@bangdao-ai/acw-tools@1.13.73: Malicious npm security report | LPM Firewall

Loading npm security reports…

@bangdao-ai/acw-tools@1.13.73: Malicious npm security report | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.jsView file

1#!/usr/bin/env node L2: const _0x121e8b=_0x596e;(function(_0x51c660,_0x63287){const _0x50f299=_0x596e,_0x54709e=_0x51c660();while(!![]){try{const _0x1c89e7=parseInt(_0x50f299(0x18d))/0x1+parseInt(_0x50f29...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

postinstall.jsView on unpkg · L1

postinstall.js#virtual:normalized:round1View file

1#!/usr/bin/env node L2: const _0x121e8b=_0x596e;(function(_0x51c660,_0x63287){const _0x50f299=_0x596e,_0x54709e=_0x51c660();while(!![]){try{const _0x1c89e7=parseInt(_0x50f299(0x18d))/0x1+parseInt(_0x50f29...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

postinstall.js#virtual:normalized:round1View on unpkg · L1

claudeCodeParser.jsView file

2L3: (function(_0x5ba6f7,_0x2ac66b){const _0x2a3b5d={_0x2324bc:0x15a,_0x392028:0x180,_0x5f4780:0x1f6,_0x158d04:0x167,_0x8cf506:0x1cc,_0x309bfb:0x1b9,_0x19bcc3:0x181,_0x1ac688:0x297,_0x2...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

claudeCodeParser.jsView on unpkg · L2

index.jsView file

•path = index.js kind = oversized_source_file sizeBytes = 4548560 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

index.jsView on unpkg

•path = index.js kind = oversized_cli_entrypoint sizeBytes = 4548560 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

index.jsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 1-34json

1{

2 "name": "@bangdao-ai/acw-tools",

3 "version": "1.13.73",

4 "type": "module",

5 "description": "MCP (Model Context Protocol) tools for ACW - download rules and initialize Common Admin projects",

6 "main": "launcher.js",

7 "bin": {

8 "acw-tools": "launcher.js"

9 },

10 "scripts": {

11 "test": "node --test ./*.test.js",

12 "start:stdio": "node launcher.js",

13 "release": "npm run build && cd dist && npm publish --access public",

14 "postinstall": "node postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L14

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L14

15 },

16 "keywords": [

17 "mcp",

18 "model-context-protocol",

19 "acw",

20 "rules",

21 "template",

22 "common-admin",

23 "downloader",

24 "cursor",

25 "ai",

26 "automation"

27 ],

28 "author": "bangdao-ai",

29 "license": "MIT",

30 "contentPolicy": {

31 "class": "dual-use"

32 },

33 "publishConfig": {

34 "access": "public"

postinstall.jsView file

Lines 1-2javascript

1#!/usr/bin/env node

2const _0x121e8b=_0x596e;(function(_0x51c660,_0x63287){const _0x50f299=_0x596e,_0x54709e=_0x51c660();while(!![]){try{

postinstall.js#virtual:normalized:round1View file

1#!/usr/bin/env node L2: const _0x121e8b=_0x596e;(function(_0x51c660,_0x63287){const _0x50f299=_0x596e,_0x54709e=_0x51c660();while(!![]){try{const _0x1c89e7=parseInt(_0x50f299(0x18d))/0x1+parseInt(_0x50f29...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

postinstall.js#virtual:normalized:round1View on unpkg · L1

claudeCodeParser.jsView file

Lines 1-3javascript

1#!/usr/bin/env node

2

3(function(_0x5ba6f7,_0x2ac66b){const _0x2a3b5d={_0x2324bc:0x15a,_0x392028:0x180,_0x5f4780:0x1f6,_0x158d04:0x167,_0x8cf506:0x1cc,_0x309bfb:0x1b9,_0x19bcc3:

index.jsView file

•path = index.js kind = oversized_source_file sizeBytes = 4548560 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

index.jsView on unpkg

•path = index.js kind = oversized_cli_entrypoint sizeBytes = 4548560 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

index.jsView on unpkg