@c4a/context-cli@0.7.12: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@c4a/context-cli@0.7.12: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.mjsView file

7L8: import { spawnSync } from "node:child_process"; L9: import { existsSync, realpathSync } from "node:fs";

High

Child Process

Package source references child process execution.

scripts/postinstall.mjsView on unpkg · L7

7Cross-file remote execution chain: scripts/postinstall.mjs spawns cli.js; helper contains network access plus dynamic code execution. L7: L8: import { spawnSync } from "node:child_process"; L9: import { existsSync, realpathSync } from "node:fs"; ... L18: export function looksLikeClaudePluginInstall(env) { L19: const hints = ["CLAUDE_PLUGIN_INSTALL", "CLAUDE_CODE_PLUGIN", "npm[redacted]"]; L20: return hints.some((key) => env[key]?.toLowerCase().includes("claude") === true); ... L64: function log(message) { L65: process.stderr.write(`[context-cli postinstall] ${message}\n`); L66: }

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/postinstall.mjsView on unpkg · L7

42"Claude plugin installed without a global context CLI. Install it with:", L43: ` npm install -g @c4a/context-cli@${version}`, L44: ], ... L49: const lookup = process.platform === "win32" L50: ? spawnSync("where", ["context"], { stdio: "ignore" }) L51: : spawnSync("sh", ["-c", "command -v context"], { stdio: "ignore" });

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.mjsView on unpkg · L42

cli.jsView file

35class CommanderError extends Error { L36: constructor(exitCode, code, message) { L37: super(message); ... L610: var EventEmitter = __require("events").EventEmitter; L611: var childProcess = __require("child_process"); L612: var path = __require("path"); ... L655: this._outputConfiguration = { L656: writeOut: (str) => process2.stdout.write(str), L657: writeErr: (str) => process2.stderr.write(str), ... L2781: return false; L2782: const base64 = header.replace(/-/g, "+").replace(/_/g, "/").padEnd(header.length + (4 - header.length % 4) % 4, "="); L2783: const decoded = JSON.parse(atob(base64));

Critical

Dns Exfiltration

Source appears to send environment or credential material through DNS lookups.

cli.jsView on unpkg · L35

•Trigger-reachable chain: manifest.main -> cli.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

cli.jsView on unpkg

1100args.unshift(executableFile); L1101: args = incrementNodeInspectorPort(process2.execArgv).concat(args); L1102: proc = childProcess.spawn(process2.argv[0], args, { stdio: "inherit" });

High

Shell

Package source references shell execution.

cli.jsView on unpkg · L1100

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

parserEntryWorker.jsView file

29var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res); L30: var __require = /* @__PURE__ */ createRequire(import.meta.url); L31: var require = __require;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

parserEntryWorker.jsView on unpkg · L29

wasm/tree-sitter.wasmView file

•path = wasm/tree-sitter.wasm kind = wasm_module sizeBytes = 186526 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

wasm/tree-sitter.wasmView on unpkg

Source & flagged code

13 flagged

package.jsonView file

Lines 40-63json

40 "handlebars": "^4.7.8",

41 "ink": "^5.0.0",

42 "jiti": "^2.7.0",

43 "mdast-util-to-string": "^4.0.0",

44 "mermaid": "11.12.0",

45 "react": "^18.3.1",

46 "remark-gfm": "^4.0.1",

47 "remark-mdx": "^3.1.1",

48 "remark-parse": "^11.0.0",

49 "remark-stringify": "^11.0.0",

50 "sharp": "^0.35.3",

51 "typescript": "^5.5.4",

52 "unified": "^11.0.5",

53 "vitepress": "1.6.4",

54 "web-tree-sitter": "^0.20.8",

55 "yaml": "^2.5.1",

56 "zod": "^3.23.8"

57 },

58 "main": "./cli.js",

59 "scripts": {

60 "postinstall": "node scripts/postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L60

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L60

61 }

62}

63

scripts/postinstall.mjsView file

Lines 1-62javascript

1#!/usr/bin/env node

2/**

3 * Best-effort global agent plugin refresh after a global context-cli install.

4 * Local project dependencies and CI installs must not mutate user-level agent

5 * configuration. Link development performs the same refresh in cliLink.ts.

6 */

7

8import { spawnSync } from "node:child_process";

9import { existsSync, realpathSync }

cli.jsView file

35class CommanderError extends Error { L36: constructor(exitCode, code, message) { L37: super(message); ... L610: var EventEmitter = __require("events").EventEmitter; L611: var childProcess = __require("child_process"); L612: var path = __require("path"); ... L655: this._outputConfiguration = { L656: writeOut: (str) => process2.stdout.write(str), L657: writeErr: (str) => process2.stderr.write(str), ... L2781: return false; L2782: const base64 = header.replace(/-/g, "+").replace(/_/g, "/").padEnd(header.length + (4 - header.length % 4) % 4, "="); L2783: const decoded = JSON.parse(atob(base64));

Critical

Dns Exfiltration

Source appears to send environment or credential material through DNS lookups.

cli.jsView on unpkg · L35

•Trigger-reachable chain: manifest.main -> cli.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

cli.jsView on unpkg

1100args.unshift(executableFile); L1101: args = incrementNodeInspectorPort(process2.execArgv).concat(args); L1102: proc = childProcess.spawn(process2.argv[0], args, { stdio: "inherit" });

High

Shell

Package source references shell execution.

cli.jsView on unpkg · L1100

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

parserEntryWorker.jsView file

29var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res); L30: var __require = /* @__PURE__ */ createRequire(import.meta.url); L31: var require = __require;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

parserEntryWorker.jsView on unpkg · L29

wasm/tree-sitter.wasmView file

•path = wasm/tree-sitter.wasm kind = wasm_module sizeBytes = 186526 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

wasm/tree-sitter.wasmView on unpkg