@aui.io/apollo@0.1.53: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

@aui.io/apollo@0.1.53: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/ensure-opentui.mjs && node ./scripts/setup-shell.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./scripts/ensure-opentui.mjs && node ./scripts/setup-shell.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/apollo.jsView file

10L11: const require = createRequire(import.meta.url); L12: const cliBin = require.resolve("@aui.io/apollo-cli/bin/apollo.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/apollo.jsView on unpkg · L10

node_modules/@aui.io/apollo-tui/node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView file

•path = node_modules/@aui.io/apollo-tui/node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasm kind = wasm_module sizeBytes = 691726 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

node_modules/@aui.io/apollo-tui/node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView on unpkg

node_modules/@aui.io/apollo-core/node_modules/yaml/dist/parse/lexer.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

node_modules/@aui.io/apollo-core/node_modules/yaml/dist/parse/lexer.js#virtual:normalized:round1View on unpkg

node_modules/@aui.io/apollo-cli/node_modules/commander/lib/command.jsView file

•matchType = normalized_sha256 matchedPackage = @aui.io/apollo@0.1.46 matchedPath = node_modules/@aui.io/apollo-cli/node_modules/commander/lib/command.js matchedIdentity = npm:QGF1aS5pby9hcG9sbG8:0.1.46 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@aui.io/apollo-cli/node_modules/commander/lib/command.jsView on unpkg

node_modules/@aui.io/apollo-core/dist/src/services/doctor.jsView file

•matchType = normalized_sha256 matchedPackage = @aui.io/apollo@0.1.46 matchedPath = node_modules/@aui.io/apollo-core/dist/src/services/doctor.js matchedIdentity = npm:QGF1aS5pby9hcG9sbG8:0.1.46 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@aui.io/apollo-core/dist/src/services/doctor.jsView on unpkg

node_modules/@aui.io/apollo-tui/dist/src/lib/ide.jsView file

•matchType = normalized_sha256 matchedPackage = @aui.io/apollo@0.1.46 matchedPath = node_modules/@aui.io/apollo-tui/dist/src/lib/ide.js matchedIdentity = npm:QGF1aS5pby9hcG9sbG8:0.1.46 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@aui.io/apollo-tui/dist/src/lib/ide.jsView on unpkg

node_modules/@aui.io/apollo-core/dist/src/api/identity.jsView file

•matchType = normalized_sha256 matchedPackage = @aui.io/apollo@0.1.46 matchedPath = node_modules/@aui.io/apollo-core/dist/src/api/identity.js matchedIdentity = npm:QGF1aS5pby9hcG9sbG8:0.1.46 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@aui.io/apollo-core/dist/src/api/identity.jsView on unpkg

node_modules/@aui.io/apollo-tui/node_modules/@opentui/core/chunk-bun-t2myhmwd.jsView file

•matchType = normalized_sha256 matchedPackage = @aui.io/apollo@0.1.46 matchedPath = node_modules/@aui.io/apollo-tui/node_modules/@opentui/core/chunk-bun-t2myhmwd.js matchedIdentity = npm:QGF1aS5pby9hcG9sbG8:0.1.46 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@aui.io/apollo-tui/node_modules/@opentui/core/chunk-bun-t2myhmwd.jsView on unpkg

node_modules/@aui.io/apollo-core/dist/src/services/upgrade.jsView file

•matchType = normalized_sha256 matchedPackage = @aui.io/apollo@0.1.46 matchedPath = node_modules/@aui.io/apollo-core/dist/src/services/upgrade.js matchedIdentity = npm:QGF1aS5pby9hcG9sbG8:0.1.46 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@aui.io/apollo-core/dist/src/services/upgrade.jsView on unpkg

node_modules/@aui.io/apollo-tui/dist/src/author/backend/claudeCode.jsView file

•matchType = normalized_sha256 matchedPackage = @aui.io/apollo@0.1.46 matchedPath = node_modules/@aui.io/apollo-[redacted].js matchedIdentity = npm:QGF1aS5pby9hcG9sbG8:0.1.46 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@aui.io/apollo-tui/dist/src/author/backend/claudeCode.jsView on unpkg

node_modules/@aui.io/apollo-tui/dist/src/index.jsView file

•matchType = normalized_sha256 matchedPackage = @aui.io/apollo@0.1.46 matchedPath = node_modules/@aui.io/apollo-tui/dist/src/index.js matchedIdentity = npm:QGF1aS5pby9hcG9sbG8:0.1.46 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@aui.io/apollo-tui/dist/src/index.jsView on unpkg

node_modules/@aui.io/apollo-core/dist/src/api/management.jsView file

•matchType = normalized_sha256 matchedPackage = @aui.io/apollo@0.1.46 matchedPath = node_modules/@aui.io/apollo-core/dist/src/api/management.js matchedIdentity = npm:QGF1aS5pby9hcG9sbG8:0.1.46 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@aui.io/apollo-core/dist/src/api/management.jsView on unpkg

node_modules/@aui.io/apollo-core/dist/src/services/knowledge.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @aui.io/apollo@0.1.43 matchedIdentity = npm:QGF1aS5pby9hcG9sbG8:0.1.43 similarity = 0.817 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

node_modules/@aui.io/apollo-core/dist/src/services/knowledge.jsView on unpkg