@cgh567/agent@2.6.11: Clean npm security report (Allow)

Loading npm security reports…

@cgh567/agent@2.6.11: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

21 flagged

package.jsonView file

Lines 1-31json

2 "name": "@cgh567/agent",

3 "version": "2.6.11",

4 "packageManager": "npm@11.18.0",

5 "description": "Helios self-improvement lab",

6 "bin": {

7 "helios-rpc": "./bin/helios-rpc.js"

8 },

9 "scripts": {

10 "build": "node scripts/build-brain-service.js",

11 "postinstall": "node postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L11

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L11

12 "patch-aliases": "node scripts/patch-pi-aliases.js",

13 "update": "helios update",

14 "test": "node tests/helios-lab-smoke.test.js && node tests/heartbeat.test.js && node tests/integration/ingest-components.test.js && node tests/integration/apply-component-variant.test.js && node tests/integration/candidate-variant-apply.test.js",

15 "test:smoke": "node tests/helios-lab-smoke.test.js",

16 "test:guards": "node scripts/guard-person-id-convergence.ts --static-only",

17 "prepublishOnly": "node scripts/verify-clean-publish.js && npm run test:guards",

18 "test:guards:live": "node scripts/guard-person-id-convergence.ts",

19 "test:writer-convergence": "vitest run lib/__tests__/email-utils-address-parsing.test.ts lib/__tests__/person-id-convergence.guard.test.ts lib/__tests__/m6-module-resolution.test.ts",

20 "test:heartbeat": "node tests/heartbeat.test.js",

21 "test:memgraph": "node tests/smoke/memgraph-client.test.js",

22 "test:integration": "node tests/integration/ingest-components.test.js && node tests/integration/apply-component-variant.test.js",

23 "lab:status": "node scripts/lab-status.js --config config/helios-improvement-lab.example.json",

24 "lab:ingest": "node scripts/ingest-components.js --config config/helios-improvement-lab.example.json && node scripts/ingest-run-graph.js --config config/helios-improvement-lab.example.json",

25 "lab:nightly": "HELIOS_LAB_SKIP_CPU_CHECK=1 node scripts/run-nightly-lab.js --config config/helios-improvement-lab.example.json",

26 "test:taste": "node tests/taste-server.test.js",

27 "typecheck:backfill-workers": "tsc -p tsconfig.backfill-workers.json --pretty false",

28 "build:hbo-store": "node scripts/build-hbo-store.js",

29 "prepack": "npm run build:hbo-store"

30 },

31 "pi": {

extensions/helios-governance/lib/crawl4ai-client.tsView file

Lines 864-902typescript

864 return fetchUrlContent(url, { maxTokens });

865}

866

867/**

868 * Pre-built C4A-Script constants exposed for callers to compose or extend.

869 *

870 * @example

871 * // Add login before the standard banner/scroll script

872 * const myScript = C4A_SCRIPTS.LOGIN_STUB + '\n' + C4A_SCRIPTS.STANDARD;

bin/helios-rpc.cjsView file

Lines 16-56javascript

16 *

17 * Protocol (JSON-lines over stdin/stdout, same as pi --mode rpc):

18 * stdin ← {"type":"prompt","id"

extensions/upgrade-reviewer.tsView file

Lines 726-766typescript

726 }

727

728 // H5 — Full cleanup of temp dir handled by finally block

729

730 } catch (e) {

731 process.stderr.write(`[upgrade-reviewer.ts] operation failed: ${String(e)}\n`);

732

lib/graph/erd/parse-erd.jsView file

Lines 224-264javascript

224 }

225 // Also match <pre class="mermaid"> or <div class="mermaid"> elements

226 const prePattern = /<(?:pre|div)[^>]*class="[^"]*mermaid[^"]*"[^>]*>(

bin/file-polyfill.cjsView file

Lines 1-22javascript

1// bin/file-polyfill.cjs

2// Injected via --require into the @cgh567/cli child process spawned by helios-rpc.cjs.

3// Runs before cli.js executes — hooks are available for all subsequent require() calls.

4'use strict';

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/file-polyfill.cjsView on unpkg · L2

6// ── 1. Polyfill globalThis.File (Node 18 compat) ─────────────────────────────

7if (typeof globalThis.File ===

extensions/memgraph-broker-launcher.tsView file

Lines 1-23typescript

1/**

2 * memgraph-broker-launcher.ts — Auto-starts the Memgraph connection broker.

3 *

4 * Uses Node.js fork() with IPC channel for readiness signaling.

5 * The broker sends { type: 'ready' } after its socket is listening.

6 * This eliminates filesystem polling and timing races entirely.

7 *

8 * Lifecycle:

9 * session_start → fork broker → wait for IPC 'ready' → emit memgraph_ready → disconnect IPC

10 * session_shutdown → release reference (broker survives for other sessions)

extensions/session-reaper.tsView file

17import type { ExtensionAPI } from "@helios-agent/pi-coding-agent"; L18: import { execFile, execFileSync, spawn } from "node:child_process"; L19: import { join } from "node:path"; ... L59: fs.mkdirSync(dir, { recursive: true, mode: 0o700 }); L60: } catch (e) { process.stderr.write(`[extensions] never crash session: ${String(e)}\n`); } L61: } ... L66: const raw = fs.readFileSync(tombstonePath, "utf-8"); L67: return JSON.parse(raw) as SessionTombstone; L68: } catch (e) { ... L83: // /proc/self/fd/0 is Linux-only; macOS uses environment variables L84: if (process.platform === 'darwin') { L85: return process.env.TERM_SESSION_ID ?? process.env.TERM_PROGRAM ?? "unknown";

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

extensions/session-reaper.tsView on unpkg · L17

extensions/memgraph-autostart.tsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

extensions/memgraph-autostart.tsView on unpkg · L12

12*/ L13: import { execFile } from 'child_process'; L14: import { promisify } from 'util'; L15: import * as net from 'net'; L16: import { join } from 'path'; ... L23: const require = createRequire(import.meta.url); L24: const QUIET = process.env.PI_QUIET === '1' || process.env.PI_LOG_LEVEL === 'error'; L25: ... L53: if (!driver) { L54: process.stderr.write('[memgraph-autostart] ⚠️ Driver not available yet — skipping MAGE module load (will retry on next tick)\n'); L55: return; ... L266: // AGENT_DIR: resolved from HELIOS_ROOT env var (canonical), then from helios-root.js

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

extensions/memgraph-autostart.tsView on unpkg · L12

backfill-dashboard.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @cgh567/agent@2.4.8 matchedIdentity = npm:QGNnaDU2Ny9hZ2VudA:2.4.8 similarity = 0.592 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

backfill-dashboard.jsView on unpkg

10* - Metrics panel (right): emails, edges, episodes, deltas, memory, triage counts L11: * - Live log panel (bottom): rolling stderr/stdout stream, color-coded by severity L12: * - Header bar: status, account, elapsed time ... L27: const fs = require('fs'); L28: const { spawn } = require('child_process'); L29: ... L43: // ── Config ──────────────────────────────────────────────────────────────────── L44: const REPO = __dirname; L45: const LOG_FILE = path.join(path.dirname(REPO), 'backfill-run.log'); ... L470: const startTimestamp = new Date().toISOString().replace('T', ' ').slice(0, 19); L471: logStream.write(`\n=== Backfill dashboard started: ${startTimestamp} args: ${ARGS.join(' ')} ===\n`); L472:

High

Hidden Inline Dependency Execution

Source silently spawns a Node process to execute an inline dependency payload.

backfill-dashboard.jsView on unpkg · L10

713} else { L714: child = spawn('npx', ['tsx', scriptPath, ...ARGS], { L715: cwd: __dirname, stdio: ['inherit', 'pipe', 'pipe'], env: { ...process.env }

High

Runtime Package Install

lib/graph/web-research/auto-capture/queue.test.mjsView file

21queue.enqueue([ L22: 'https://example.com/a', L23: 'https://example.com/a', ... L114: const queue = new CaptureQueue({ drainDelayMs: 60_000 }); L115: queue.enqueue(['http://169.254.169.254/latest/meta-data/']); L116: assert.deepEqual(queue.getStats(), { queued: 0, ingested: 0, failed: 0 }); ... L124: L125: test('CaptureQueue SSRF: rejects RFC1918 private IPs', () => { L126: const queue = new CaptureQueue({ drainDelayMs: 60_000 });

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

lib/graph/web-research/auto-capture/queue.test.mjsView on unpkg · L21

extensions/imessage-triage/imessage-bridge.tsView file

322package = @cgh567/agent; repositoryIdentity = helios-agent; dependency = better-sqlite3 L322: try { L323: Database = require('better-sqlite3') as typeof Database; L324: } catch (err) {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

extensions/imessage-triage/imessage-bridge.tsView on unpkg · L322

lib/triage-core/types.tsView file

900contains invisible/control Unicode U+FEFF (zero width no-break space) <U+FEFF>

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

lib/triage-core/types.tsView on unpkg · L900

extensions/codebase-index.tsView file

23Cross-file remote execution chain: extensions/codebase-index.ts spawns bin/helios-rpc.js; helper contains network access plus dynamic code execution. L23: import * as crypto from "node:crypto"; L24: import { execSync } from "node:child_process"; L25: ... L96: if (lockAge < LOCK_EXPIRY_MS) return false; L97: } catch (e) { process.stderr.write(`[codebase-index.ts] operation failed: ${String(e)}\n`); } L98: } ... L119: saveManifest(current); L120: if (process.env.DEBUG) { L121: process.stderr.write(`[codebase-index] skip: 0 file changes in ${repoPath}\n`); ... L196: function runLexicalFallback(query: string, limit: number, project?: string): { text: string; count: number } { L197: const searchRoot = project || findGitRoot(process.cwd()) || (require('path').join(require('os').homedir(), 'heli

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

extensions/codebase-index.tsView on unpkg · L23

bin/fdView file

•path = bin/fd kind = native_binary sizeBytes = 2953808 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/fdView on unpkg

run-backfill.ps1View file

•path = run-backfill.ps1 kind = build_helper sizeBytes = 5006 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

run-backfill.ps1View on unpkg

extensions/__tests__/session-path-fixes.test.shView file

•path = extensions/__tests__/session-path-fixes.test.sh kind = payload_in_excluded_dir sizeBytes = 4962 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

extensions/__tests__/session-path-fixes.test.shView on unpkg

Source & flagged code

21 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

extensions/helios-governance/lib/crawl4ai-client.tsView file

884patternName = generic_password severity = medium line = 884 matchedText = SETVAR p..._ME"

Medium

Secret Pattern

Package contains a possible secret pattern.

extensions/helios-governance/lib/crawl4ai-client.tsView on unpkg · L884

bin/helios-rpc.cjsView file

36const fs = require('fs'); L37: const { spawn } = require('child_process'); L38:

High

Child Process

Package source references child process execution.

bin/helios-rpc.cjsView on unpkg · L36

extensions/upgrade-reviewer.tsView file

746const declRegex = /export\s+(?:declare\s+)?(?:interface|type|function|class|const|let|var|enum)\s+(\w+)/g; L747: let match: RegExpExecArray | null; L748: while ((match = declRegex.exec(dtsContent)) !== null) {

High

Shell

Package source references shell execution.

extensions/upgrade-reviewer.tsView on unpkg · L746

lib/graph/erd/parse-erd.jsView file

244* that define entities/relationships as JS object literals. L245: * Backend Mapping: Pure regex — no eval(), no external deps, safe for CI. L246: * Integration Points: Merges into parseMermaidBlock → mergeResults → Memgraph pipeline.

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/graph/erd/parse-erd.jsView on unpkg · L244

bin/file-polyfill.cjsView file

2// Injected via --require into the @cgh567/cli child process spawned by helios-rpc.cjs. L3: // Runs before cli.js executes — hooks are available for all subsequent require() calls. L4: 'use strict';

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/file-polyfill.cjsView on unpkg · L2

extensions/memgraph-broker-launcher.tsView file

3* L4: * Uses Node.js fork() with IPC channel for readiness signaling. L5: * The broker sends { type: 'ready' } after its socket is listening. ... L22: // HELIOS_SKIP_INFRA=1: headless/judge mode — broker not started, resolve immediately L23: if (process.env.HELIOS_SKIP_INFRA === '1') return; L24: await new Promise<void>((resolve) => { ... L33: L34: const BROKER_SOCK = process.env.HELIOS_BROKER_SOCK || join(homedir(), 'helios-agent', 'run', 'memgraph-broker.sock'); L35: const BROKER_LOCK = BROKER_SOCK.replace('.sock', '.lock'); ... L54: try { L55: const lock = JSON.parse(readFileSync(BROKER_LOCK, 'utf8')); L56: process.kill(lock.pid, 0);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

extensions/memgraph-broker-launcher.tsView on unpkg · L3

extensions/session-reaper.tsView file

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

extensions/session-reaper.tsView on unpkg · L17

extensions/memgraph-autostart.tsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

extensions/memgraph-autostart.tsView on unpkg · L12

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

extensions/memgraph-autostart.tsView on unpkg · L12

backfill-dashboard.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

backfill-dashboard.jsView on unpkg

High

Hidden Inline Dependency Execution

Source silently spawns a Node process to execute an inline dependency payload.

backfill-dashboard.jsView on unpkg · L10

713} else { L714: child = spawn('npx', ['tsx', scriptPath, ...ARGS], { L715: cwd: __dirname, stdio: ['inherit', 'pipe', 'pipe'], env: { ...process.env }

High

Runtime Package Install

lib/graph/web-research/auto-capture/queue.test.mjsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

lib/graph/web-research/auto-capture/queue.test.mjsView on unpkg · L21

extensions/imessage-triage/imessage-bridge.tsView file

322package = @cgh567/agent; repositoryIdentity = helios-agent; dependency = better-sqlite3 L322: try { L323: Database = require('better-sqlite3') as typeof Database; L324: } catch (err) {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

extensions/imessage-triage/imessage-bridge.tsView on unpkg · L322

lib/triage-core/types.tsView file

900contains invisible/control Unicode U+FEFF (zero width no-break space) <U+FEFF>

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

lib/triage-core/types.tsView on unpkg · L900

extensions/codebase-index.tsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

extensions/codebase-index.tsView on unpkg · L23

bin/fdView file

•path = bin/fd kind = native_binary sizeBytes = 2953808 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/fdView on unpkg

run-backfill.ps1View file

•path = run-backfill.ps1 kind = build_helper sizeBytes = 5006 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

run-backfill.ps1View on unpkg

extensions/__tests__/session-path-fixes.test.shView file

•path = extensions/__tests__/session-path-fixes.test.sh kind = payload_in_excluded_dir sizeBytes = 4962 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

extensions/__tests__/session-path-fixes.test.shView on unpkg

Source & flagged code

21 flagged

package.jsonView file

Lines 1-31json

2 "name": "@cgh567/agent",

3 "version": "2.6.11",

4 "packageManager": "npm@11.18.0",

5 "description": "Helios self-improvement lab",

6 "bin": {

7 "helios-rpc": "./bin/helios-rpc.js"

8 },

9 "scripts": {

10 "build": "node scripts/build-brain-service.js",

11 "postinstall": "node postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L11

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L11

12 "patch-aliases": "node scripts/patch-pi-aliases.js",

13 "update": "helios update",

15 "test:smoke": "node tests/helios-lab-smoke.test.js",

16 "test:guards": "node scripts/guard-person-id-convergence.ts --static-only",

17 "prepublishOnly": "node scripts/verify-clean-publish.js && npm run test:guards",

18 "test:guards:live": "node scripts/guard-person-id-convergence.ts",

19 "test:writer-convergence": "vitest run lib/__tests__/email-utils-address-parsing.test.ts lib/__tests__/person-id-convergence.guard.test.ts lib/__tests__/m6-module-resolution.test.ts",

20 "test:heartbeat": "node tests/heartbeat.test.js",

21 "test:memgraph": "node tests/smoke/memgraph-client.test.js",

22 "test:integration": "node tests/integration/ingest-components.test.js && node tests/integration/apply-component-variant.test.js",

23 "lab:status": "node scripts/lab-status.js --config config/helios-improvement-lab.example.json",

24 "lab:ingest": "node scripts/ingest-components.js --config config/helios-improvement-lab.example.json && node scripts/ingest-run-graph.js --config config/helios-improvement-lab.example.json",

25 "lab:nightly": "HELIOS_LAB_SKIP_CPU_CHECK=1 node scripts/run-nightly-lab.js --config config/helios-improvement-lab.example.json",

26 "test:taste": "node tests/taste-server.test.js",

27 "typecheck:backfill-workers": "tsc -p tsconfig.backfill-workers.json --pretty false",

28 "build:hbo-store": "node scripts/build-hbo-store.js",

29 "prepack": "npm run build:hbo-store"

30 },

31 "pi": {

extensions/helios-governance/lib/crawl4ai-client.tsView file

Lines 864-902typescript

864 return fetchUrlContent(url, { maxTokens });

865}

866

867/**

868 * Pre-built C4A-Script constants exposed for callers to compose or extend.

869 *

870 * @example

871 * // Add login before the standard banner/scroll script

872 * const myScript = C4A_SCRIPTS.LOGIN_STUB + '\n' + C4A_SCRIPTS.STANDARD;

bin/helios-rpc.cjsView file

Lines 16-56javascript

16 *

17 * Protocol (JSON-lines over stdin/stdout, same as pi --mode rpc):

18 * stdin ← {"type":"prompt","id"

extensions/upgrade-reviewer.tsView file

Lines 726-766typescript

726 }

727

728 // H5 — Full cleanup of temp dir handled by finally block

729

730 } catch (e) {

731 process.stderr.write(`[upgrade-reviewer.ts] operation failed: ${String(e)}\n`);

732

lib/graph/erd/parse-erd.jsView file

Lines 224-264javascript

224 }

225 // Also match <pre class="mermaid"> or <div class="mermaid"> elements

226 const prePattern = /<(?:pre|div)[^>]*class="[^"]*mermaid[^"]*"[^>]*>(

bin/file-polyfill.cjsView file

Lines 1-22javascript

1// bin/file-polyfill.cjs

2// Injected via --require into the @cgh567/cli child process spawned by helios-rpc.cjs.

3// Runs before cli.js executes — hooks are available for all subsequent require() calls.

4'use strict';

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/file-polyfill.cjsView on unpkg · L2

6// ── 1. Polyfill globalThis.File (Node 18 compat) ─────────────────────────────

7if (typeof globalThis.File ===

extensions/memgraph-broker-launcher.tsView file

Lines 1-23typescript

1/**

2 * memgraph-broker-launcher.ts — Auto-starts the Memgraph connection broker.

3 *

4 * Uses Node.js fork() with IPC channel for readiness signaling.

5 * The broker sends { type: 'ready' } after its socket is listening.

6 * This eliminates filesystem polling and timing races entirely.

7 *

8 * Lifecycle:

9 * session_start → fork broker → wait for IPC 'ready' → emit memgraph_ready → disconnect IPC

10 * session_shutdown → release reference (broker survives for other sessions)

extensions/session-reaper.tsView file

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

extensions/session-reaper.tsView on unpkg · L17

extensions/memgraph-autostart.tsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

extensions/memgraph-autostart.tsView on unpkg · L12

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

extensions/memgraph-autostart.tsView on unpkg · L12

backfill-dashboard.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

backfill-dashboard.jsView on unpkg

High

Hidden Inline Dependency Execution

Source silently spawns a Node process to execute an inline dependency payload.

backfill-dashboard.jsView on unpkg · L10

713} else { L714: child = spawn('npx', ['tsx', scriptPath, ...ARGS], { L715: cwd: __dirname, stdio: ['inherit', 'pipe', 'pipe'], env: { ...process.env }

High

Runtime Package Install

lib/graph/web-research/auto-capture/queue.test.mjsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

lib/graph/web-research/auto-capture/queue.test.mjsView on unpkg · L21

extensions/imessage-triage/imessage-bridge.tsView file

322package = @cgh567/agent; repositoryIdentity = helios-agent; dependency = better-sqlite3 L322: try { L323: Database = require('better-sqlite3') as typeof Database; L324: } catch (err) {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

extensions/imessage-triage/imessage-bridge.tsView on unpkg · L322

lib/triage-core/types.tsView file

900contains invisible/control Unicode U+FEFF (zero width no-break space) <U+FEFF>

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

lib/triage-core/types.tsView on unpkg · L900

extensions/codebase-index.tsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

extensions/codebase-index.tsView on unpkg · L23

bin/fdView file

•path = bin/fd kind = native_binary sizeBytes = 2953808 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/fdView on unpkg

run-backfill.ps1View file

•path = run-backfill.ps1 kind = build_helper sizeBytes = 5006 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

run-backfill.ps1View on unpkg

extensions/__tests__/session-path-fixes.test.shView file

•path = extensions/__tests__/session-path-fixes.test.sh kind = payload_in_excluded_dir sizeBytes = 4962 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

extensions/__tests__/session-path-fixes.test.shView on unpkg

@cgh567/agent@2.6.11

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code