@astrale-os/cli@0.8.1-alpha.4: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@astrale-os/cli@0.8.1-alpha.4: Suspicious npm security report | LPM Firewall

Source & flagged code

19 flagged · loading source

package.jsonView file

•scripts.preinstall = node .check-workspace.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

studio/server/agent/harness/process.tsView file

1import { spawn } from 'node:child_process' L2:

High

Child Process

Package source references child process execution.

studio/server/agent/harness/process.tsView on unpkg · L1

dist/astrale.jsView file

1203} L1204: const execArgv = process2.execArgv ?? []; L1205: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/astrale.jsView on unpkg · L1203

53class CommanderError extends Error { L54: constructor(exitCode, code, message) { L55: super(message); ... L757: var EventEmitter = __require("node:events").EventEmitter; L758: var childProcess = __require("node:child_process"); L759: var path = __require("node:path"); ... L803: this._outputConfiguration = { L804: writeOut: (str) => process2.stdout.write(str), L805: writeErr: (str) => process2.stderr.write(str), ... L2327: if ("CI" in env) { L2328: if (["GITHUB_ACTIONS", "GITEA_ACTIONS", "CIRCLECI"].some((key) => (key in env))) { L2329: return 3;

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

dist/astrale.jsView on unpkg · L53

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/astrale.js: await handle.writeFile(data); await handle.writeFile(JSON.stringify({ pid: process.pid, createdAt: new Date().toISOString() })); "authorization", "proxy-authorization", const value = exactObject(input, ["method", "url", "authorization", "accept"], "token-exchange HTTP request"); if (value.authorization === null) { if (typeof value.authorization !== "string") { const authorization = /^Bearer ([^\s,]+)$/iu.exec(value.authorization);

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/astrale.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/astrale.js: // node_modules/.pnpm/commander@13.1.0/node_modules/commander/lib/error.js // node_modules/.pnpm/commander@13.1.0/node_modules/commander/lib/argument.js // node_modules/.pnpm/commander@13.1.0/node_modules/commander/lib/help.js // node_modules/.pnpm/commander@13.1.0/node_modules/commander/lib/option.js // node_modules/.pnpm/commander@13.1.0/node_modules/commander/lib/suggestSimilar.js // node_modules/.pnpm/commander@13.1.0/node_modules/commander/lib/command.js // node_modules/.pnpm/commander@13.1.0/node_modules/commander/index.js // node_modules/.pnpm/chalk@5.6.2/node_modules/chalk/source/vendor/ansi-styles/index.js

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/astrale.jsView on unpkg

53class CommanderError extends Error { L54: constructor(exitCode, code, message) { L55: super(message); ... L757: var EventEmitter = __require("node:events").EventEmitter; L758: var childProcess = __require("node:child_process"); L759: var path = __require("node:path"); ... L803: this._outputConfiguration = { L804: writeOut: (str) => process2.stdout.write(str), L805: writeErr: (str) => process2.stderr.write(str), ... L2327: if ("CI" in env) { L2328: if (["GITHUB_ACTIONS", "GITEA_ACTIONS", "CIRCLECI"].some((key) => (key in env))) { L2329: return 3;

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/astrale.jsView on unpkg · L53

63728constructor() { L63729: if (global[kExitEmitter]) { L63730: return global[kExitEmitter];

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/astrale.jsView on unpkg · L63728

53Cross-file remote execution chain: dist/astrale.js spawns dist/public/paths/index.js; helper contains network access plus dynamic code execution. L53: class CommanderError extends Error { L54: constructor(exitCode, code, message) { L55: super(message); ... L757: var EventEmitter = __require("node:events").EventEmitter; L758: var childProcess = __require("node:child_process"); L759: var path = __require("node:path"); ... L803: this._outputConfiguration = { L804: writeOut: (str) => process2.stdout.write(str), L805: writeErr: (str) => process2.stderr.write(str), ... L2327: if ("CI" in env) { L2328: if (["GITHUB_ACTIONS", "GITEA_ACTIONS", "CIRCLECI"].some((key) => (key in env))) { L2329: return 3;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/astrale.jsView on unpkg · L53

53Trigger-reachable credential exfiltration chain: manifest.bin -> dist/astrale.js L53: class CommanderError extends Error { L54: constructor(exitCode, code, message) { L55: super(message); ... L757: var EventEmitter = __require("node:events").EventEmitter; L758: var childProcess = __require("node:child_process"); L759: var path = __require("node:path"); ... L803: this._outputConfiguration = { L804: writeOut: (str) => process2.stdout.write(str), L805: writeErr: (str) => process2.stderr.write(str), ... L2327: if ("CI" in env) { L2328: if (["GITHUB_ACTIONS", "GITEA_ACTIONS", "CIRCLECI"].some((key) => (key in env))) { L2329: return 3;

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/astrale.jsView on unpkg · L53

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/astrale.jsView on unpkg

33360} L33361: eval(input, pos) { L33362: switch (this.type) {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/astrale.jsView on unpkg · L33360

studio/server/introspect/core-extractor.tsView file

75if (!domainFile) throw new Error('core-extractor: missing <domainFile>') L76: const mod: AnyRec = await import(domainFile) L77: const core = findCore(mod)

Medium

Dynamic Require

Package source references dynamic require/import behavior.

studio/server/introspect/core-extractor.tsView on unpkg · L75

studio/server/view-dev-server.tsView file

150const port = await this.reservePort() L151: const url = `http://127.0.0.1:${port}` L152: const child = spawn( L153: 'pnpm', ... L157: detached: process.platform !== 'win32', L158: env: { ...process.env, BROWSER: 'none', FORCE_COLOR: '0', NO_UPDATE_NOTIFIER: '1' }, L159: stdio: ['ignore', 'pipe', 'pipe'],

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

studio/server/view-dev-server.tsView on unpkg · L150

•matchType = normalized_sha256 matchedPackage = @astrale-os/cli@0.6.3-alpha.0 matchedPath = studio/server/view-dev-server.ts matchedIdentity = npm:QGFzdHJhbGUtb3MvY2xp:0.6.3-alpha.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

studio/server/view-dev-server.tsView on unpkg

src/telemetry/analyze.tsView file

•matchType = normalized_sha256 matchedPackage = @astrale-os/cli@0.6.3-alpha.0 matchedPath = src/telemetry/analyze.ts matchedIdentity = npm:QGFzdHJhbGUtb3MvY2xp:0.6.3-alpha.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/telemetry/analyze.tsView on unpkg

src/telemetry/trigger.tsView file

•matchType = normalized_sha256 matchedPackage = @astrale-os/cli@0.6.3-alpha.0 matchedPath = src/telemetry/trigger.ts matchedIdentity = npm:QGFzdHJhbGUtb3MvY2xp:0.6.3-alpha.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/telemetry/trigger.tsView on unpkg

studio/server/index.tsView file

•matchType = normalized_sha256 matchedPackage = @astrale-os/cli@0.6.3-alpha.0 matchedPath = studio/server/index.ts matchedIdentity = npm:QGFzdHJhbGUtb3MvY2xp:0.6.3-alpha.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

studio/server/index.tsView on unpkg

studio/server/state/create.tsView file

•matchType = normalized_sha256 matchedPackage = @astrale-os/cli@0.6.3-alpha.0 matchedPath = studio/server/state/create.ts matchedIdentity = npm:QGFzdHJhbGUtb3MvY2xp:0.6.3-alpha.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

studio/server/state/create.tsView on unpkg

Source & flagged code

19 flagged

package.jsonView file

Lines 82-113json

82 "lint-staged": {

83 "*.{js,cjs,mjs,ts,tsx}": [

84 "oxlint --fix --no-error-on-unmatched-pattern",

85 "oxfmt --write"

86 ],

87 "*.{json,yml,yaml}": [

88 "oxfmt --write"

89 ]

90 },

91 "devEngines": {

92 "runtime": {

93 "name": "node",

94 "version": ">=24 <25",

95 "onFail": "error"

96 }

97 },

98 "engines": {

99 "node": ">=22"

100 },

101 "scripts": {

102 "preinstall": "node .check-workspace.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L102

103 "build": "bun scripts/build.ts",

104 "package:check": "pnpm run typecheck && pnpm run test && pnpm run build && node scripts/verify-public-exports.mjs",

105 "typecheck": "tsgo --noEmit && tsgo --noEmit -p tsconfig.tests.json && tsgo --noEmit -p viewer && tsgo --noEmit -p studio",

106 "lint": "oxlint .",

107 "lint:fix": "oxlint --fix .",

108 "format": "pnpm exec oxfmt --write .",

109 "format:check": "pnpm exec oxfmt --check .",

110 "test": "bun test src",

111 "test:watch": "bun test --watch src"

112 }

113}

studio/server/agent/harness/process.tsView file

Lines 1-21typescript

1import { spawn } from 'node:child_process'

2

High

Child Process

Package source references child process execution.

studio/server/agent/harness/process.tsView on unpkg · L1

3export interface CapturedCommand {

4 code: number

5

dist/astrale.jsView file

1203} L1204: const execArgv = process2.execArgv ?? []; L1205: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/astrale.jsView on unpkg · L1203

53class CommanderError extends Error { L54: constructor(exitCode, code, message) { L55: super(message); ... L757: var EventEmitter = __require("node:events").EventEmitter; L758: var childProcess = __require("node:child_process"); L759: var path = __require("node:path"); ... L803: this._outputConfiguration = { L804: writeOut: (str) => process2.stdout.write(str), L805: writeErr: (str) => process2.stderr.write(str), ... L2327: if ("CI" in env) { L2328: if (["GITHUB_ACTIONS", "GITEA_ACTIONS", "CIRCLECI"].some((key) => (key in env))) { L2329: return 3;

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

dist/astrale.jsView on unpkg · L53

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/astrale.js: await handle.writeFile(data); await handle.writeFile(JSON.stringify({ pid: process.pid, createdAt: new Date().toISOString() })); "authorization", "proxy-authorization", const value = exactObject(input, ["method", "url", "authorization", "accept"], "token-exchange HTTP request"); if (value.authorization === null) { if (typeof value.authorization !== "string") { const authorization = /^Bearer ([^\s,]+)$/iu.exec(value.authorization);

High

studio/server/introspect/core-extractor.tsView file

Lines 55-95typescript

55 }

56 return null

57}

58

59/** Build def→className from the schema's own classes/interfaces + imported schemas. */

60function classNameMap(schema: AnyRec): Map<

studio/server/view-dev-server.tsView file

Lines 130-170typescript

130

131 async stop(root: string): Promise<void> {

132 const key = resolve(root)

133 const running = this.servers.get(key)

134 if (running

src/telemetry/analyze.tsView file

•matchType = normalized_sha256 matchedPackage = @astrale-os/cli@0.6.3-alpha.0 matchedPath = src/telemetry/analyze.ts matchedIdentity = npm:QGFzdHJhbGUtb3MvY2xp:0.6.3-alpha.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/telemetry/analyze.tsView on unpkg

src/telemetry/trigger.tsView file

•matchType = normalized_sha256 matchedPackage = @astrale-os/cli@0.6.3-alpha.0 matchedPath = src/telemetry/trigger.ts matchedIdentity = npm:QGFzdHJhbGUtb3MvY2xp:0.6.3-alpha.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/telemetry/trigger.tsView on unpkg

studio/server/index.tsView file

•matchType = normalized_sha256 matchedPackage = @astrale-os/cli@0.6.3-alpha.0 matchedPath = studio/server/index.ts matchedIdentity = npm:QGFzdHJhbGUtb3MvY2xp:0.6.3-alpha.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

studio/server/index.tsView on unpkg

studio/server/state/create.tsView file

•matchType = normalized_sha256 matchedPackage = @astrale-os/cli@0.6.3-alpha.0 matchedPath = studio/server/state/create.ts matchedIdentity = npm:QGFzdHJhbGUtb3MvY2xp:0.6.3-alpha.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

studio/server/state/create.tsView on unpkg