@brainervirus/workit-opencode@8.16.0: Clean npm security report

AI Security Review

scanned 1d ago · by lpm-firewall-ai

Static inspection found no install lifecycle hook or fixed unofficial gateway. The YouTrack request uses a locally stored token and a configurable service base URL, with setup requiring confirmation and user-supplied credentials.

Static reason

One or more suspicious static signals were detected.

Trigger

A user invokes YouTrack tooling after configuring an instance and token file.

Impact

The inspected behavior supports a normal authenticated request to the configured service; no package-selected credential recipient or attack impact was established.

Mechanism

The plugin reads the local token and sends it as a bearer credential to the configured instance's issue API. Initialization requires confirmation and provides a placeholder for a user-supplied token.

AI rationale

Static inspection found no install lifecycle hook or fixed unofficial gateway. The YouTrack request uses a locally stored token and a configurable service base URL, with setup requiring confirmation and user-supplied credentials.

Evidence

dist/plugin.jsyoutrack.jsonyoutrack.token

Network endpoints1

youtrack.example.com

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json points to dist/plugin.js and lists only build and typecheck scripts; it has no npm lifecycle hook.
The YouTrack client reads a token from a configured local file and uses the configured base URL for its API request.
The request sends a bearer token to that base URL's issue API; the scaffold uses a placeholder host and directs the user to add their own YouTrack token.
Initialization requires explicit confirmation, and the scaffold leaves a placeholder in the token file for the user to replace.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 909 KB of source, external domains: gitlab.com, json-schema.org, opencode.ai, www.jetbrains.com, youtrack.example.com

Source & flagged code

5 flagged

dist/plugin.jsView file

6// packages/workit-core/src/core.ts L7: import { spawnSync as spawnSync16 } from "node:child_process"; L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs";

High

Child Process

Package source references child process execution.

dist/plugin.jsView on unpkg · L6

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/plugin.js: decision: "Record or revoke a user decision (never an authorization).", fs3.writeFileSync(fd, raw, "utf8"); "authorization", (env) => env.CODEX_INTERNAL_ORIGINATOR_OVERRIDE === "Codex Desktop" || env.CODEX_ELECTRON_RESOURCES_PATH ? "codex_desktop" : "codex_cli" fs8.writeFileSync(path8.join(legacy, "tasks", name), bytes); fs8.writeFileSync(ignore, `* retryTransient(() => fs8.writeFileSync(ignore, `* writeFileSync as writeFileSync2

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/plugin.jsView on unpkg

6// packages/workit-core/src/core.ts L7: import { spawnSync as spawnSync16 } from "node:child_process"; L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs"; ... L396: for (let i = 0;i < units - 1; i++) { L397: if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) { L398: count--; ... L830: } L831: return result.issues.length ? failure(_Err, result.issues, ctx) : { success: true, data: result.value }; L832: }; ... L1706: return false; L1707: return canParseURL(`http://[${value}]`); L1708: }

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/plugin.jsView on unpkg · L6

package.jsonView file

29"type": "module", "main": "./dist/plugin.js", "exports": { ".": "./dist/plugin.js" }, "publishConfig": { "access": "public" }, "scripts": { "build": "bun scripts/build.ts", "typecheck": "tsc

Low

Suspicious Lifecycle Evidence

package.json points to dist/plugin.js and lists only build and typecheck scripts; it has no npm lifecycle hook.

package.jsonView on unpkg · L29

37"scripts": { "build": "bun scripts/build.ts", "typecheck": "tsc --noEmit" }, "devDependencies":

Low

Suspicious Lifecycle Evidence

package.json points to dist/plugin.js and lists only build and typecheck scripts; it has no npm lifecycle hook.

package.jsonView on unpkg · L37

Source & flagged code

5 flagged · loading source

dist/plugin.jsView file

6// packages/workit-core/src/core.ts L7: import { spawnSync as spawnSync16 } from "node:child_process"; L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs";

High

Child Process

Package source references child process execution.

dist/plugin.jsView on unpkg · L6

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/plugin.js: decision: "Record or revoke a user decision (never an authorization).", fs3.writeFileSync(fd, raw, "utf8"); "authorization", (env) => env.CODEX_INTERNAL_ORIGINATOR_OVERRIDE === "Codex Desktop" || env.CODEX_ELECTRON_RESOURCES_PATH ? "codex_desktop" : "codex_cli" fs8.writeFileSync(path8.join(legacy, "tasks", name), bytes); fs8.writeFileSync(ignore, `* retryTransient(() => fs8.writeFileSync(ignore, `* writeFileSync as writeFileSync2

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/plugin.jsView on unpkg

6// packages/workit-core/src/core.ts L7: import { spawnSync as spawnSync16 } from "node:child_process"; L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs"; ... L396: for (let i = 0;i < units - 1; i++) { L397: if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) { L398: count--; ... L830: } L831: return result.issues.length ? failure(_Err, result.issues, ctx) : { success: true, data: result.value }; L832: }; ... L1706: return false; L1707: return canParseURL(`http://[${value}]`); L1708: }

Findings

3 High2 Medium7 Low

HighChild Processdist/plugin.js

HighCredential Redirect Persistencedist/plugin.js

HighCommand Output Exfiltrationdist/plugin.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Behavioral surface

Source & flagged code