@buzzni/happy-cli: Manual Review npm security report (Allow)

Loading npm security reports…

@buzzni/happy-cli: Manual Review npm security report (Allow) | LPM Firewall

Source & flagged code

35 flagged

•scripts.postinstall = node scripts/verify-bundled-deps.cjs && node scripts/unpack-tools.cjs && node scripts/fix-node-pty-perms.cjs && node scripts/install-companion-tools.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/verify-bundled-deps.cjs && node scripts/unpack-tools.cjs && node scripts/fix-node-pty-perms.cjs && node scripts/install-companion-tools.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/happy.mjsView file

2L3: import { execFileSync } from 'child_process'; L4: import { readFileSync } from 'fs';

High

Child Process

Package source references child process execution.

bin/happy.mjsView on unpkg · L2

dist/types-C6qS9Mlf.cjsView file

•context = E = 384;\nconst PRIVATE_DIR_MODE = 448;\nasync function writePrivateFile(path, content) {\n await fs.writeFile(path, content, { encoding: "utf-8", mode: PRIVATE_FILE_MODE });\n await fs.chmod(path, PRIVATE_FILE_MODE);\n}\nasync function replacePrivateFile(path, content) {\n const tmp = `${path}.tmp`;\n await fs.rm(tmp, { force: true });\n await fs.writeFile(tmp, content, { encoding: "utf-8", mode: PRIVATE_FILE_MODE, flag: "wx" });\n await fs.rename(tmp, path);\n}\nfunction writePrivateFileSync(path, content) {\n node_fs.writeFileSync(path, content, { encoding: "utf-8", mode: PRIVATE_FILE_MODE });\n node_fs.chmodSync(path, PRIVATE_FILE_MODE);\n}\nfunction hardenHappyHomePermissions() {\n if (process.platform === "win32") return;\n const targets = [\n [configuration.ha

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/types-C6qS9Mlf.cjsView on unpkg

2Trigger-reachable chain: manifest.exports -> dist/lib.cjs -> dist/types-C6qS9Mlf.cjs L2: L3: var axios = require('axios'); L4: var chalk = require('chalk'); ... L16: var fs = require('node:fs/promises'); L17: var node_child_process = require('node:child_process'); L18: var path$1 = require('path'); ... L156: "tools/licenses", L157: "package.json" L158: ]; ... L188: "@slopus/happy-wire": "file:../happy-wire", L189: "@stablelib/base64": "^2.0.1", L190: "@stablelib/hex": "^2.0.1",

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/types-C6qS9Mlf.cjsView on unpkg · L2

scripts/browser-poc/fixture.test.tsView file

34for (const match of body.matchAll(/<script>([\s\S]*?)<\/script>/g)) { L35: expect(() => new Function(match[1]), `${path} script`).not.toThrow() L36: }

High

Eval

Package source references dynamic code evaluation.

scripts/browser-poc/fixture.test.tsView on unpkg · L34

dist/browserBridgeConfig-CaTlK-SZ.cjsView file

Lines 1-22javascript

1'use strict';

3var crypto = require('node:crypto');

4var fs = require('node:fs/promises');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/browserBridgeConfig-CaTlK-SZ.cjsView on unpkg · L2

node_modules/@buzzni/saycode-cli/index.mjsView file

8import { readFile, stat, mkdtemp, access, rm, mkdir, appendFile, writeFile, chmod, rename, readdir, lstat, open, realpath } from "node:fs/promises"; L9: import { execFile, spawn } from "node:child_process"; L10: import { fileURLToPath } from "node:url"; L11: import { createRequire } from "node:module"; L12: import net from "node:net"; L13: import { Transform } from "node:stream"; ... L841: "agentBoard.verify.phase.start": "구동 확인", L842: "agentBoard.verify.detail.noRecipe": "실행할 레시피가 없습니다. package.json 스크립트, Makefile, 또는 .aplus/verify.json이 필요합니다.", L843: "agentBoard.verify.detail.phaseFailed": "{phase} 실패 · {reason}", ... L5511: "planDevelopment.prompt": "위 계획을 승인합니다. 계획과 작업 목록의 순서대로 개발을 진행하세요. 구현 후 관련 테스트, 타입 검사, 빌드를 실행해 정상 동작을 검증하고, 실패하면 원인을 수정한 뒤 다시 검증하세요. 승인된 계획 밖의 범위 확장이 필요할 때만 다시

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

node_modules/@buzzni/saycode-cli/index.mjsView on unpkg · L8

Low

Weak Crypto

Package source references weak cryptographic algorithms.

node_modules/@buzzni/saycode-cli/index.mjs

scripts/agent-browser/abpInstall.test.tsView file

1import { spawnSync } from 'node:child_process' L2: import { generateKeyPairSync } from 'node:crypto' ... L20: writeFileSync(pemFile, generateKeyPairSync('ed25519').publicKey.export({ type: 'spki', format: 'pem' }).toString()) L21: writeFileSync(sitesFile, JSON.stringify([{ origin: 'https://shop.example' }])) L22: }) ... L26: encoding: 'utf8', L27: env: { PATH: process.env.PATH, HOME: dir, ABP_NODE: process.execPath, ABP_DRY_RUN_SECRET: SECRET_SENTINEL }, L28: }) ... L49: planMain(['install-options', '--saved', saved, '--profile', 'main=user-1'], (text: string) => { again += text }) L50: expect(JSON.parse(again).profiles).toEqual([{ profileId: 'main', principalId: 'user-1', assignmentId: expect.stringMatching(/^[0-9a-f]{32}$/) }]) L51: }) ... L73: mkdirSync(join(root, 'dist', 'sandbox')

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/agent-browser/abpInstall.test.tsView on unpkg · L1

scripts/sandbox-linux-smoke.tsView file

2Source sends the broad process environment to a literal external destination. L2: import assert from 'node:assert/strict'; L3: import { createServer } from 'node:http'; L4: import { spawn, execFileSync } from 'node:child_process'; L5: import { chmodSync, chownSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'; ... L13: L14: assert.equal(process.platform, 'linux'); L15: assert.equal(process.env.HAPPY_SANDBOX_LINUX_SMOKE, '1'); L16: const uid = (name: string) => Number(execFileSync('/usr/bin/id', ['-u', name], { encoding: 'utf8' }).trim()); ... L23: writeFileSync('/etc/aplus/sandbox-policy.json', '{"mode":"mandatory"}'); L24: writeFileSync('/etc/aplus/claude-sandbox.json', JSON.stringify({ allowedDomains: ['api.anthropic.com', 'platform.claude.com', 'private.allowed.t

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

scripts/sandbox-linux-smoke.tsView on unpkg · L2

dist/main-DeFkqbwb.cjsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/main-DeFkqbwb.cjs: var node_readline = require('node:readline'); var promises$1 = require('node:readline/promises'); env.CLAUDE_CODE_ENTRYPOINT = resolveHappyEntrypoint(process.env.CLAUDE_CODE_ENTRYPOINT); const root = path.join(process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude"), "plugins", "synced"); const manifest = JSON.parse(node_fs.readFileSync(path.join(plugin, ".claude-plugin", "plugin.json"), "utf8")); const claudeState = (process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude")).replace(/^~(?=\/|$)/, os.homedir()); this.claudeEnvVars = opts.claudeEnvVars; this.claudeArgs = opts.claudeArgs;

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/main-DeFkqbwb.cjsView on unpkg

5Detached bundled service listener: dist/main-DeFkqbwb.cjs launches a Node helper and exposes a broad-bound HTTP listener. L5: var chalk = require('chalk'); L6: var node_child_process = require('node:child_process'); L7: var fs = require('node:fs/promises'); ... L17: var ink = require('ink'); L18: var axios = require('axios'); L19: var net = require('node:net'); ... L111: persistence.SandboxConfigSchema.parse({}), L112: process.cwd(), L113: "mandatory" ... L210: const env = {}; L211: for (const [key, value] of Object.entries(process.env)) { L212: if (typeof value === "string") env[key] = value;

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

dist/main-DeFkqbwb.cjsView on unpkg · L5

scripts/browser-poc/rollback.mjsView file

•bounded command output exfiltration = ilesync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { fileurltopath } from 'node:url';\nconst root = dirname(fileurltopath(import.meta.url));\nconst at = process.argv.indexof('--run'); const run = at >= 0 ? process.argv[at+1] : '';\nif (!/^[a-z0-9][a-z0-9-]{0,39}$/.test(run)) throw error('--run is required');\nconst path = join(root,'.abp',run,'env.json');\nconst reportpath = join(root,'.abp',run,'rollback-report.json');\nif (!existssync(path)) { const old = existssync(reportpath) ? json.parse(readfilesync(reportpath)) : { run, alreadydown:true }; console.log(json.stringify(old)); process.exit(0); }\nconst listed = execfilesync('docker', ['ps','-aq','--filter',`label=ai.saycode.abp-run=${run}`], {encoding:'utf8'}).trim();\nif

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

scripts/browser-poc/rollback.mjsView on unpkg

scripts/script-egress-proxy.test.mjsView file

5test('resolves and pins only registered public destinations', async () => { L6: assert.equal(await authorizeDestination('https://example.com', ['https://example.com'], [], async () => ['93.184.216.34']), '93.184.216.34'); L7: await assert.rejects(authorizeDestination('https://other.com', ['https://example.com'], [], async () => ['93.184.216.34']), /ORIGIN_DENIED/); L8: }); L9: test('blocks metadata, loopback, RFC1918, carrier NAT and mixed public/private DNS answers', async () => { L10: for (const address of ['127.0.0.1', '169.254.169.254', '10.0.0.1', '172.16.0.1', '192.168.0.1', '100.64.0.1', '0.0.0.0', '224.0.0.1', '::1']) { ... L16: await assert.rejects(authorizeDestination('http://db:8090', [], ['http://db:8090'], async () => ['172.18.0.2']), /ORIGIN_DENIED/); L17: await assert.re

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

scripts/script-egress-proxy.test.mjsView on unpkg · L5

dist/index.cjsView file

3Cross-file remote execution chain: dist/index.cjs spawns dist/main-DeFkqbwb.cjs; helper contains network access plus dynamic code execution. L3: var standaloneLaunchProtocol = require('./standaloneLaunchProtocol-T_hiaZQt.cjs'); L4: var node_child_process = require('node:child_process'); L5: var node_fs = require('node:fs'); ... L13: execPath: process.execPath, L14: env: process.env, L15: resolveSaycodeManifest: () => node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _document... L16: readManifest: (path) => node_fs.readFileSync(path, "utf8"), ... L20: const manifestPath = dependencies.resolveSaycodeManifest(); L21: const manifest = JSON.parse(dependencies.readManifest(manifestPath)); L22: const sayco

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.cjsView on unpkg · L3

scripts/verify-published-package.shView file

•path = scripts/verify-published-package.sh kind = build_helper sizeBytes = 1716 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/verify-published-package.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

dist/electronGuiPreload.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 13

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/electronGuiPreload.cjs#virtual:normalized:round1View on unpkg

dist/browserSessionBrokerContract-CC5vYaGy.cjsView file

•matchType = normalized_sha256 matchedPackage = @buzzni/happy-cli@1.1.10-aplus.260 matchedPath = [redacted]-CC5vYaGy.cjs matchedIdentity = npm:QGJ1enpuaS9oYXBweS1jbGk:1.1.10-aplus.260 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/browserSessionBrokerContract-CC5vYaGy.cjsView on unpkg

dist/config-DbpIQDRB.cjsView file

•matchType = token_shingles matchedPackage = @buzzni/happy-cli@1.1.10-aplus.260 matchedPath = dist/config-CLHijNM1.cjs matchedIdentity = npm:QGJ1enpuaS9oYXBweS1jbGk:1.1.10-aplus.260 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-DbpIQDRB.cjsView on unpkg

dist/index-EYZ-FeXk.cjsView file

•matchType = token_shingles matchedPackage = @buzzni/happy-cli@1.1.10-aplus.260 matchedPath = dist/index-5tTpNOgW.cjs matchedIdentity = npm:QGJ1enpuaS9oYXBweS1jbGk:1.1.10-aplus.260 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index-EYZ-FeXk.cjsView on unpkg

dist/runGemini-q_Re8ZH8.cjsView file

•matchType = token_shingles matchedPackage = @buzzni/happy-cli@1.1.10-aplus.248 matchedPath = dist/runGemini-DPz2XOjW.cjs matchedIdentity = npm:QGJ1enpuaS9oYXBweS1jbGk:1.1.10-aplus.248 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runGemini-q_Re8ZH8.cjsView on unpkg

dist/AcpBackend-DWWd1YbY.cjsView file

•matchType = normalized_sha256 matchedPackage = @buzzni/happy-cli@1.1.10-aplus.260 matchedPath = dist/AcpBackend-DFJvYdNm.cjs matchedIdentity = npm:QGJ1enpuaS9oYXBweS1jbGk:1.1.10-aplus.260 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/AcpBackend-DWWd1YbY.cjsView on unpkg

dist/browserSessionBrokerContract-rWpazLfs.mjsView file

•matchType = normalized_sha256 matchedPackage = @buzzni/happy-cli@1.1.10-aplus.260 matchedPath = [redacted]-rWpazLfs.mjs matchedIdentity = npm:QGJ1enpuaS9oYXBweS1jbGk:1.1.10-aplus.260 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/browserSessionBrokerContract-rWpazLfs.mjsView on unpkg

dist/lib.cjsView file

•matchType = token_shingles matchedPackage = @buzzni/happy-cli@1.1.10-aplus.260 matchedPath = dist/lib.cjs matchedIdentity = npm:QGJ1enpuaS9oYXBweS1jbGk:1.1.10-aplus.260 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.cjsView on unpkg

dist/managedMarkerWriter-DLHFoYpi.cjsView file

•matchType = token_shingles matchedPackage = @buzzni/happy-cli@1.1.10-aplus.260 matchedPath = dist/managedMarkerWriter-BV0bO8Lq.cjs matchedIdentity = npm:QGJ1enpuaS9oYXBweS1jbGk:1.1.10-aplus.260 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/managedMarkerWriter-DLHFoYpi.cjsView on unpkg

dist/runOpenClaw-DnTUdldV.cjsView file

•matchType = token_shingles matchedPackage = @buzzni/happy-cli@1.1.10-aplus.260 matchedPath = dist/runOpenClaw-bYwYwY1n.cjs matchedIdentity = npm:QGJ1enpuaS9oYXBweS1jbGk:1.1.10-aplus.260 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runOpenClaw-DnTUdldV.cjsView on unpkg

dist/browserSessionBrokerMain.mjsView file

•matchType = normalized_sha256 matchedPackage = @buzzni/happy-cli@1.1.10-aplus.260 matchedPath = dist/browserSessionBrokerMain.mjs matchedIdentity = npm:QGJ1enpuaS9oYXBweS1jbGk:1.1.10-aplus.260 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/browserSessionBrokerMain.mjsView on unpkg

dist/AcpBackend-geO8l8yy.mjsView file

•matchType = normalized_sha256 matchedPackage = @buzzni/happy-cli@1.1.10-aplus.260 matchedPath = dist/AcpBackend-pjkfT1FG.mjs matchedIdentity = npm:QGJ1enpuaS9oYXBweS1jbGk:1.1.10-aplus.260 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/AcpBackend-geO8l8yy.mjsView on unpkg

dist/difficultyRoutingArtifacts-Dd5ZRcr2.cjsView file

•matchType = normalized_sha256 matchedPackage = @buzzni/happy-cli@1.1.10-aplus.260 matchedPath = dist/difficultyRoutingArtifacts-Dd5ZRcr2.cjs matchedIdentity = npm:QGJ1enpuaS9oYXBweS1jbGk:1.1.10-aplus.260 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/difficultyRoutingArtifacts-Dd5ZRcr2.cjsView on unpkg

Source & flagged code

35 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/verify-bundled-deps.cjs && node scripts/unpack-tools.cjs && node scripts/fix-node-pty-perms.cjs && node scripts/install-companion-tools.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/verify-bundled-deps.cjs && node scripts/unpack-tools.cjs && node scripts/fix-node-pty-perms.cjs && node scripts/install-companion-tools.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/happy.mjsView file

2L3: import { execFileSync } from 'child_process'; L4: import { readFileSync } from 'fs';

High

Child Process

Package source references child process execution.

bin/happy.mjsView on unpkg · L2

dist/types-C6qS9Mlf.cjsView file

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/types-C6qS9Mlf.cjsView on unpkg

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/types-C6qS9Mlf.cjsView on unpkg · L2

scripts/browser-poc/fixture.test.tsView file

34for (const match of body.matchAll(/<script>([\s\S]*?)<\/script>/g)) { L35: expect(() => new Function(match[1]), `${path} script`).not.toThrow() L36: }

High

Eval

Package source references dynamic code evaluation.

scripts/browser-poc/fixture.test.tsView on unpkg · L34

dist/browserBridgeConfig-CaTlK-SZ.cjsView file

2L3: var crypto = require('node:crypto'); L4: var fs = require('node:fs/promises');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/browserBridgeConfig-CaTlK-SZ.cjsView on unpkg · L2

node_modules/@buzzni/saycode-cli/index.mjsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

node_modules/@buzzni/saycode-cli/index.mjsView on unpkg · L8

Low

Weak Crypto

Package source references weak cryptographic algorithms.

node_modules/@buzzni/saycode-cli/index.mjs

scripts/agent-browser/abpInstall.test.tsView file

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/agent-browser/abpInstall.test.tsView on unpkg · L1

scripts/sandbox-linux-smoke.tsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

scripts/sandbox-linux-smoke.tsView on unpkg · L2

dist/main-DeFkqbwb.cjsView file

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/main-DeFkqbwb.cjsView on unpkg

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

dist/main-DeFkqbwb.cjsView on unpkg · L5

scripts/browser-poc/rollback.mjsView file

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

scripts/browser-poc/rollback.mjsView on unpkg

scripts/script-egress-proxy.test.mjsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

scripts/script-egress-proxy.test.mjsView on unpkg · L5

dist/index.cjsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.cjsView on unpkg · L3

scripts/verify-published-package.shView file

•path = scripts/verify-published-package.sh kind = build_helper sizeBytes = 1716 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/verify-published-package.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

dist/electronGuiPreload.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 13

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/electronGuiPreload.cjs#virtual:normalized:round1View on unpkg

dist/browserSessionBrokerContract-CC5vYaGy.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/browserSessionBrokerContract-CC5vYaGy.cjsView on unpkg

dist/config-DbpIQDRB.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-DbpIQDRB.cjsView on unpkg

dist/index-EYZ-FeXk.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index-EYZ-FeXk.cjsView on unpkg

dist/runGemini-q_Re8ZH8.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runGemini-q_Re8ZH8.cjsView on unpkg

dist/AcpBackend-DWWd1YbY.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/AcpBackend-DWWd1YbY.cjsView on unpkg

dist/browserSessionBrokerContract-rWpazLfs.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/browserSessionBrokerContract-rWpazLfs.mjsView on unpkg

dist/lib.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.cjsView on unpkg

dist/managedMarkerWriter-DLHFoYpi.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/managedMarkerWriter-DLHFoYpi.cjsView on unpkg

dist/runOpenClaw-DnTUdldV.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runOpenClaw-DnTUdldV.cjsView on unpkg

dist/browserSessionBrokerMain.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/browserSessionBrokerMain.mjsView on unpkg

dist/AcpBackend-geO8l8yy.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/AcpBackend-geO8l8yy.mjsView on unpkg

dist/difficultyRoutingArtifacts-Dd5ZRcr2.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/difficultyRoutingArtifacts-Dd5ZRcr2.cjsView on unpkg

Findings

5 Critical24 High8 Medium6 Low

CriticalHardcoded Runtime Data Exfiltrationscripts/sandbox-linux-smoke.ts

CriticalCredential Exfiltrationnode_modules/@buzzni/saycode-cli/index.mjs

CriticalCommand Output Exfiltrationscripts/browser-poc/rollback.mjs

CriticalEncrypted Payload Temp Executiondist/types-C6qS9Mlf.cjs

CriticalTrigger Reachable Dangerous Capabilitydist/types-C6qS9Mlf.cjs

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/happy.mjs

HighShelldist/types-C6qS9Mlf.cjs

HighEvalscripts/browser-poc/fixture.test.ts

HighCredential Redirect Persistencedist/main-DeFkqbwb.cjs

HighSandbox Evasion Gated Capabilitydist/types-C6qS9Mlf.cjs

HighCloud Metadata Accessscripts/script-egress-proxy.test.mjs

HighCross File Remote Execution Contextdist/index.cjs

HighSpawned Bundled Service Listenerdist/main-DeFkqbwb.cjs

HighTrigger Reachable Persistencedist/main-DeFkqbwb.cjs

HighShips High Entropy Blobtools/archives/difftastic-arm64-linux.tar.gz

HighSemantic Analysis Limiteddist/electronGuiPreload.cjs#virtual:normalized:round1

HighKnown Malware Source Similaritydist/browserSessionBrokerContract-CC5vYaGy.cjs

HighKnown Malware Source Similaritydist/config-DbpIQDRB.cjs

HighKnown Malware Source Similaritydist/index-EYZ-FeXk.cjs

HighKnown Malware Source Similaritydist/runGemini-q_Re8ZH8.cjs

HighKnown Malware Source Similaritydist/AcpBackend-DWWd1YbY.cjs

HighKnown Malware Source Similaritydist/browserSessionBrokerContract-rWpazLfs.mjs

HighKnown Malware Source Similaritydist/lib.cjs

HighKnown Malware Source Similaritydist/managedMarkerWriter-DLHFoYpi.cjs

HighKnown Malware Source Similaritydist/runOpenClaw-DnTUdldV.cjs

HighKnown Malware Source Similaritydist/browserSessionBrokerMain.mjs

HighKnown Malware Source Similaritydist/AcpBackend-geO8l8yy.mjs

HighKnown Malware Source Similaritydist/difficultyRoutingArtifacts-Dd5ZRcr2.cjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/browserBridgeConfig-CaTlK-SZ.cjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencescripts/agent-browser/abpInstall.test.ts

MediumShips Build Helperscripts/verify-published-package.sh

MediumShips Compressed Blobtools/archives/difftastic-arm64-linux.tar.gz

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptonode_modules/@buzzni/saycode-cli/index.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

35 flagged

package.jsonView file

•scripts.postinstall = node scripts/verify-bundled-deps.cjs && node scripts/unpack-tools.cjs && node scripts/fix-node-pty-perms.cjs && node scripts/install-companion-tools.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/verify-bundled-deps.cjs && node scripts/unpack-tools.cjs && node scripts/fix-node-pty-perms.cjs && node scripts/install-companion-tools.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/happy.mjsView file

2L3: import { execFileSync } from 'child_process'; L4: import { readFileSync } from 'fs';

High

Child Process

Package source references child process execution.

bin/happy.mjsView on unpkg · L2

dist/types-C6qS9Mlf.cjsView file

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/types-C6qS9Mlf.cjsView on unpkg

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/types-C6qS9Mlf.cjsView on unpkg · L2

scripts/browser-poc/fixture.test.tsView file

34for (const match of body.matchAll(/<script>([\s\S]*?)<\/script>/g)) { L35: expect(() => new Function(match[1]), `${path} script`).not.toThrow() L36: }

High

Eval

Package source references dynamic code evaluation.

scripts/browser-poc/fixture.test.tsView on unpkg · L34

dist/browserBridgeConfig-CaTlK-SZ.cjsView file

Lines 1-22javascript

1'use strict';

3var crypto = require('node:crypto');

4var fs = require('node:fs/promises');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/browserBridgeConfig-CaTlK-SZ.cjsView on unpkg · L2

node_modules/@buzzni/saycode-cli/index.mjsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

node_modules/@buzzni/saycode-cli/index.mjsView on unpkg · L8

Low

Weak Crypto

Package source references weak cryptographic algorithms.

node_modules/@buzzni/saycode-cli/index.mjs

scripts/agent-browser/abpInstall.test.tsView file

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/agent-browser/abpInstall.test.tsView on unpkg · L1

scripts/sandbox-linux-smoke.tsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

scripts/sandbox-linux-smoke.tsView on unpkg · L2

dist/main-DeFkqbwb.cjsView file

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/main-DeFkqbwb.cjsView on unpkg

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

dist/main-DeFkqbwb.cjsView on unpkg · L5

scripts/browser-poc/rollback.mjsView file

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

scripts/browser-poc/rollback.mjsView on unpkg

scripts/script-egress-proxy.test.mjsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

scripts/script-egress-proxy.test.mjsView on unpkg · L5

dist/index.cjsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.cjsView on unpkg · L3

scripts/verify-published-package.shView file

•path = scripts/verify-published-package.sh kind = build_helper sizeBytes = 1716 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/verify-published-package.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

dist/electronGuiPreload.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 13

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/electronGuiPreload.cjs#virtual:normalized:round1View on unpkg

dist/browserSessionBrokerContract-CC5vYaGy.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/browserSessionBrokerContract-CC5vYaGy.cjsView on unpkg

dist/config-DbpIQDRB.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-DbpIQDRB.cjsView on unpkg

dist/index-EYZ-FeXk.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index-EYZ-FeXk.cjsView on unpkg

dist/runGemini-q_Re8ZH8.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runGemini-q_Re8ZH8.cjsView on unpkg

dist/AcpBackend-DWWd1YbY.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/AcpBackend-DWWd1YbY.cjsView on unpkg

dist/browserSessionBrokerContract-rWpazLfs.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/browserSessionBrokerContract-rWpazLfs.mjsView on unpkg

dist/lib.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.cjsView on unpkg

dist/managedMarkerWriter-DLHFoYpi.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/managedMarkerWriter-DLHFoYpi.cjsView on unpkg

dist/runOpenClaw-DnTUdldV.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runOpenClaw-DnTUdldV.cjsView on unpkg

dist/browserSessionBrokerMain.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/browserSessionBrokerMain.mjsView on unpkg

dist/AcpBackend-geO8l8yy.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/AcpBackend-geO8l8yy.mjsView on unpkg

dist/difficultyRoutingArtifacts-Dd5ZRcr2.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/difficultyRoutingArtifacts-Dd5ZRcr2.cjsView on unpkg

@buzzni/happy-cli@1.1.10-aplus.303

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code