@astraworks/cli@0.2.17: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

@astraworks/cli@0.2.17: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/install/runtime.mjsView file

1import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url); L2: var Gn=Object.defineProperty;var R=(t,e,r)=>()=>{if(r)throw r[0];try{return t&&(e=t(t=0)),e}catch(n){throw r=[n],n}};var Vn=(t,e)=>{for(var r in e)Gn(t,r,{get:e[r],enumerable:!0})}... L3: `)}async function m(t){await C.mkdir(t,{recursive:!0})}async function ot(t,e,r={}){let n=await C.readdir(t,{withFileTypes:!0});for(let o of n){let a=K.join(t,o.name),i=K.join(e,o.n... L4: ... L12: ${r.stderr||""}`;return r.code===0&&/(?:-p,\s*--print|--print\b)/.test(n)}async function ua(t,e=[["--version"],["-v"]]){for(let r of e){let n=await P(t,r,{timeoutMs:3e3,maxChars:1e... L13: `),o=null;for(let a of n){let i=/^(\w[\w-]*)\s*:\s*(.*)$/.exec(a);if(i&&!a.startsWith(" ")&&!a.startsWi

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/install/runtime.mjsView on unpkg · L1

2var Gn=Object.defineProperty;var R=(t,e,r)=>()=>{if(r)throw r[0];try{return t&&(e=t(t=0)),e}catch(n){throw r=[n],n}};var Vn=(t,e)=>{for(var r in e)Gn(t,r,{get:e[r],enumerable:!0})}... L3: `)}async function m(t){await C.mkdir(t,{recursive:!0})}async function ot(t,e,r={}){let n=await C.readdir(t,{withFileTypes:!0});for(let o of n){let a=K.join(t,o.name),i=K.join(e,o.n... L4:

High

Child Process

Package source references child process execution.

dist/install/runtime.mjsView on unpkg · L2

2var Gn=Object.defineProperty;var R=(t,e,r)=>()=>{if(r)throw r[0];try{return t&&(e=t(t=0)),e}catch(n){throw r=[n],n}};var Vn=(t,e)=>{for(var r in e)Gn(t,r,{get:e[r],enumerable:!0})}... L3: `)}async function m(t){await C.mkdir(t,{recursive:!0})}async function ot(t,e,r={}){let n=await C.readdir(t,{withFileTypes:!0});for(let o of n){let a=K.join(t,o.name),i=K.join(e,o.n... L4: ... L9: `).map(e=>/^\s*[-*+]\s+(.+)$/.exec(e)?.[1]).filter(Boolean).map(ut)}function Me(t){return String(t||"").split(` L10: `).map(e=>/^\s*\d+[.)]\s+(.+)$/.exec(e)?.[1]).filter(Boolean).map(ut)}function en(t){return/扫描|读取|收集|写入|写回|更新|同步|归档|执行命令|生成/.test(t)?"script":/(?:由|交给|等待)(?:用户|人工).*(?:审批|拍板|确认|决策|... L11: `)})}async function ra(t,e=Be[t],r={}){if(!e)return null;let n=r.platform||process.platform,o={...process

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/install/runtime.mjsView on unpkg · L2

2var Gn=Object.defineProperty;var R=(t,e,r)=>()=>{if(r)throw r[0];try{return t&&(e=t(t=0)),e}catch(n){throw r=[n],n}};var Vn=(t,e)=>{for(var r in e)Gn(t,r,{get:e[r],enumerable:!0})}... L3: `)}async function m(t){await C.mkdir(t,{recursive:!0})}async function ot(t,e,r={}){let n=await C.readdir(t,{withFileTypes:!0});for(let o of n){let a=K.join(t,o.name),i=K.join(e,o.n... L4: ... L6: L7: ${r.slice(-n)}`}async function P(t,e,r={}){let{cwd:n=process.cwd(),input:o="",timeoutMs:a=3e5,maxChars:i=8e4,env:c={},signal:s}=r;return new Promise(l=>{let u=Mo(t,e),p=Fo(u.comman... L8: ${t}`,T=qt(e.loopType)||(/closed loop|目标完成后.*结束|完成后自动结束|达成.*停止/i.test(E)?"closed":"open");return{purpose:qe(s,260),outcome:qe(g,260),loopType:T==="closed"?"closed":"open",owner:qt(... L9: `).map(e=>/^\s*[-*+]\s+(.+)$/.

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/install/runtime.mjsView on unpkg · L2

2Trigger-reachable command-output exfiltration chain: scripts.postinstall -> scripts/postinstall.mjs -> dist/install/runtime.mjs L2: var Gn=Object.defineProperty;var R=(t,e,r)=>()=>{if(r)throw r[0];try{return t&&(e=t(t=0)),e}catch(n){throw r=[n],n}};var Vn=(t,e)=>{for(var r in e)Gn(t,r,{get:e[r],enumerable:!0})}... L3: `)}async function m(t){await C.mkdir(t,{recursive:!0})}async function ot(t,e,r={}){let n=await C.readdir(t,{withFileTypes:!0});for(let o of n){let a=K.join(t,o.name),i=K.join(e,o.n... L4: ... L6: L7: ${r.slice(-n)}`}async function P(t,e,r={}){let{cwd:n=process.cwd(),input:o="",timeoutMs:a=3e5,maxChars:i=8e4,env:c={},signal:s}=r;return new Promise(l=>{let u=Mo(t,e),p=Fo(u.comman... L8: ${t}`,T=qt(e.loopType)||(/closed loop|目标完成后.*结束|完成后自动结束|达成.*停止/i.test(E)?"closed":"open");

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/install/runtime.mjsView on unpkg · L2

dist/agent-baseline/skills/dashboard-extension-builder/scripts/validate_dashboard.pyView file

•path = dist/agent-baseline/skills/dashboard-extension-builder/scripts/validate_dashboard.py kind = build_helper sizeBytes = 1050 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/agent-baseline/skills/dashboard-extension-builder/scripts/validate_dashboard.pyView on unpkg

dist/agents/auto-capture.mjs#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/agents/auto-capture.mjs#virtual:string-array:round1View on unpkg

dist/agents/auto-capture.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @astraworks/cli@0.2.2 matchedIdentity = npm:QGFzdHJhd29ya3MvY2xp:0.2.2 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/agents/auto-capture.mjsView on unpkg

Source & flagged code

10 flagged

package.jsonView file

Lines 6-45json

6 "workspaces": [

7 "packages/*"

8 ],

9 "bin": {

10 "astraworks": "bin/astraworks.js"

11 },

12 "files": [

13 "bin",

14 "dist",

15 "scripts/postinstall.mjs",

16 "templates",

17 "schemas",

18 "LICENSE",

19 "README.md"

20 ],

21 "scripts": {

22 "clean": "node scripts/clean.mjs",

23 "build:agent-kit": "npm run build --workspace @astraworks/agent-kit",

24 "build": "npm run build:agent-kit && node scripts/build.mjs",

25 "build:release": "npm run build:agent-kit && node scripts/build-release.mjs",

26 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L26

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L26

27 "test:agent-kit": "npm test --workspace @astraworks/agent-kit",

28 "test": "npm run build && npm run test:agent-kit && bash test/run-all.sh",

29 "test:package-e2e": "npm run build && node test/package-e2e/run.mjs",

30 "pack:check": "npm run build && npm pack --dry-run",

31 "prepack": "npm run build:release"

32 },

33 "publishConfig": {

34 "access": "public"

35 },

36 "license": "SEE LICENSE IN LICENSE",

37 "engines": {

38 "node": ">=20"

39 },

40 "devDependencies": {

41 "esbuild": "^0.28.2",

42 "yaml": "^2.8.1"

43 }

44}

45

dist/install/runtime.mjsView file

Lines 1-22javascript

1import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);

2var Gn=Object.defineProperty;var R

dist/agent-baseline/skills/dashboard-extension-builder/scripts/validate_dashboard.pyView file

•path = dist/agent-baseline/skills/dashboard-extension-builder/scripts/validate_dashboard.py kind = build_helper sizeBytes = 1050 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/agent-baseline/skills/dashboard-extension-builder/scripts/validate_dashboard.pyView on unpkg

dist/agents/auto-capture.mjs#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/agents/auto-capture.mjs#virtual:string-array:round1View on unpkg

dist/agents/auto-capture.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @astraworks/cli@0.2.2 matchedIdentity = npm:QGFzdHJhd29ya3MvY2xp:0.2.2 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/agents/auto-capture.mjsView on unpkg