG.jsView on unpkg

dist/bin/deferred-daemon-restart.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/bin/deferred-daemon-restart.jsView on unpkg · L207

dist/bin/update.jsView file

154try { L155: execSync(`npm install -g @askexenow/exe-os@${manifest.version}`, { L156: stdio: ["pipe", "pipe", "inherit"],

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/update.jsView on unpkg · L154

dist/bin/exe-start.shView file

•path = dist/bin/exe-start.sh kind = build_helper sizeBytes = 10931 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/bin/exe-start.shView on unpkg

deploy/compose/generate-env.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

deploy/compose/generate-env.ts#virtual:normalized:round1View on unpkg

dist/bin/codex-reviewd-cli.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/codex-reviewd-cli.jsView on unpkg

dist/bin/exe-agent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-agent.jsView on unpkg

dist/bin/exe-launch-agent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-launch-agent.jsView on unpkg

dist/bin/exe-start-codex.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-start-codex.jsView on unpkg

dist/chunk-2NIURKEP.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-2NIURKEP.jsView on unpkg

dist/chunk-4JF42BVF.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-4JF42BVF.jsView on unpkg

dist/chunk-7TDDSOJQ.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-7TDDSOJQ.jsView on unpkg

dist/chunk-EYZKJY7K.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-EYZKJY7K.jsView on unpkg

dist/chunk-QZW4T3GM.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-QZW4T3GM.jsView on unpkg

dist/chunk-ZE2GXNVJ.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-ZE2GXNVJ.jsView on unpkg

dist/project-boot-AFWDFRTX.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/project-boot-AFWDFRTX.jsView on unpkg