registry / @bubblebrain-ai/bubble / 0.0.34

@bubblebrain-ai/bubble@0.0.34

A terminal coding agent

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 275 file(s), 1.82 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.deepseek.com, api.fireworks.ai, api.groq.com, api.kimi.com, api.minimaxi.com, api.moonshot.ai, api.moonshot.cn, api.openai.com, api.stepfun.com, api.together.xyz, api.z.ai, ark.cn-beijing.volces.com, auth.openai.com, bubble-feedback.chengshengdeng97.workers.dev, bun.sh, chatgpt.com, dashscope.aliyuncs.com, generativelanguage.googleapis.com, mcp.exa.ai, open.bigmodel.cn, openrouter.ai, registry.npmjs.org, system-proxy-default.invalid

Source & flagged code

5 flagged

dist/tui-ink/image-paste.jsView file

Lines 1-29javascript

1/**

2 * Image paste utilities: path detection, file reading, clipboard access, and size-capping.

3 *

4 * Terminals don't forward image bytes to stdin. Paths arrive as text when users

5 * drag files in; Cmd+V of an image produces an empty paste (we probe the

6 * clipboard). macOS screenshot shortcut (Cmd+Shift+Ctrl+4) writes to both a

7 * TemporaryItems path and the clipboard — the path often gets cleaned up before

8 * we can read it, so we fall back to the clipboard.

9 */

10import { execFile } from "node:child_process";

11import fs from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/tui-ink/image-paste.jsView on unpkg · L9

12import os from "node:os";

13import path from "node:path";

14import { promisify } from "node:util";

15const execFileAsync = promisify(execFile);

16const IMAGE_EXT = /\.(png|jpe?g|gif|webp|bmp)$/i;

17const IMAGE_EXT_SOURCE = String.raw `(?:png|jpe?g|gif|webp|bmp)`;

18// Anthropic/OpenAI image uploads cap at ~5MB base64. We target a bit below so

19// the base64 inflation (4/3) doesn't push us over.

20const MAX_BASE64_BYTES = 5 * 1024 * 1024;

21const RESIZE_TRIGGER_BYTES = Math.floor(MAX_BASE64_BYTES * 0.95);

22// Target max dimension for auto-resize.

23const RESIZE_MAX_DIM = 2048;

24export function isImageFilePath(raw) {

25 const s = raw.trim();

26 if (!s)

27 return false;

28 if (!IMAGE_EXT.test(s))

29 return false;

Lines 293-333javascript

293 encoding: "buffer",

294 });

295 const buf = result.stdout;

296 if (buf && buf.length > 0) {

297 return attachmentFromBuffer(buf, "image/png");

298 }

299

dist/tools/server-manager.jsView file

Lines 5-45javascript

5const MAX_LOG_BYTES = 96 * 1024;

6const STOP_FORCE_AFTER_MS = 1000;

7const servers = new Map();

8let nextServerId = 1

dist/oauth/openai-codex.jsView file

Lines 1-23javascript

1/**

2 * OpenAI Codex OAuth login (PKCE + local callback).

3 */

4import { createServer } from "node:http";

5import { exec } from "node:child_process";

6import { randomBytes, createHash } from "node:crypto";

7import { chatGptFetch } from "../network/chatgpt-transport.js"

dist/provider-ai-sdk.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @bubblebrain-ai/bubble@0.0.33 matchedIdentity = npm:QGJ1YmJsZWJyYWluLWFpL2J1YmJsZQ:0.0.33 similarity = 0.958 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/provider-ai-sdk.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist/tui-ink/image-paste.jsView file

9*/ L10: import { execFile } from "node:child_process"; L11: import fs from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/tui-ink/image-paste.jsView on unpkg · L9

313try { L314: const result = await execFileAsync("powershell", ["-NoProfile", "-Command", script], { timeout: 5000 }); L315: if (!String(result.stdout).includes("OK"))

High

Shell

Package source references shell execution.

dist/tui-ink/image-paste.jsView on unpkg · L313

dist/tools/server-manager.jsView file

25} L26: const shell = platform() === "win32" ? "cmd.exe" : "bash"; L27: const shellArgs = platform() === "win32" ? ["/c", command] : ["-c", command]; ... L30: stdio: ["ignore", "pipe", "pipe"], L31: env: process.env, L32: detached: platform() !== "win32", ... L39: const id = `server_${String(nextServerId++).padStart(4, "0")}`; L40: const readinessUrl = input.readinessUrl ?? (input.port ? `http://localhost:${input.port}` : undefined); L41: const record = {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/tools/server-manager.jsView on unpkg · L25

dist/oauth/openai-codex.jsView file

3*/ L4: import { createServer } from "node:http"; L5: import { exec } from "node:child_process"; L6: import { randomBytes, createHash } from "node:crypto"; ... L13: function generatePKCE() { L14: const codeVerifier = randomBytes(32).toString("base64url"); L15: const codeChallenge = createHash("sha256").update(codeVerifier).digest("base64url"); ... L21: function openBrowser(url) { L22: const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open"; L23: exec(`${cmd} ${JSON.stringify(url)}`, () => { ... L40: res.writeHead(400, { "Content-Type": "text/html" }); L41: res.end(`<html><body><h1>Authorization failed</h1><p>${errorDesc || error}</p></body></html>`);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/oauth/openai-codex.jsView on unpkg · L3

dist/provider-ai-sdk.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/provider-ai-sdk.jsView on unpkg

Findings

5 High3 Medium5 Low

HighChild Processdist/tui-ink/image-paste.js

HighShelldist/tui-ink/image-paste.js

HighSame File Env Network Executiondist/tools/server-manager.js

HighSandbox Evasion Gated Capabilitydist/oauth/openai-codex.js

HighPrevious Version Dangerous Deltadist/provider-ai-sdk.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

5 flagged

dist/tui-ink/image-paste.jsView file

Lines 1-29javascript

1/**

2 * Image paste utilities: path detection, file reading, clipboard access, and size-capping.

3 *

4 * Terminals don't forward image bytes to stdin. Paths arrive as text when users

5 * drag files in; Cmd+V of an image produces an empty paste (we probe the

6 * clipboard). macOS screenshot shortcut (Cmd+Shift+Ctrl+4) writes to both a

7 * TemporaryItems path and the clipboard — the path often gets cleaned up before

8 * we can read it, so we fall back to the clipboard.

9 */

10import { execFile } from "node:child_process";

11import fs from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/tui-ink/image-paste.jsView on unpkg · L9

12import os from "node:os";

13import path from "node:path";

14import { promisify } from "node:util";

15const execFileAsync = promisify(execFile);

16const IMAGE_EXT = /\.(png|jpe?g|gif|webp|bmp)$/i;

17const IMAGE_EXT_SOURCE = String.raw `(?:png|jpe?g|gif|webp|bmp)`;

18// Anthropic/OpenAI image uploads cap at ~5MB base64. We target a bit below so

19// the base64 inflation (4/3) doesn't push us over.

20const MAX_BASE64_BYTES = 5 * 1024 * 1024;

21const RESIZE_TRIGGER_BYTES = Math.floor(MAX_BASE64_BYTES * 0.95);

22// Target max dimension for auto-resize.

23const RESIZE_MAX_DIM = 2048;

24export function isImageFilePath(raw) {

25 const s = raw.trim();

26 if (!s)

27 return false;

28 if (!IMAGE_EXT.test(s))

29 return false;

Lines 293-333javascript

293 encoding: "buffer",

294 });

295 const buf = result.stdout;

296 if (buf && buf.length > 0) {

297 return attachmentFromBuffer(buf, "image/png");

298 }

299

dist/tools/server-manager.jsView file

Lines 5-45javascript

5const MAX_LOG_BYTES = 96 * 1024;

6const STOP_FORCE_AFTER_MS = 1000;

7const servers = new Map();

8let nextServerId = 1

dist/oauth/openai-codex.jsView file

Lines 1-23javascript

1/**

2 * OpenAI Codex OAuth login (PKCE + local callback).

3 */

4import { createServer } from "node:http";

5import { exec } from "node:child_process";

6import { randomBytes, createHash } from "node:crypto";

7import { chatGptFetch } from "../network/chatgpt-transport.js"

dist/provider-ai-sdk.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/provider-ai-sdk.jsView on unpkg