@bolloon/bolloon-agent@0.3.5: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@bolloon/bolloon-agent@0.3.5: Suspicious npm security report | LPM Firewall

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/bolloon.cjsView file

2const path = require("path"); L3: const { spawn } = require("child_process"); L4: const fs = require("fs");

High

Child Process

Package source references child process execution.

bin/bolloon.cjsView on unpkg · L2

1#!/usr/bin/env node L2: const path = require("path"); L3: const { spawn } = require("child_process");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/bolloon.cjsView on unpkg · L1

dist/agents/shell-tool.jsView file

62// M3.5 (2026-06-17): Windows 上 ls/cat/pwd 不在 PATH, 必须用 cmd 内置命令 (dir/type/cd) L63: // 但 cmd 内置命令不能在 shell: false 下跑, 切到 shell: true (Windows shell: cmd.exe, POSIX shell: /bin/sh) L64: // 风险: 元字符注入 — 通过 checkCommand + arg denylist 防护, 加 shellQuoteArgs() 转义

High

Shell

Package source references shell execution.

dist/agents/shell-tool.jsView on unpkg · L62

dist/heartbeat/StartupVerifier.jsView file

89package = @bolloon/bolloon-agent; repositoryIdentity = bolloon; dependency = @diap/sdk L89: try { L90: await import('@diap/sdk'); L91: this.completeCheck('p2p_modules', true, '@diap/sdk available');

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/heartbeat/StartupVerifier.jsView on unpkg · L89

dist/security/input-scanner.jsView file

56contains invisible/control Unicode U+200B (zero width space) const WHITESPACE_ANOMALY_RE = /[<U+200B>-<U+200F><U+FEFF>]{5,}/g;

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/security/input-scanner.jsView on unpkg · L56

scripts/build-web.tsView file

34try { L35: execSync(`npx tsc --outDir dist/web/components/p2p --declaration false --skipLibCheck --target ES2022 --module ESNext --moduleResolution bundler ${moduleFiles.join(' ')}`, { L36: cwd: ROOT,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/build-web.tsView on unpkg · L34

bin/ipfsView file

•path = bin/ipfs kind = native_binary sizeBytes = 77977152 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/ipfsView on unpkg

bin/bolloon.cmdView file

•path = bin/bolloon.cmd kind = build_helper sizeBytes = 230 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/bolloon.cmdView on unpkg

dist/web/icons/favicon.icnsView file

•path = dist/web/icons/favicon.icns kind = high_entropy_blob sizeBytes = 467940 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/web/icons/favicon.icnsView on unpkg

dist/agents/pi-sdk-tools.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @bolloon/bolloon-agent@0.2.7 matchedIdentity = npm:QGJvbGxvb24vYm9sbG9vbi1hZ2VudA:0.2.7 similarity = 0.608 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/agents/pi-sdk-tools.jsView on unpkg

Source & flagged code

12 flagged

package.jsonView file

Lines 25-65json

25 "build:main": "tsc",

26 "build:cli": "node scripts/build-cli.js",

27 "build:web": "npx tsx scripts/build-web.ts",

28 "build:electron": "tsc -p tsconfig.electron.json",

29 "build:all": "npm run build:main && npm run build:web && npm run build:electron && npm run build:cli",

30 "start": "node dist/index.js",

31 "dev": "tsx -r dotenv/config src/index.ts",

32 "dev:web": "npm run build:web && tsx -r dotenv/config src/index.ts --web",

33 "dev:electron": "npm run build:electron && npm run electron:start",

34 "electron:start": "NODE_ENV=development electron dist/electron.js",

35 "electron:dev": "concurrently \"npm run dev:web\" \"npm run electron:start\"",

36 "electron:build": "npm run build:electron && electron-builder",

37 "electron:pack": "electron-builder --dir",

38 "app:bundle": "node scripts/build-app-bundle.cjs",

39 "app:bundle:open": "node scripts/build-app-bundle.cjs && open \"release/mac-arm64/Bolloon Agent.app\"",

40 "smoke:esm": "node scripts/smoke-esm.mjs",

41 "prepublishOnly": "npm run build:all && npm run smoke:esm",

42 "test": "vitest run",

43 "test:watch": "vitest",

44 "test:pi-sdk": "tsx src/test/pi-sdk.test.ts",

45 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L45

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L45

46 },

47 "workspaces": [

48 "src/constraint-runtime"

49 ],

50 "dependencies": {

51 "@bolloon/bolloon-agent": "^0.3.3",

52 "@bolloon/constraint-runtime": "0.1.0",

53 "@capacitor/core": "^8.4.1",

54 "@capacitor/ios": "^8.4.1",

55 "@chainsafe/libp2p-noise": "^17.0.0",

56 "@chainsafe/libp2p-yamux": "^8.0.1",

57 "@diap/sdk": "^0.1.10",

58 "@libp2p/autonat": "^3.0.20",

59 "@libp2p/circuit-relay-v2": "^4.2.5",

60 "@libp2p/dcutr": "^3.0.20",

61 "@libp2p/identify": "^4.1.6",

62 "@libp2p/kad-dht": "^16.2.6",

63 "@libp2p/tcp": "^11.0.20",

64 "@libp2p/upnp-nat": "^4.0.20",

65 "@multiformats/multiaddr": "^13.0.3",

bin/bolloon.cjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2const path = require("path");

3const { spawn } = require("child_process");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/bolloon.cjsView on unpkg · L1

dist/agents/shell-tool.jsView file

Lines 42-82javascript

42 if (opts.allowedWriteTargets) {

43 for (const target of opts.allowedWriteTargets) {

44 const pathCheck = checkWritePath(target);

45 if (

dist/heartbeat/StartupVerifier.jsView file

Lines 69-109javascript

69 }

70 // 3. 检查 LLM 配置

71 this.addCheck('llm_config');

72 this.startCheck('llm_config');

73 const hasLlmKey

dist/security/input-scanner.jsView file

Lines 36-76javascript

36 { kind: 'pii-privatekey', re: /-----BEGIN (?:RSA|EC|OPENSSH|DSA|PGP) PRIVATE KEY-----/g },

37 { kind: 'secret-aws', re: /AKIA[0-9A-Z]{16}/g },

scripts/build-web.tsView file

Lines 14-54typescript

14

15 // 重要: 不能 rm -rf 整个 dist/web/, 否则会删掉 build:main 编译出来的

16 // dist/web/server.js. 只清理 web 静态资源, 保留 server.js.

17 for (const f of ['index.html', 'api-config.html', 'style.css', 'client.js', 'components']) {

bin/ipfsView file

•path = bin/ipfs kind = native_binary sizeBytes = 77977152 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/ipfsView on unpkg

bin/bolloon.cmdView file

•path = bin/bolloon.cmd kind = build_helper sizeBytes = 230 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/bolloon.cmdView on unpkg

dist/web/icons/favicon.icnsView file

•path = dist/web/icons/favicon.icns kind = high_entropy_blob sizeBytes = 467940 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/web/icons/favicon.icnsView on unpkg

dist/agents/pi-sdk-tools.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @bolloon/bolloon-agent@0.2.7 matchedIdentity = npm:QGJvbGxvb24vYm9sbG9vbi1hZ2VudA:0.2.7 similarity = 0.608 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/agents/pi-sdk-tools.jsView on unpkg