@cgh567/agent@2.6.35: Suspicious npm security report (Warn)

Loading npm security reports…

@cgh567/agent@2.6.35: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

20 flagged

package.jsonView file

Lines 1-32json

2 "name": "@cgh567/agent",

3 "version": "2.6.35",

4 "packageManager": "npm@11.18.0",

5 "description": "Helios self-improvement lab",

6 "bin": {

7 "helios": "./bin/helios.js",

8 "helios-rpc": "./bin/helios-rpc.js"

9 },

10 "scripts": {

11 "build": "node scripts/build-brain-service.cjs",

12 "postinstall": "node postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L12

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L12

13 "patch-aliases": "node scripts/patch-pi-aliases.js",

14 "update": "helios update",

15 "test": "node --test tests/rpc-ready-gate.test.js tests/fixture-shape.test.js && node tests/helios-lab-smoke.test.js && node tests/heartbeat.test.js && node tests/integration/ingest-components.test.js && node tests/integration/apply-component-variant.test.js && node tests/integration/candidate-variant-apply.test.js && npm run test:send-gate && npm run test:backfill-diagnosis && npm run test:email-auth && npm run test:daemon-authority && npm run test:inbox-dog-refresh && node tests/backfill-accounting.test.js",

16 "test:daemon-authority": "node scripts/vitest-guarded.mjs run daemon/__tests__/package-runtime-authority.test.js daemon/__tests__/detect-signals-pipeline.test.js",

17 "test:send-gate": "node scripts/vitest-guarded.mjs run daemon/__tests__/send-gate.test.js",

18 "test:inbox-dog-refresh": "tsx --test tests/inbox-dog-credential-precedence.test.ts && tsx --test tests/inbox-dog-refresh-live.test.ts",

19 "test:clean-install": "node --test tests/clean-install-boot.test.js",

20 "test:clean-clone-publish": "node --test tests/clean-clone-publish.test.js",

21 "test:cortex-live": "node scripts/vitest-guarded.mjs run daemon/__tests__/cortex-live-rerank.live.test.js",

22 "test:pi-auth-store": "node --test tests/pi-auth-store-convergence.test.js",

23 "test:smoke": "node tests/helios-lab-smoke.test.js",

24 "test:guards": "node --test --test-concurrency=1 tests/pi-fork-lineage.test.js tests/node-modules-runtime-boundary.test.js tests/verify-clean-publish.test.js tests/launcher-recursion.test.js tests/signal-weight-degeneracy-guard.test.js tests/knip-policy-writer-trust.test.js tests/lb2-graph-leaf-retention.test.js && node scripts/guard-person-id-convergence.ts --static-only && npm run test:package-closure && npm run test:knip-boundary && npm run test:signal-contract && npm run knip && npm run knip:committed && npm run test:cortex-live && npm run test:pi-auth-store",

25 "test:signal-contract": "node scripts/vitest-guarded.mjs run lib/triage-core/__tests__/signal-assessment-store.test.ts lib/triage-core/__tests__/signal-assessment-runtime.test.ts lib/triage-core/__tests__/signal-source-evaluation-v1.test.ts daemon/__tests__/inbox-sql-reader-manifest-gate.test.js",

26 "test:knip-boundary": "node --test tests/knip-boundary.test.js tests/runtime-feature-closure.test.js tests/update-contract.test.js",

27 "knip": "node scripts/knip-check.mjs",

28 "knip:committed": "node scripts/verify-knip-policy-committed.mjs",

29 "knip:policy": "node scripts/update-knip-policy.mjs --current",

30 "test:package-closure": "node --test tests/package-import-closure.test.js",

31 "prepublishOnly": "npm run build:hbo-store && node scripts/verify-clean-publish.js && npm run typecheck && npm run test:guards && npm run test:clean-clone-publish",

32 "test:guards:live": "node scripts/guard-person-id-convergence.ts",

extensions/helios-governance/lib/crawl4ai-client.tsView file

Lines 864-902typescript

864 return fetchUrlContent(url, { maxTokens });

865}

866

867/**

868 * Pre-built C4A-Script constants exposed for callers to compose or extend.

869 *

870 * @example

871 * // Add login before the standard banner/scroll script

872 * const myScript = C4A_SCRIPTS.LOGIN_STUB + '\n' + C4A_SCRIPTS.STANDARD;

bin/helios.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2'use strict';

4/**

5 * Cross-platform npm entry point for Helios.

6 *

7 * The long-lived product wrapper remains bin/helios on POSIX. npm's Windows

8 * shim cannot safely invoke that Bash file because it passes a backslash path

9 * to Bash, so this Node boundary delegates to it on POSIX and owns the native

10 * Windows routes.

11 */

extensions/upgrade-reviewer.tsView file

Lines 726-766typescript

726 }

727

728 // H5 — Full cleanup of temp dir handled by finally block

729

730 } catch (e) {

731 process.stderr.write(`[upgrade-reviewer.ts] operation failed: ${String(e)}\n`);

732

lib/graph/erd/parse-erd.jsView file

Lines 224-264javascript

224 }

225 // Also match <pre class="mermaid"> or <div class="mermaid"> elements

226 const prePattern = /<(?:pre|div)[^>]*class="[^"]*mermaid[^"]*"[^>]*>(

brainv2/task-context-strategy.tsView file

Lines 15-51typescript

15 understand: { blastRadius: 0.1, directDeps: 0.5, history: 0.2, governance: 0.0, community: 0.2 },

16 review: { blastRadius

extensions/memgraph-broker-launcher.tsView file

Lines 1-23typescript

1/**

2 * memgraph-broker-launcher.ts — Auto-starts the Memgraph connection broker.

3 *

4 * Uses Node.js fork() with IPC channel for readiness signaling.

5 * The broker sends { type: 'ready' } after its socket is listening.

6 * This eliminates filesystem polling and timing races entirely.

7 *

8 * Lifecycle:

9 * session_start → fork broker → wait for IPC 'ready' → emit memgraph_ready → disconnect IPC

10 * session_shutdown → release reference (broker survives for other sessions)

extensions/memgraph-autostart.tsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

extensions/memgraph-autostart.tsView on unpkg · L12

12*/ L13: import { execFile } from 'child_process'; L14: import { promisify } from 'util'; L15: import * as net from 'net'; L16: import { join } from 'path'; ... L23: const require = createRequire(import.meta.url); L24: const QUIET = process.env.PI_QUIET === '1' || process.env.PI_LOG_LEVEL === 'error'; L25: ... L53: if (!driver) { L54: process.stderr.write('[memgraph-autostart] ⚠️ Driver not available yet — skipping MAGE module load (will retry on next tick)\n'); L55: return; ... L266: // AGENT_DIR: resolved from HELIOS_ROOT env var (canonical), then from helios-root.js

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

extensions/memgraph-autostart.tsView on unpkg · L12

bin/helios-ollama-models.cjsView file

58function readServedOllamaModels(baseUrl, timeoutMs = DEFAULT_TIMEOUT_MS) { L59: const origin = String(baseUrl || 'http://127.0.0.1:11434').replace(/\/v1\/?$/, ''); L60: const script = ... L62: `.then(r => r.ok ? r.json() : Promise.reject(new Error('http ' + r.status)))` + L63: `.then(j => { process.stdout.write(JSON.stringify(j)); process.exit(0); })` + L64: `.catch(() => process.exit(1));`; L65: try { L66: const res = spawnSync(process.execPath, ['-e', script], { L67: timeout: timeoutMs,

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/helios-ollama-models.cjsView on unpkg · L58

58Trigger-reachable command-output exfiltration chain: manifest.bin -> bin/helios-rpc.js -> bin/helios-rpc.cjs -> bin/helios-agent-dir.cjs -> bin/helios-ollama-models.cjs L58: function readServedOllamaModels(baseUrl, timeoutMs = DEFAULT_TIMEOUT_MS) { L59: const origin = String(baseUrl || 'http://127.0.0.1:11434').replace(/\/v1\/?$/, ''); L60: const script = ... L62: `.then(r => r.ok ? r.json() : Promise.reject(new Error('http ' + r.status)))` + L63: `.then(j => { process.stdout.write(JSON.stringify(j)); process.exit(0); })` + L64: `.catch(() => process.exit(1));`; L65: try { L66: const res = spawnSync(process.execPath, ['-e', script], { L67: timeout: timeoutMs,

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

bin/helios-ollama-models.cjsView on unpkg · L58

backfill-dashboard.jsView file

10* - Metrics panel (right): emails, edges, episodes, deltas, memory, triage counts L11: * - Live log panel (bottom): rolling stderr/stdout stream, color-coded by severity L12: * - Header bar: status, account, elapsed time ... L27: const fs = require('fs'); L28: const { spawn } = require('child_process'); L29: ... L43: // ── Config ──────────────────────────────────────────────────────────────────── L44: const REPO = __dirname; L45: const LOG_FILE = path.join(path.dirname(REPO), 'backfill-run.log'); ... L470: const startTimestamp = new Date().toISOString().replace('T', ' ').slice(0, 19); L471: logStream.write(`\n=== Backfill dashboard started: ${startTimestamp} args: ${ARGS.join(' ')} ===\n`); L472:

High

Hidden Inline Dependency Execution

Source silently spawns a Node process to execute an inline dependency payload.

backfill-dashboard.jsView on unpkg · L10

713} else { L714: child = spawn('npx', ['tsx', scriptPath, ...ARGS], { L715: cwd: __dirname, stdio: ['inherit', 'pipe', 'pipe'], env: { ...process.env }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

backfill-dashboard.jsView on unpkg · L713

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 102

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

backfill-dashboard.jsView on unpkg

lib/triage-core/types.tsView file

975contains invisible/control Unicode U+FEFF (zero width no-break space) <U+FEFF>

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

lib/triage-core/types.tsView on unpkg · L975

daemon/daemon-manager.jsView file

19Cross-file remote execution chain: daemon/daemon-manager.js spawns daemon/helios-company-daemon.js; helper contains network access plus dynamic code execution. L19: const fs = require('fs'); L20: const { spawn } = require('child_process'); L21: L22: const DEFAULT_PORT = parseInt(process.env.HELIOS_DAEMON_PORT || '9093', 10); L23: const DAEMON_SCRIPT = path.join(__dirname, 'helios-company-daemon.js'); L24: // Use HELIOS_ROOT from lib/paths.js so PID_FILE is correct for all install locations ... L38: async function isHealthy(port = DEFAULT_PORT) { L39: const url = `http://localhost:${port}/api/health`; L40: try { ... L106: if (!pidAlive) { L107: // Write daemon stderr to a log file so crashes are visible for diagnosis. L108: // stdout is ignored (daemon uses log() internall

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

daemon/daemon-manager.jsView on unpkg · L19

bin/fdView file

•path = bin/fd kind = native_binary sizeBytes = 2953808 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/fdView on unpkg

run-backfill.ps1View file

•path = run-backfill.ps1 kind = build_helper sizeBytes = 5006 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

run-backfill.ps1View on unpkg

daemon/helios-company-daemon.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @cgh567/agent@2.6.32 matchedIdentity = npm:QGNnaDU2Ny9hZ2VudA:2.6.32 similarity = 0.783 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

daemon/helios-company-daemon.jsView on unpkg

Source & flagged code

20 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

extensions/helios-governance/lib/crawl4ai-client.tsView file

884patternName = generic_password severity = medium line = 884

Medium

Secret Pattern

Package contains a possible secret pattern.

extensions/helios-governance/lib/crawl4ai-client.tsView on unpkg · L884

bin/helios.jsView file

14const path = require('node:path'); L15: const { spawn } = require('node:child_process'); L16: const { createRequire } = require('node:module');

High

Child Process

Package source references child process execution.

bin/helios.jsView on unpkg · L14

extensions/upgrade-reviewer.tsView file

746const declRegex = /export\s+(?:declare\s+)?(?:interface|type|function|class|const|let|var|enum)\s+(\w+)/g; L747: let match: RegExpExecArray | null; L748: while ((match = declRegex.exec(dtsContent)) !== null) {

High

Shell

Package source references shell execution.

extensions/upgrade-reviewer.tsView on unpkg · L746

lib/graph/erd/parse-erd.jsView file

244* that define entities/relationships as JS object literals. L245: * Backend Mapping: Pure regex — no eval(), no external deps, safe for CI. L246: * Integration Points: Merges into parseMermaidBlock → mergeResults → Memgraph pipeline.

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/graph/erd/parse-erd.jsView on unpkg · L244

brainv2/task-context-strategy.tsView file

35try { L36: const { shannonEntropy } = require('../lib/graph/analytics/quantum-entropy-detector.js'); L37: // If task text itself contains error-like keywords, boost governance context

Medium

Dynamic Require

Package source references dynamic require/import behavior.

brainv2/task-context-strategy.tsView on unpkg · L35

extensions/memgraph-broker-launcher.tsView file

3* L4: * Uses Node.js fork() with IPC channel for readiness signaling. L5: * The broker sends { type: 'ready' } after its socket is listening. ... L22: // HELIOS_SKIP_INFRA=1: headless/judge mode — broker not started, resolve immediately L23: if (process.env.HELIOS_SKIP_INFRA === '1') return; L24: await new Promise<void>((resolve) => { ... L33: L34: const BROKER_SOCK = process.env.HELIOS_BROKER_SOCK || join(homedir(), 'helios-agent', 'run', 'memgraph-broker.sock'); L35: const BROKER_LOCK = BROKER_SOCK.replace('.sock', '.lock'); ... L54: try { L55: const lock = JSON.parse(readFileSync(BROKER_LOCK, 'utf8')); L56: process.kill(lock.pid, 0);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

extensions/memgraph-broker-launcher.tsView on unpkg · L3

extensions/memgraph-autostart.tsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

extensions/memgraph-autostart.tsView on unpkg · L12

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

extensions/memgraph-autostart.tsView on unpkg · L12

bin/helios-ollama-models.cjsView file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/helios-ollama-models.cjsView on unpkg · L58

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

bin/helios-ollama-models.cjsView on unpkg · L58

backfill-dashboard.jsView file

High

Hidden Inline Dependency Execution

Source silently spawns a Node process to execute an inline dependency payload.

backfill-dashboard.jsView on unpkg · L10

713} else { L714: child = spawn('npx', ['tsx', scriptPath, ...ARGS], { L715: cwd: __dirname, stdio: ['inherit', 'pipe', 'pipe'], env: { ...process.env }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

backfill-dashboard.jsView on unpkg · L713

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 102

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

backfill-dashboard.jsView on unpkg

lib/triage-core/types.tsView file

975contains invisible/control Unicode U+FEFF (zero width no-break space) <U+FEFF>

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

lib/triage-core/types.tsView on unpkg · L975

daemon/daemon-manager.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

daemon/daemon-manager.jsView on unpkg · L19

bin/fdView file

•path = bin/fd kind = native_binary sizeBytes = 2953808 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/fdView on unpkg

run-backfill.ps1View file

•path = run-backfill.ps1 kind = build_helper sizeBytes = 5006 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

run-backfill.ps1View on unpkg

daemon/helios-company-daemon.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

daemon/helios-company-daemon.jsView on unpkg

Source & flagged code

20 flagged

package.jsonView file

Lines 1-32json

2 "name": "@cgh567/agent",

3 "version": "2.6.35",

4 "packageManager": "npm@11.18.0",

5 "description": "Helios self-improvement lab",

6 "bin": {

7 "helios": "./bin/helios.js",

8 "helios-rpc": "./bin/helios-rpc.js"

9 },

10 "scripts": {

11 "build": "node scripts/build-brain-service.cjs",

12 "postinstall": "node postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L12

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L12

13 "patch-aliases": "node scripts/patch-pi-aliases.js",

14 "update": "helios update",

16 "test:daemon-authority": "node scripts/vitest-guarded.mjs run daemon/__tests__/package-runtime-authority.test.js daemon/__tests__/detect-signals-pipeline.test.js",

17 "test:send-gate": "node scripts/vitest-guarded.mjs run daemon/__tests__/send-gate.test.js",

18 "test:inbox-dog-refresh": "tsx --test tests/inbox-dog-credential-precedence.test.ts && tsx --test tests/inbox-dog-refresh-live.test.ts",

19 "test:clean-install": "node --test tests/clean-install-boot.test.js",

20 "test:clean-clone-publish": "node --test tests/clean-clone-publish.test.js",

21 "test:cortex-live": "node scripts/vitest-guarded.mjs run daemon/__tests__/cortex-live-rerank.live.test.js",

22 "test:pi-auth-store": "node --test tests/pi-auth-store-convergence.test.js",

23 "test:smoke": "node tests/helios-lab-smoke.test.js",

26 "test:knip-boundary": "node --test tests/knip-boundary.test.js tests/runtime-feature-closure.test.js tests/update-contract.test.js",

27 "knip": "node scripts/knip-check.mjs",

28 "knip:committed": "node scripts/verify-knip-policy-committed.mjs",

29 "knip:policy": "node scripts/update-knip-policy.mjs --current",

30 "test:package-closure": "node --test tests/package-import-closure.test.js",

31 "prepublishOnly": "npm run build:hbo-store && node scripts/verify-clean-publish.js && npm run typecheck && npm run test:guards && npm run test:clean-clone-publish",

32 "test:guards:live": "node scripts/guard-person-id-convergence.ts",

extensions/helios-governance/lib/crawl4ai-client.tsView file

Lines 864-902typescript

864 return fetchUrlContent(url, { maxTokens });

865}

866

867/**

868 * Pre-built C4A-Script constants exposed for callers to compose or extend.

869 *

870 * @example

871 * // Add login before the standard banner/scroll script

872 * const myScript = C4A_SCRIPTS.LOGIN_STUB + '\n' + C4A_SCRIPTS.STANDARD;

bin/helios.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2'use strict';

4/**

5 * Cross-platform npm entry point for Helios.

6 *

7 * The long-lived product wrapper remains bin/helios on POSIX. npm's Windows

8 * shim cannot safely invoke that Bash file because it passes a backslash path

9 * to Bash, so this Node boundary delegates to it on POSIX and owns the native

10 * Windows routes.

11 */

extensions/upgrade-reviewer.tsView file

Lines 726-766typescript

726 }

727

728 // H5 — Full cleanup of temp dir handled by finally block

729

730 } catch (e) {

731 process.stderr.write(`[upgrade-reviewer.ts] operation failed: ${String(e)}\n`);

732

lib/graph/erd/parse-erd.jsView file

Lines 224-264javascript

224 }

225 // Also match <pre class="mermaid"> or <div class="mermaid"> elements

226 const prePattern = /<(?:pre|div)[^>]*class="[^"]*mermaid[^"]*"[^>]*>(

brainv2/task-context-strategy.tsView file

Lines 15-51typescript

15 understand: { blastRadius: 0.1, directDeps: 0.5, history: 0.2, governance: 0.0, community: 0.2 },

16 review: { blastRadius

extensions/memgraph-broker-launcher.tsView file

Lines 1-23typescript

1/**

2 * memgraph-broker-launcher.ts — Auto-starts the Memgraph connection broker.

3 *

4 * Uses Node.js fork() with IPC channel for readiness signaling.

5 * The broker sends { type: 'ready' } after its socket is listening.

6 * This eliminates filesystem polling and timing races entirely.

7 *

8 * Lifecycle:

9 * session_start → fork broker → wait for IPC 'ready' → emit memgraph_ready → disconnect IPC

10 * session_shutdown → release reference (broker survives for other sessions)

extensions/memgraph-autostart.tsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

extensions/memgraph-autostart.tsView on unpkg · L12

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

extensions/memgraph-autostart.tsView on unpkg · L12

bin/helios-ollama-models.cjsView file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/helios-ollama-models.cjsView on unpkg · L58

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

bin/helios-ollama-models.cjsView on unpkg · L58

backfill-dashboard.jsView file

High

Hidden Inline Dependency Execution

Source silently spawns a Node process to execute an inline dependency payload.

backfill-dashboard.jsView on unpkg · L10

713} else { L714: child = spawn('npx', ['tsx', scriptPath, ...ARGS], { L715: cwd: __dirname, stdio: ['inherit', 'pipe', 'pipe'], env: { ...process.env }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

backfill-dashboard.jsView on unpkg · L713

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 102

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

backfill-dashboard.jsView on unpkg

lib/triage-core/types.tsView file

975contains invisible/control Unicode U+FEFF (zero width no-break space) <U+FEFF>

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

lib/triage-core/types.tsView on unpkg · L975

daemon/daemon-manager.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

daemon/daemon-manager.jsView on unpkg · L19

bin/fdView file

•path = bin/fd kind = native_binary sizeBytes = 2953808 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/fdView on unpkg

run-backfill.ps1View file

•path = run-backfill.ps1 kind = build_helper sizeBytes = 5006 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

run-backfill.ps1View on unpkg

daemon/helios-company-daemon.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

daemon/helios-company-daemon.jsView on unpkg

@cgh567/agent@2.6.35

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code