@buzzni/happy-cli@1.1.10-aplus.89: Suspicious npm security report

Loading npm security reports…

@buzzni/happy-cli@1.1.10-aplus.89: Suspicious npm security report | LPM Firewall

Source & flagged code

15 flagged

package.jsonView file

Lines 61-101json

61 "scripts",

62 "browser-extension",

63 "tools/archives",

64 "tools/licenses",

65 "package.json"

66 ],

67 "scripts": {

68 "cli": "tsx src/index.ts",

69 "dev": "tsx src/index.ts",

70 "typecheck": "tsc --noEmit",

71 "bundle:server": "node scripts/bundle-server.cjs",

72 "bundle:server:all": "node scripts/bundle-server.cjs --all-platforms",

73 "bundle:webapp": "node scripts/bundle-webapp.cjs",

74 "build": "shx rm -rf dist && tsc --noEmit && pkgroll && node scripts/copy-browser-extension.cjs",

75 "test": "pnpm run build && vitest run --project unit",

76 "test:integration": "pnpm run build && vitest run --project integration-empty --project integration-plan-mode --project integration-authenticated",

77 "cli:install": "node scripts/install-local.cjs",

78 "prepare:publish": "node scripts/prepare-publish-package.cjs",

79 "guard:publish": "node scripts/guard-publish-artifact.cjs",

80 "prepublishOnly": "node scripts/assert-publish-tool.cjs && node scripts/guard-publish-artifact.cjs . --install-smoke",

81 "postinstall": "node scripts/verify-bundled-deps.cjs && node scripts/unpack-tools.cjs && node scripts/fix-node-pty-perms.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L81

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L81

82 },

83 "dependencies": {

84 "@agentclientprotocol/sdk": "^0.14.1",

85 "@anthropic-ai/claude-agent-sdk": "^0.3.179",

86 "@anthropic-ai/sandbox-runtime": "^0.0.37",

87 "@anthropic-ai/sdk": "0.96.0",

88 "@modelcontextprotocol/sdk": "1.29.0",

89 "@noble/ed25519": "^3.0.0",

90 "@noble/hashes": "^2.0.1",

91 "@paralleldrive/cuid2": "^2.2.2",

92 "@slopus/happy-wire": "0.1.0",

93 "@stablelib/base64": "^2.0.1",

94 "@stablelib/hex": "^2.0.1",

95 "@types/cross-spawn": "^6.0.6",

96 "@types/http-proxy": "^1.17.17",

97 "@types/qrcode-terminal": "^0.12.2",

98 "@types/react": "^19.2.7",

99 "@types/tmp": "^0.2.6",

100 "ai": "^5.0.107",

101 "axios": "^1.13.2",

bin/happy.mjsView file

Lines 1-37javascript

1#!/usr/bin/env node

3import { execFileSync } from 'child_process';

4import { readFileSync } from 'fs';

High

Child Process

Package source references child process execution.

bin/happy.mjsView on unpkg · L2

5import { fileURLToPath } from

dist/config-SSXkGMV7.cjsView file

Lines 1-22javascript

1'use strict';

3var fs = require('fs');

4var path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/config-SSXkGMV7.cjsView on unpkg · L2

dist/index-BphiYWYQ.mjsView file

2import { randomUUID, randomBytes, createHash as createHash$1 } from 'node:crypto'; L3: import { l as logger, i as getProjectPath, p as projectPath, j as filterCredentialsFromEnv, k as initializeSandbox, w as wrapCommand, I as InvalidateSync, R as RawJSONLinesSchema, ... L4: import spawn$1, { spawn } from 'cross-spawn'; ... L10: import fs, { watch, access } from 'fs/promises'; L11: import { useStdout, useInput, Box, Text, render } from 'ink'; L12: import React, { useState, useRef, useEffect, useCallback } from 'react'; L13: import { query as query$1, AbortError } from '@anthropic-ai/claude-agent-sdk'; L14: import axios, { AxiosError } from 'axios'; L15: import { EventEmitter } from 'node:events'; ... L18: import os, { homedir as homedir$1 } from 'os'; L19: import { spawn as spawn$2, exe

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/index-BphiYWYQ.mjsView on unpkg · L2

2Cross-file remote execution chain: dist/index-BphiYWYQ.mjs spawns scripts/claude_local_launcher.cjs; helper contains network access plus dynamic code execution. L2: import { randomUUID, randomBytes, createHash as createHash$1 } from 'node:crypto'; L3: import { l as logger, i as getProjectPath, p as projectPath, j as filterCredentialsFromEnv, k as initializeSandbox, w as wrapCommand, I as InvalidateSync, R as RawJSONLinesSchema, ... L4: import spawn$1, { spawn } from 'cross-spawn'; ... L10: import fs, { watch, access } from 'fs/promises'; L11: import { useStdout, useInput, Box, Text, render } from 'ink'; L12: import React, { useState, useRef, useEffect, useCallback } from 'react'; L13: import { query as query$1, AbortError } from '@anthropic-ai/claude-agent-sdk'; L14: import axios, { AxiosE

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index-BphiYWYQ.mjs

dist/types-CMADsgkf.mjsView file

•A module-load call serializes the broad process environment, working directory, and command-line arguments and posts them to a literal external destination. dist/types-CMADsgkf.mjs: const args = process.argv.slice(2); if (process.env.HAPPY_HOME_DIR) { const expandedPath = process.env.HAPPY_HOME_DIR.replace(/^~/, homedir()); this.serverUrl = process.env.HAPPY_SERVER_URL || readSettingsStringSync(this.settingsFile, "serverUrl") || "https://saycode.ai"; this.webappUrl = process.env.HAPPY_WEBAPP_URL || readSettingsStringSync(this.settingsFile, "webappUrl") || this.serverUrl || "https://saycode.ai"; this.isExperimentalEnabled = ["true", "1", "yes"].includes(process.env.HAPPY_EXPERIMENTAL?.toLowerCase() || ""); this.disableCaffeinate = ["true", "1", "yes"].includes(process.env.HAPPY_DISABLE_CAFF

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/types-CMADsgkf.mjsView on unpkg

dist/index-7b--i0ne.cjsView file

15Trigger-reachable chain: manifest.main -> dist/index.cjs -> dist/index-7b--i0ne.cjs L15: var claudeAgentSdk = require('@anthropic-ai/claude-agent-sdk'); L16: var axios = require('axios'); L17: var node_events = require('node:events'); ... L20: var os$1 = require('os'); L21: var child_process = require('child_process'); L22: var happyWire = require('@slopus/happy-wire'); ... L248: try { L249: const parsed = JSON.parse(v); L250: return typeof parsed.uuid === "string" && parsed.uuid.length > 0 || // Claude Code 2.1.x ... L306: function getClaudeSettingsPath() { L307: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude"); L308: return path.join(claudeConfigDir, "settings.json");

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index-7b--i0ne.cjsView on unpkg · L15

•matchType = previous_version_dangerous_delta matchedPackage = @buzzni/happy-cli@1.1.10-aplus.88 matchedIdentity = npm:QGJ1enpuaS9oYXBweS1jbGk:1.1.10-aplus.88 similarity = 0.891 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index-7b--i0ne.cjsView on unpkg

15Trigger-reachable persistence chain: manifest.main -> dist/index.cjs -> dist/index-7b--i0ne.cjs L15: var claudeAgentSdk = require('@anthropic-ai/claude-agent-sdk'); L16: var axios = require('axios'); L17: var node_events = require('node:events'); ... L20: var os$1 = require('os'); L21: var child_process = require('child_process'); L22: var happyWire = require('@slopus/happy-wire'); ... L248: try { L249: const parsed = JSON.parse(v); L250: return typeof parsed.uuid === "string" && parsed.uuid.length > 0 || // Claude Code 2.1.x ... L306: function getClaudeSettingsPath() { L307: const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude"); L308: return path.join(claudeConfigDir, "settings.json");

scripts/download-tools.shView file

•path = scripts/download-tools.sh kind = build_helper sizeBytes = 4241 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/download-tools.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/verify-bundled-deps.cjs && node scripts/unpack-tools.cjs && node scripts/fix-node-pty-perms.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/verify-bundled-deps.cjs && node scripts/unpack-tools.cjs && node scripts/fix-node-pty-perms.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/happy.mjsView file

2L3: import { execFileSync } from 'child_process'; L4: import { readFileSync } from 'fs';

High

Child Process

Package source references child process execution.

bin/happy.mjsView on unpkg · L2

17// Check if we're already running with the flags L18: const hasNoWarnings = process.execArgv.includes('--no-warnings'); L19: const hasNoDeprecation = process.execArgv.includes('--no-deprecation');

High

Shell

Package source references shell execution.

bin/happy.mjsView on unpkg · L17

dist/config-SSXkGMV7.cjsView file

2L3: var fs = require('fs'); L4: var path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/config-SSXkGMV7.cjsView on unpkg · L2

dist/index-BphiYWYQ.mjsView file

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/index-BphiYWYQ.mjsView on unpkg · L2

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index-BphiYWYQ.mjs

dist/types-CMADsgkf.mjsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/types-CMADsgkf.mjsView on unpkg

dist/index-7b--i0ne.cjsView file

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index-7b--i0ne.cjsView on unpkg · L15

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index-7b--i0ne.cjsView on unpkg

scripts/download-tools.shView file

•path = scripts/download-tools.sh kind = build_helper sizeBytes = 4241 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/download-tools.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

Source & flagged code

15 flagged

package.jsonView file

Lines 61-101json

61 "scripts",

62 "browser-extension",

63 "tools/archives",

64 "tools/licenses",

65 "package.json"

66 ],

67 "scripts": {

68 "cli": "tsx src/index.ts",

69 "dev": "tsx src/index.ts",

70 "typecheck": "tsc --noEmit",

71 "bundle:server": "node scripts/bundle-server.cjs",

72 "bundle:server:all": "node scripts/bundle-server.cjs --all-platforms",

73 "bundle:webapp": "node scripts/bundle-webapp.cjs",

74 "build": "shx rm -rf dist && tsc --noEmit && pkgroll && node scripts/copy-browser-extension.cjs",

75 "test": "pnpm run build && vitest run --project unit",

76 "test:integration": "pnpm run build && vitest run --project integration-empty --project integration-plan-mode --project integration-authenticated",

77 "cli:install": "node scripts/install-local.cjs",

78 "prepare:publish": "node scripts/prepare-publish-package.cjs",

79 "guard:publish": "node scripts/guard-publish-artifact.cjs",

80 "prepublishOnly": "node scripts/assert-publish-tool.cjs && node scripts/guard-publish-artifact.cjs . --install-smoke",

81 "postinstall": "node scripts/verify-bundled-deps.cjs && node scripts/unpack-tools.cjs && node scripts/fix-node-pty-perms.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L81

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L81

82 },

83 "dependencies": {

84 "@agentclientprotocol/sdk": "^0.14.1",

85 "@anthropic-ai/claude-agent-sdk": "^0.3.179",

86 "@anthropic-ai/sandbox-runtime": "^0.0.37",

87 "@anthropic-ai/sdk": "0.96.0",

88 "@modelcontextprotocol/sdk": "1.29.0",

89 "@noble/ed25519": "^3.0.0",

90 "@noble/hashes": "^2.0.1",

91 "@paralleldrive/cuid2": "^2.2.2",

92 "@slopus/happy-wire": "0.1.0",

93 "@stablelib/base64": "^2.0.1",

94 "@stablelib/hex": "^2.0.1",

95 "@types/cross-spawn": "^6.0.6",

96 "@types/http-proxy": "^1.17.17",

97 "@types/qrcode-terminal": "^0.12.2",

98 "@types/react": "^19.2.7",

99 "@types/tmp": "^0.2.6",

100 "ai": "^5.0.107",

101 "axios": "^1.13.2",

bin/happy.mjsView file

Lines 1-37javascript

1#!/usr/bin/env node

3import { execFileSync } from 'child_process';

4import { readFileSync } from 'fs';

High

Child Process

Package source references child process execution.

bin/happy.mjsView on unpkg · L2

5import { fileURLToPath } from

dist/config-SSXkGMV7.cjsView file

Lines 1-22javascript

1'use strict';

3var fs = require('fs');

4var path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/config-SSXkGMV7.cjsView on unpkg · L2

dist/index-BphiYWYQ.mjsView file

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/index-BphiYWYQ.mjsView on unpkg · L2

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index-BphiYWYQ.mjs

dist/types-CMADsgkf.mjsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/types-CMADsgkf.mjsView on unpkg

dist/index-7b--i0ne.cjsView file

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index-7b--i0ne.cjsView on unpkg · L15

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index-7b--i0ne.cjsView on unpkg

scripts/download-tools.shView file

•path = scripts/download-tools.sh kind = build_helper sizeBytes = 4241 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/download-tools.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

@buzzni/happy-cli@1.1.10-aplus.89

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code