@brainervirus/workit-opencode@8.19.2: Clean npm security report

AI Security Review

scanned 15h ago · by lpm-firewall-ai

The manifest exposes the plugin without an install lifecycle hook. The inspected credential flow is tied to the configured YouTrack issue API and an issue-context request, with no confirmed attack behavior.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

A requested context includes a YouTrack issue ID.

Impact

The request retrieves issue data from the configured YouTrack service; no unrelated recipient or install-time action was established.

Mechanism

The plugin reads the configured token file and sends bearer authentication to the configured base URL’s YouTrack issue API.

AI rationale

The manifest exposes the plugin without an install lifecycle hook. The inspected credential flow is tied to the configured YouTrack issue API and an issue-context request, with no confirmed attack behavior.

Network endpoints1

youtrack.example.com (scaffold default)

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exports dist/plugin.js and defines only build and typecheck scripts, with no install lifecycle hook.
The YouTrack flow reads a token from its configured local file and uses the configured base URL; the scaffold uses a placeholder host and offers YouTrack-scoped token setup.
The token is sent as bearer authentication to the configured base URL’s YouTrack issue API when a requested context contains an issue ID.
No unrelated credential recipient or confirmed attack behavior was identified in the inspected source.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 949 KB of source, external domains: gitlab.com, json-schema.org, opencode.ai, www.jetbrains.com, youtrack.example.com

Source & flagged code

5 flagged

dist/plugin.jsView file

6// packages/workit-core/src/core.ts L7: import { spawnSync as spawnSync16 } from "node:child_process"; L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs";

High

Child Process

Package source references child process execution.

dist/plugin.jsView on unpkg · L6

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/plugin.js: decision: "Record or revoke a user decision (never an authorization).", fs3.writeFileSync(fd, raw, "utf8"); writeFileSync writeFileSync(path3.join(dir, "config.json"), JSON.stringify(config, null, 2) + ` youtrack: object({ baseUrl: nonBlank.optional(), link_issues: boolean2().optional() }).passthrough().optional(), baseUrl: text2(yt.baseUrl), if (common.baseUrl) return { provider: "youtrack", link: false, ...common, source: "youtrack.baseUrl" };

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/plugin.jsView on unpkg

6// packages/workit-core/src/core.ts L7: import { spawnSync as spawnSync16 } from "node:child_process"; L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs"; ... L396: for (let i = 0;i < units - 1; i++) { L397: if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) { L398: count--; ... L830: } L831: return result.issues.length ? failure(_Err, result.issues, ctx) : { success: true, data: result.value }; L832: }; ... L1706: return false; L1707: return canParseURL(`http://[${value}]`); L1708: }

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/plugin.jsView on unpkg · L6

•matchType = normalized_sha256 matchedPackage = @brainervirus/workit-opencode@8.19.1 matchedPath = dist/plugin.js matchedIdentity = npm:[redacted]:8.19.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/plugin.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 4ee8dc36a4e63e2b signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @brainervirus/workit-opencode@8.19.1 matchedPath = dist/plugin.js matchedIdentity = npm:[redacted]:8.19.1 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/plugin.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist/plugin.jsView file

6// packages/workit-core/src/core.ts L7: import { spawnSync as spawnSync16 } from "node:child_process"; L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs";

High

Child Process

Package source references child process execution.

dist/plugin.jsView on unpkg · L6

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/plugin.js: decision: "Record or revoke a user decision (never an authorization).", fs3.writeFileSync(fd, raw, "utf8"); writeFileSync writeFileSync(path3.join(dir, "config.json"), JSON.stringify(config, null, 2) + ` youtrack: object({ baseUrl: nonBlank.optional(), link_issues: boolean2().optional() }).passthrough().optional(), baseUrl: text2(yt.baseUrl), if (common.baseUrl) return { provider: "youtrack", link: false, ...common, source: "youtrack.baseUrl" };

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/plugin.jsView on unpkg

6// packages/workit-core/src/core.ts L7: import { spawnSync as spawnSync16 } from "node:child_process"; L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs"; ... L396: for (let i = 0;i < units - 1; i++) { L397: if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) { L398: count--; ... L830: } L831: return result.issues.length ? failure(_Err, result.issues, ctx) : { success: true, data: result.value }; L832: }; ... L1706: return false; L1707: return canParseURL(`http://[${value}]`); L1708: }

Findings

5 High2 Medium5 Low

HighChild Processdist/plugin.js

HighCredential Redirect Persistencedist/plugin.js

HighCommand Output Exfiltrationdist/plugin.js

HighKnown Malware Source Similaritydist/plugin.js

HighKnown Malware Source Fingerprint Signaturedist/plugin.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Behavioral surface

Source & flagged code