@brainervirus/workit-opencode@8.21.0: Clean npm security report

AI Security Review

scanned 13h ago · by lpm-firewall-ai

The inspected runtime uses a locally configured YouTrack token and sends it to that configuration’s API endpoint; its setup flow asks the user to create and supply the token. The manifest has no install hook, and the scanner’s fixed-gateway and command-exfiltration hints are not supported by the reviewed source paths.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

A user invokes a YouTrack feature that fetches issue details.

Impact

The inspected flow uses the token for the configured YouTrack service; it does not establish an unrelated credential recipient or other attack impact.

Mechanism

The plugin reads a token from its configured local token file and sends it to the configured YouTrack API base URL.

AI rationale

The inspected runtime uses a locally configured YouTrack token and sends it to that configuration’s API endpoint; its setup flow asks the user to create and supply the token. The manifest has no install hook, and the scanner’s fixed-gateway and command-exfiltration hints are not supported by the reviewed source paths.

Evidence

package.jsondist/plugin.js

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest points to dist/plugin.js and declares only build and typecheck scripts; it has no install lifecycle hook.
The YouTrack token is read from a configured local token file, with file-permission and placeholder checks.
The request sends the token to the configured YouTrack base URL’s API endpoint.
The setup flow tells the user to create a YouTrack token and paste it into the token file.

Evidence against

No fixed unofficial gateway or automatic install-time credential transfer was found in the inspected source.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 956 KB of source, external domains: gitlab.com, json-schema.org, opencode.ai, www.jetbrains.com, youtrack.example.com

Source & flagged code

5 flagged

dist/plugin.jsView file

6// packages/workit-core/src/core.ts L7: import { spawnSync as spawnSync16 } from "node:child_process"; L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs";

High

Child Process

Package source references child process execution.

dist/plugin.jsView on unpkg · L6

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/plugin.js: decision: "Record or revoke a user decision (never an authorization).", fs3.writeFileSync(fd, raw, "utf8"); writeFileSync writeFileSync(path3.join(dir, "config.json"), JSON.stringify(config, null, 2) + ` youtrack: object({ baseUrl: nonBlank.optional(), link_issues: boolean2().optional() }).passthrough().optional(), baseUrl: text2(yt.baseUrl), if (common.baseUrl) return { provider: "youtrack", link: false, ...common, source: "youtrack.baseUrl" };

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/plugin.jsView on unpkg

6// packages/workit-core/src/core.ts L7: import { spawnSync as spawnSync16 } from "node:child_process"; L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs"; ... L396: for (let i = 0;i < units - 1; i++) { L397: if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) { L398: count--; ... L830: } L831: return result.issues.length ? failure(_Err, result.issues, ctx) : { success: true, data: result.value }; L832: }; ... L1706: return false; L1707: return canParseURL(`http://[${value}]`); L1708: }

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/plugin.jsView on unpkg · L6

•matchType = normalized_sha256 matchedPackage = @brainervirus/workit-opencode@8.19.1 matchedPath = dist/plugin.js matchedIdentity = npm:[redacted]:8.19.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/plugin.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 4ee8dc36a4e63e2b signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @brainervirus/workit-opencode@8.19.1 matchedPath = dist/plugin.js matchedIdentity = npm:[redacted]:8.19.1 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/plugin.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist/plugin.jsView file

6// packages/workit-core/src/core.ts L7: import { spawnSync as spawnSync16 } from "node:child_process"; L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs";

High

Child Process

Package source references child process execution.

dist/plugin.jsView on unpkg · L6

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/plugin.js: decision: "Record or revoke a user decision (never an authorization).", fs3.writeFileSync(fd, raw, "utf8"); writeFileSync writeFileSync(path3.join(dir, "config.json"), JSON.stringify(config, null, 2) + ` youtrack: object({ baseUrl: nonBlank.optional(), link_issues: boolean2().optional() }).passthrough().optional(), baseUrl: text2(yt.baseUrl), if (common.baseUrl) return { provider: "youtrack", link: false, ...common, source: "youtrack.baseUrl" };

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/plugin.jsView on unpkg

6// packages/workit-core/src/core.ts L7: import { spawnSync as spawnSync16 } from "node:child_process"; L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs"; ... L396: for (let i = 0;i < units - 1; i++) { L397: if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) { L398: count--; ... L830: } L831: return result.issues.length ? failure(_Err, result.issues, ctx) : { success: true, data: result.value }; L832: }; ... L1706: return false; L1707: return canParseURL(`http://[${value}]`); L1708: }

Findings

5 High2 Medium5 Low

HighChild Processdist/plugin.js

HighCredential Redirect Persistencedist/plugin.js

HighCommand Output Exfiltrationdist/plugin.js

HighKnown Malware Source Similaritydist/plugin.js

HighKnown Malware Source Fingerprint Signaturedist/plugin.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Behavioral surface

Source & flagged code