@cgh567/agent: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@cgh567/agent: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

21 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/elyntic-ollama-models.cjsView file

25L26: const { spawnSync } = require('child_process'); L27: // BROKER-ISOLATION-1: every process.execPath spawn below builds its child env here.

High

Child Process

Package source references child process execution.

bin/elyntic-ollama-models.cjsView on unpkg · L25

extensions/upgrade-reviewer.tsView file

746const declRegex = /export\s+(?:declare\s+)?(?:interface|type|function|class|const|let|var|enum)\s+(\w+)/g; L747: let match: RegExpExecArray | null; L748: while ((match = declRegex.exec(dtsContent)) !== null) {

High

Shell

Package source references shell execution.

extensions/upgrade-reviewer.tsView on unpkg · L746

brainv2/task-context-strategy.tsView file

35try { L36: const { shannonEntropy } = require('../lib/graph/analytics/quantum-entropy-detector.js'); L37: // If task text itself contains error-like keywords, boost governance context

Medium

Dynamic Require

Package source references dynamic require/import behavior.

brainv2/task-context-strategy.tsView on unpkg · L35

extensions/design-elevation/index.tsView file

21L22: const HOME = homedir(); L23: const LOG_DIR = join(HOME, ".pi", "agent", "governance"); ... L101: appendFileSync(EVENTS_FILE, JSON.stringify({ ts: new Date().toISOString(), type, ...data }) + "\n"); L102: } catch (e) { process.stderr.write(`[design-elevation] never crash: ${String(e)}\n`); } L103: } ... L343: L344: // Scan package.json for framework L345: const pkgPath = join(projectPath, 'package.json'); ... L347: try { L348: const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8')); L349: const deps = { ...pkg.dependencies, ...pkg.devDependencies };

Low

Weak Crypto

Package source references weak cryptographic algorithms.

extensions/design-elevation/index.tsView on unpkg · L21

daemon/lib/headroom-proxy-manager.jsView file

5const fs = require('node:fs'); L6: const net = require('node:net'); L7: const { spawn } = require('node:child_process'); L8: const { nodeChildEnv } = require('../../lib/child-node-env.js'); ... L15: const LOG_FILE = path.join(require('./paths').AGENT_DATA_ROOT, 'logs', 'headroom-proxy.log'); L16: const PORT_START = parseInt(process.env.HEADROOM_PORT_START || '8787', 10); L17: function appendLog(obj) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

daemon/lib/headroom-proxy-manager.jsView on unpkg · L5

extensions/email/commands/compose.tsView file

22subject?: string; L23: body: string; L24: }; ... L135: try { L136: const config = JSON.parse(readFileSync(configPath, 'utf-8')); L137: botToken = config.botToken; ... L141: } L142: botToken ||= process.env.SLACK_BOT_TOKEN; L143: if (!botToken) return { sent: false, error: 'Slack not configured' }; ... L145: L146: const response = await fetch('https://slack.com/api/chat.postMessage', { L147: method: 'POST',

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

extensions/email/commands/compose.tsView on unpkg · L22

backfill-dashboard.jsView file

10* - Metrics panel (right): emails, edges, episodes, deltas, memory, triage counts L11: * - Live log panel (bottom): rolling stderr/stdout stream, color-coded by severity L12: * - Header bar: status, account, elapsed time ... L29: const fs = require('fs'); L30: const { spawn } = require('child_process'); L31: ... L45: // ── Config ──────────────────────────────────────────────────────────────────── L46: const REPO = __dirname; L47: const LOG_FILE = path.join(path.dirname(REPO), 'backfill-run.log'); ... L472: const startTimestamp = new Date().toISOString().replace('T', ' ').slice(0, 19); L473: logStream.write(`\n=== Backfill dashboard started: ${startTimestamp} args: ${ARGS.join(' ')} ===\n`); L474:

High

Hidden Inline Dependency Execution

Source silently spawns a Node process to execute an inline dependency payload.

backfill-dashboard.jsView on unpkg · L10

715} else { L716: child = spawn('npx', ['tsx', scriptPath, ...ARGS], { L717: cwd: __dirname, stdio: ['inherit', 'pipe', 'pipe'], env: { ...process.env }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

backfill-dashboard.jsView on unpkg · L715

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 100

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

backfill-dashboard.jsView on unpkg

daemon/scripts/send-queue.jsView file

13* 3. On success → move to `completed`. On permanent failure → move to `failed`. L14: * 4. Prints a JSON summary on stdout when done. L15: * ... L55: try { L56: return JSON.parse(fs.readFileSync(queuePath, 'utf8')); L57: } catch (_) { ... L77: if (!account || !account.tokenPath) throw new Error('no_gmail_token'); L78: const tokenPath = account.tokenPath.replace(/^~/, os.homedir()); L79: if (!fs.existsSync(tokenPath)) throw new Error('no_gmail_token'); ... L114: } catch (err) { L115: process.stderr.write(`[send-queue] Gmail token refresh failed (using existing token): ${err.message}\n`); L116: return token;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

daemon/scripts/send-queue.jsView on unpkg · L13

lib/triage-core/mental-model/metadata-recompute.tsView file

2contains invisible/control Unicode U+FEFF (zero width no-break space) <U+FEFF>// ============================================================================

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

lib/triage-core/mental-model/metadata-recompute.tsView on unpkg · L2

daemon/daemon-manager.jsView file

21Cross-file remote execution chain: daemon/daemon-manager.js spawns daemon/elyntic-company-daemon.js; helper contains network access plus dynamic code execution. L21: const fs = require('fs'); L22: const { spawn } = require('child_process'); L23: L24: const DEFAULT_PORT = parseInt(process.env.ELYNTIC_DAEMON_PORT || '9093', 10); L25: const DAEMON_SCRIPT = path.join(__dirname, 'elyntic-company-daemon.js'); L26: // AGENT-DAEMON-INSTANCE-1: the lease this manager inspects must be the SAME file ... L43: async function isHealthy(port = DEFAULT_PORT) { L44: const url = `http://localhost:${port}/api/health`; L45: try { ... L111: if (!pidAlive) { L112: // Write daemon stderr to a log file so crashes are visible for diagnosis. L113: // stdout is ignored (daemon uses log() internally

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

daemon/daemon-manager.jsView on unpkg · L21

bin/fdView file

•path = bin/fd kind = native_binary sizeBytes = 2953808 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/fdView on unpkg

run-backfill.ps1View file

•path = run-backfill.ps1 kind = build_helper sizeBytes = 2469 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

run-backfill.ps1View on unpkg

extensions/auto-update.tsView file

•matchType = normalized_sha256 matchedPackage = @cgh567/agent@2.6.22 matchedPath = extensions/auto-update.ts matchedIdentity = npm:QGNnaDU2Ny9hZ2VudA:2.6.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/auto-update.tsView on unpkg

daemon/lib/task-history-store.jsView file

•matchType = normalized_sha256 matchedPackage = @cgh567/agent@2.6.22 matchedPath = daemon/lib/task-history-store.js matchedIdentity = npm:QGNnaDU2Ny9hZ2VudA:2.6.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

daemon/lib/task-history-store.jsView on unpkg

extensions/atlas-integration.tsView file

•matchType = normalized_sha256 matchedPackage = @cgh567/agent@2.6.22 matchedPath = extensions/atlas-integration.ts matchedIdentity = npm:QGNnaDU2Ny9hZ2VudA:2.6.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/atlas-integration.tsView on unpkg

extensions/btw-sidebar.tsView file

•matchType = normalized_sha256 matchedPackage = @cgh567/agent@2.6.22 matchedPath = extensions/btw-sidebar.ts matchedIdentity = npm:QGNnaDU2Ny9hZ2VudA:2.6.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/btw-sidebar.tsView on unpkg

daemon/elyntic-company-daemon.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @cgh567/agent@2.6.44 matchedIdentity = npm:QGNnaDU2Ny9hZ2VudA:2.6.44 similarity = 0.350 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

daemon/elyntic-company-daemon.jsView on unpkg