@askexenow/exe-os@0.9.408: Suspicious npm security report (Warn)

Loading npm security reports…

@askexenow/exe-os@0.9.408: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

26 flagged

package.jsonView file

Lines 118-158json

118 "@opentelemetry/exporter-trace-otlp-proto": ">=0.219.0"

119 },

120 "engines": {

121 "node": ">=20.0.0"

122 },

123 "scripts": {

124 "prepare": "git config core.hooksPath .githooks || true",

125 "pretest": "node scripts/check-guard-reachability.mjs",

126 "test": "vitest run",

127 "test:watch": "vitest",

128 "test:e2e:sso-contract": "playwright test --config tests/e2e/playwright.config.ts tests/e2e/sso-contract.spec.ts",

129 "lint": "eslint src/ --max-warnings 53",

130 "typecheck": "tsc --noEmit",

131 "typecheck:tests": "tsc --noEmit -p tsconfig.tests.json && tsc --noEmit -p tsconfig.tests.worker.json",

132 "guard:mock-shape": "node scripts/check-mock-shape.mjs",

133 "guard:tmux-retired": "node scripts/check-tmux-retired.mjs",

134 "guard:mock-effects-report": "node scripts/check-mock-shape.mjs --effects-report",

135 "typecheck:workers": "tsc --noEmit -p api-router/tsconfig.json && tsc --noEmit -p api-router/tsconfig.test.json && tsc --noEmit -p worker/tsconfig.json",

136 "build": "node scripts/dist-ownership-guard.mjs && node scripts/dist-integrity.mjs --pre-build-guard && bash scripts/build-lock.sh && mkdir -p dist/assets && cp src/assets/tmux.conf dist/assets/ && cp src/assets/ghostty.conf dist/assets/ && cp src/assets/statusline-command.sh dist/assets/ && cp src/assets/wezterm.lua dist/assets/ && cp src/assets/com.askexe.exed.plist dist/assets/ && cp src/bin/exe-start.sh dist/bin/exe-start.sh && node dist/bin/generate-hook-manifest.js && node dist/bin/generate-build-info.js && node dist/bin/prune-orphan-chunks.js --warn-only && node scripts/dist-integri ...

137 "deploy": "node dist/bin/pre-build-guard.js && EXE_DIST_OP_RESTARTS_DAEMON=1 EXE_DIST_CLEAN=1 npm run build && node scripts/dist-integrity.mjs --verify && (node

138 "postinstall": "node postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L138

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L138

139 "prepublishOnly": "npm run typecheck && EXE_DIST_OP_RESTARTS_DAEMON=1 EXE_DIST_CLEAN=1 npm run build && node dist/bin/prune-orphan-chunks.js --force &&

140 "test:publish": "npx vitest run --maxWorkers=4 --exclude 'tests/tui/**' --exclude 'tests/lib/tmux-routing.test.ts' --exclude 'tests/lib/intercom-routing.test.ts' --exclude 'tests/gateway/**' --exclude 'tests/mcp/ingest-document.test.ts' --exclude 'tests/lib/hybrid-search.test.ts' --exclude 'tests/lib/worker-gate.test.ts' --exclude 'tests/daemon-perf-stress.test.ts' --exclude 'tests/lib/gateway-client.test.ts' --exclude 'tests/lib/ws-client.test.ts' --exclude 'tests/lib/ws-auth.test.ts' --exclude 'tests/integration/clean-stack-projection.test.ts' --exclude 'tests/orchestration/dispatch-chai ...

141 "benchmark:longmemeval": "npx tsx tests/benchmarks/longmemeval.ts",

142 "guard:esm-require": "node scripts/check-no-runtime-require.mjs",

143 "guard:defect-classes": "node scripts/check-defect-gates.mjs",

144 "guard:ref-provenance": "node scripts/check-ref-provenance.mjs",

145 "guard:upstream-content": "node scripts/check-upstream-content.mjs",

146 "guard:handler-reachability": "node scripts/check-handler-reachability.mjs",

147 "guard:reachability": "node scripts/check-guard-reachability.mjs",

148 "guard:required-checks": "node scripts/check-required-checks-evaluable.mjs",

149 "guard:review-containment": "node scripts/check-review-lane-containment.mjs",

150 "guard:branch-protection": "node scripts/sync-branch-protection.mjs --check",

151 "guard:required-check-redundancy": "node scripts/check-required-check-redundancy.mjs",

152 "guard:policy-contexts": "node scripts/check-policy-contexts-producible.mjs",

153 "branch-protection:plan": "node scripts/sync-branch-protection.mjs --dry-run",

154 "branch-protection:apply": "node scripts/sync-branch-protection.mjs --apply",

155 "check:applicability-fresh": "node scripts/check-applicability-fresh.mjs",

156 "check:schema-version": "node scripts/check-schema-version.mjs",

157 "check:migration-drift": "node scripts/migration-drift-check.mjs",

158 "debt:metrics": "node scripts/debt-metrics.mjs",

Long lines were clipped for display.

dist/chunk-G3ZYXXO7.jsView file

Lines 71-111javascript

71import {

72 recordKillIntent

73} from "./chunk-DRTJCG6B.js";

74import {

75 isWithin

76} from "./chunk-YRUZK2QA.js";

77import {

dist/chunk-FZT4VQP7.jsView file

Lines 53-93javascript

53 let allowed = permissions.has(operation);

54 let reason;

55 if (!allowed && role === "specialist" && operation === "deactivate_behavior"

dist/chunk-5V7BD7Z4.jsView file

Lines 1-32javascript

1import {

2 resolveEmbeddingsEnabled

3} from "./chunk-KWOAM7TA.js";

4import {

5 computeDaemonHeapCapMb

6} from "./chunk-NLEW62VC.js";

7import {

dist/project-boot-G7T5WHO6.jsView file

Lines 1-33javascript

1import {

2 resolveMcpHttpPort

3} from "./chunk-B6TI3TZT.js";

4import {

5 EXE_AI_DIR

6} from "./chunk-MMS2HBRT.js";

7import "./chunk-RH4AH3YB.js"

dist/bin/install.jsView file

Lines 245-285javascript

245 isUnitActive,

246 readPid1Comm,

247 runCommand

248} from "../chunk-A7JYF4RG.js";

249import {

250 WINDOWS_UNSUPPORTED_EXIT,

251 windowsRefusalText

252} from "../chunk-ARX6TAGN.js";

253import

dist/installer-ILYC4LI5.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import { resolvepackageroot } from "./chunk-r7qzxqpu.js"; import { loadpreferences } from "./chunk-xbolfvmd.js"; import { exe_hooks, islegacysplitposttoolcommand } from "./chunk-km6xsfhp.js"; import { assertstablehookpath, extracthooktarget } from "./chunk-zppphvsu.js"; import { buildmcphttpheaders, mcphttpurl } from "./chunk-6zw6bri4.js"; import "./chunk-oisoa6nx.js"; import "./chunk-7yx73k2r.js"; import "./chunk-5wa4dg2a.js"; import "./chunk-eso5jdot.js"; import "./chunk-hyzv25ly.js"; import "./chunk-cvyc6duw.js"; import "./chunk-gjv3wdwm.js"; import "./chunk-3mdukf3n.js"; import "./chunk-bbmtvae3.js"; import "./chunk-tkditwdn.js"; import "./chunk-yuaoqjvv.js";

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/installer-ILYC4LI5.jsView on unpkg

dist/bin/deferred-daemon-restart.jsView file

Lines 199-239javascript

199 resolveMcpHttpPort

200} from "../chunk-B6TI3TZT.js";

201import "../chunk-FTZET5YX.js";

202import "../chunk-DIKLSAJE.js";

203import "../chunk-3R7UDPVR.js";

204import "../chunk-LDHJX4TZ.js"

dist/bin/update.jsView file

154try { L155: execSync(`npm install -g @askexenow/exe-os@${manifest.version}`, { L156: stdio: ["pipe", "pipe", "inherit"],

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/update.jsView on unpkg · L154

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.394 matchedPath = dist/bin/update.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.394 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/update.jsView on unpkg

dist/bin/exe-start.shView file

•path = dist/bin/exe-start.sh kind = build_helper sizeBytes = 10931 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/bin/exe-start.shView on unpkg

deploy/compose/generate-env.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

deploy/compose/generate-env.ts#virtual:normalized:round1View on unpkg

dist/chunk-23XUZHB7.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.405 matchedPath = dist/chunk-N4JBGOHA.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.405 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-23XUZHB7.jsView on unpkg

dist/chunk-X4V5ZLNX.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.405 matchedPath = dist/chunk-GER43BIE.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.405 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-X4V5ZLNX.jsView on unpkg

dist/bin/cli.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.394 matchedPath = dist/bin/cli.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.394 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/cli.jsView on unpkg

dist/bin/codex-reviewd-cli.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.394 matchedPath = dist/bin/codex-reviewd-cli.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.394 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/codex-reviewd-cli.jsView on unpkg

dist/bin/exe-agent.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.394 matchedPath = dist/bin/exe-agent.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.394 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-agent.jsView on unpkg

dist/bin/exe-cicd.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.394 matchedPath = dist/bin/exe-cicd.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.394 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-cicd.jsView on unpkg

dist/bin/exe-launch-agent.jsView file

•matchType = token_shingles matchedPackage = @askexenow/exe-os@0.9.394 matchedPath = dist/bin/exe-launch-agent.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.394 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-launch-agent.jsView on unpkg

dist/bin/exe-rename.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.394 matchedPath = dist/bin/exe-rename.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.394 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-rename.jsView on unpkg

dist/bin/exe-start-codex.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.405 matchedPath = dist/bin/exe-start-codex.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.405 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-start-codex.jsView on unpkg

dist/chunk-BIV4IHED.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.394 matchedPath = dist/chunk-XVCWPHV3.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.394 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-BIV4IHED.jsView on unpkg

Source & flagged code

26 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/chunk-G3ZYXXO7.jsView file

91// src/lib/daemon-orchestration.ts L92: import { execFile, execFileSync } from "child_process"; L93: import { promisify } from "util";

High

Child Process

Package source references child process execution.

dist/chunk-G3ZYXXO7.jsView on unpkg · L91

dist/chunk-FZT4VQP7.jsView file

73const dreamingPath = "./dreaming.js"; L74: const dreaming = await import( L75: /* @vite-ignore */

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-FZT4VQP7.jsView on unpkg · L73

dist/chunk-5V7BD7Z4.jsView file

•matchType = normalized_sha256 matchedPackage = @askexenow/exe-os@0.9.394 matchedPath = dist/chunk-5V7BD7Z4.js matchedIdentity = npm:QGFza2V4ZW5vdy9leGUtb3M:0.9.394 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-5V7BD7Z4.jsView on unpkg

12import { chmodSync, chownSync, readFileSync, writeFileSync, mkdirSync, existsSync, readdirSync } from "fs"; L13: import { execSync } from "child_process"; L14: import path from "path"; ... L221: function [redacted](opts = {}) { L222: const platformName = opts.platform ?? process.platform; L223: if (platformName !== "darwin") { ... L232: } L233: const env = opts.env ?? process.env; L234: const targetUser = env.SUDO_USER && env.SUDO_USER !== "root" ? env.SUDO_USER : ""; ... L348: try { L349: execSync(`launchctl bootout gui/${targetUid}/${label} 2>/dev/null`, { timeout: 5e3 }); L350: } catch {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunk-5V7BD7Z4.jsView on unpkg · L12

dist/project-boot-G7T5WHO6.jsView file

13import path from "path"; L14: import { execSync } from "child_process"; L15: import { existsSync, readFileSync } from "fs"; L16: import net from "net"; L17: var DAEMON_URL = `http://127.0.0.1:${resolveMcpHttpPort()}`; L18: var EXE_DIR = process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path.join(process.env.HOME ?? "/tmp", ".exe-os"); L19: var SOCK_PATH = path.join(EXE_DIR, "exed.sock");

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/project-boot-G7T5WHO6.jsView on unpkg · L13

dist/bin/install.jsView file

265import { existsSync, openSync, closeSync, writeFileSync, readFileSync, unlinkSync, statSync, mkdirSync, chmodSync, renameSync, readdirSync } from "fs"; L266: import { spawn, execSync } from "child_process"; L267: import path from "path"; L268: import os from "os"; L269: var homedir = os.homedir; L270: function exeDir() { ... L282: try { L283: const pkg = JSON.parse(readFileSync(path.join(pkgRoot, "package.json"), "utf8")); L284: return pkg.version; ... L303: versionMismatchWarned = true; L304: process.stderr.write( L305: `exe-os: daemon/client version mismatch (daemon ${daemonVersion}, client ${clientVersion}). Run: exe-os-install --global

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/bin/install.jsView on unpkg · L265

265Trigger-reachable chain: manifest.bin -> dist/bin/install.js L265: import { existsSync, openSync, closeSync, writeFileSync, readFileSync, unlinkSync, statSync, mkdirSync, chmodSync, renameSync, readdirSync } from "fs"; L266: import { spawn, execSync } from "child_process"; L267: import path from "path"; L268: import os from "os"; L269: var homedir = os.homedir; L270: function exeDir() { ... L282: try { L283: const pkg = JSON.parse(readFileSync(path.join(pkgRoot, "package.json"), "utf8")); L284: return pkg.version; ... L303: versionMismatchWarned = true; L304: process.stderr.write( L305: `exe-os: daemon/client version mismatch (daemon ${daemonVersion}, client ${clientVersion}). Run: exe-os-install --global

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/bin/install.jsView on unpkg · L265

265

dist/installer-ILYC4LI5.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/installer-ILYC4LI5.jsView on unpkg

dist/bin/deferred-daemon-restart.jsView file

219Cross-file remote execution chain: dist/bin/deferred-daemon-restart.js spawns dist/chunk-3OEVDGIY.js; helper contains network access plus dynamic code execution. L219: import { existsSync, openSync, closeSync, writeFileSync, unlinkSync, readFileSync } from "fs"; L220: import { spawn, execSync } from "child_process"; L221: import path from "path"; ... L234: try { L235: const pkg = JSON.parse(readFileSync(path.join(pkgRoot, "package.json"), "utf8")); L236: return pkg.version; ... L255: versionMismatchWarned = true; L256: process.stderr.write( L257: `[deferred-restart] daemon/client version mismatch (daemon ${daemonVersion}, client ${clientVersion}). Run: exe-os-install --global ... L263: const result2 = await new Promise((resolve) => { L264: const req = http.get(`http://127.0.0.1:${daemonPor

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/bin/deferred-daemon-restart.jsView on unpkg · L219

dist/bin/update.jsView file

154try { L155: execSync(`npm install -g @askexenow/exe-os@${manifest.version}`, { L156: stdio: ["pipe", "pipe", "inherit"],

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/update.jsView on unpkg · L154

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/update.jsView on unpkg

dist/bin/exe-start.shView file

•path = dist/bin/exe-start.sh kind = build_helper sizeBytes = 10931 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/bin/exe-start.shView on unpkg

deploy/compose/generate-env.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

deploy/compose/generate-env.ts#virtual:normalized:round1View on unpkg

dist/chunk-23XUZHB7.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-23XUZHB7.jsView on unpkg

dist/chunk-X4V5ZLNX.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-X4V5ZLNX.jsView on unpkg

dist/bin/cli.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/cli.jsView on unpkg

dist/bin/codex-reviewd-cli.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/codex-reviewd-cli.jsView on unpkg

dist/bin/exe-agent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-agent.jsView on unpkg

dist/bin/exe-cicd.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-cicd.jsView on unpkg

dist/bin/exe-launch-agent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-launch-agent.jsView on unpkg

dist/bin/exe-rename.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-rename.jsView on unpkg

dist/bin/exe-start-codex.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/exe-start-codex.jsView on unpkg

dist/chunk-BIV4IHED.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-BIV4IHED.jsView on unpkg