@brainervirus/workit-opencode@0.7.1: Suspicious npm security | LPM Firewall

Loading npm security reports…

@brainervirus/workit-opencode@0.7.1: Suspicious npm security | LPM Firewall

Source & flagged code

6 flagged · loading source

assets/vendor/superpowers/skills/brainstorming/scripts/server.cjsView file

•matchType = normalized_sha256 matchedPackage = @kl-c/matrixos@0.3.65 matchedPath = dist/cli/skills/superpowers-brainstorming/scripts/server.cjs matchedIdentity = npm:QGtsLWMvbWF0cml4b3M:0.3.65 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/vendor/superpowers/skills/brainstorming/scripts/server.cjsView on unpkg

1const crypto = require('crypto'); L2: const http = require('http'); L3: const fs = require('fs'); ... L12: function computeAcceptKey(clientKey) { L13: return crypto.createHash('sha1').update(clientKey + WS_MAGIC).digest('base64'); L14: } ... L84: L85: const PORT_FILE = process.env.BRAINSTORM_PORT_FILE || null; L86: const randomPort = () => 49152 + Math.floor(Math.random() * 16383); ... L195: try { sessionStorage.setItem('brainstorm-session-key', ${jsonKey}); } catch (e) {} L196: location.replace('/'); L197: </script>

Low

Weak Crypto

Package source references weak cryptographic algorithms.

assets/vendor/superpowers/skills/brainstorming/scripts/server.cjsView on unpkg · L1

dist/plugin.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/plugin.js: writeFileSync writeFileSync(path.join(dir, "config.json"), JSON.stringify(config, null, 2) + ` import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, readdirSync as readdirSync2, writeFileSync as writeFileSync2 } from "node:fs"; writeFileSync2(file, md, "utf8"); import { writeFileSync as writeFileSync3 } from "node:fs"; function writeFileExclusive(file, content, mode) { writeFileSync3(file, content, { encoding: "utf8", flag: "wx", mode }); writeFileSync as writeFileSync7

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/plugin.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/plugin.js: copyFileSync, writeFileSync copyFileSync(src, dest); writeFileSync(path.join(dir, "config.json"), JSON.stringify(config, null, 2) + ` import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, readdirSync as readdirSync2, writeFileSync as writeFileSync2 } from "node:fs"; writeFileSync2(file, md, "utf8"); HARD-GATE: Workflow-toolkit contract is already loaded below. Follow it on every turn; it overrides conflicting Superpowers defaults (brainstorming chat options, visual companion, ... import { writeFileSync as writeFileSync3 } from "node:fs";

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/plugin.jsView on unpkg

package.jsonView file

24"type": "module", "main": "./dist/plugin.js", "exports": { ".": "./dist/plugin.js" },

Medium

Ai Review Evidence

Entrypoint loads as an OpenCode plugin and mutates host configuration at runtime.

package.jsonView on unpkg · L24