@ciandt-flow/flow-ai-obs@0.15.1: Suspicious npm security report

Loading npm security reports…

@ciandt-flow/flow-ai-obs@0.15.1: Suspicious npm security report | LPM Firewall

Source & flagged code

12 flagged

package.jsonView file

Lines 1-38json

2 "name": "@ciandt-flow/flow-ai-obs",

3 "version": "0.15.1",

4 "description": "Claude Code hooks for Langfuse OTLP tracing — cross-platform",

5 "main": "dist/index.js",

6 "bin": {

7 "flow-ai-obs": "dist/cli.js",

8 "flow-ai-obs-setup": "dist/setup.js"

9 },

10 "scripts": {

11 "build": "tsup",

12 "test": "jest",

13 "typecheck": "tsc --noEmit",

14 "lint": "eslint src bin scripts",

15 "format": "prettier --write \"src/**/*.ts\" \"bin/**/*.ts\" \"scripts/**/*.ts\"",

16 "format:check": "prettier --check \"src/**/*.ts\" \"bin/**/*.ts\" \"scripts/**/*.ts\"",

17 "security-scan": "trufflehog filesystem src/ --fail --no-update --exclude-paths .trufflehogignore",

18 "postinstall": "node -e \"require('fs').existsSync('dist/setup.js') && require('child_process').execFileSync(process.execPath, ['dist/setup.js'], {stdio:'inherit'})\"",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L18

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L18

19 "prepare": "lefthook install || echo '[WARNING] lefthook install failed - git hooks not installed'",

20 "prepublishOnly": "npm run security-scan && npm run build",

21 "release:npm": "changeset publish",

22 "changeset": "changeset",

23 "version-packages": "changeset version",

24 "install:hooks": "node dist/cli.js install",

25 "auth:login": "node dist/cli.js auth login",

26 "auth:logout": "node dist/cli.js auth logout",

27 "auth:status": "node dist/cli.js auth status",

28 "smoke": "bash scripts/smoke-test.sh",

29 "smoke:debug": "bash scripts/smoke-test.sh --debug",

30 "smoke:send": "bash scripts/smoke-test.sh --send --allow-http --debug",

31 "regression": "jest --config jest.regression.config.js --forceExit",

32 "regression:update": "UPDATE_GOLDEN=1 jest --config jest.regression.config.js --forceExit"

33 },

34 "files": [

35 "dist/",

36 "README.md",

37 "LICENSE.md"

38 ],

dist/index.jsView file

Lines 1-21javascript

1'use strict';var h=require('fs'),G=require('path'),rt=require('os'),Me=require('https'),xe=require('http'

dist/cli.jsView file

Lines 1-50javascript

1#!/usr/bin/env node

2'use strict';var er=require('readline/promises'),Ms=require('https'),_=require('fs'),ke=require('os'),k=require(

dist/index.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index.js#virtual:string-array:round1View on unpkg

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "require('fs').existsSync('dist/setup.js') && require('child_process').execFileSync(process.execPath, ['dist/setup.js'], {stdio:'inherit'})"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node -e "require('fs').existsSync('dist/setup.js') && require('child_process').execFileSync(process.execPath, ['dist/setup.js'], {stdio:'inherit'})"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

1'use strict';var h=require('fs'),G=require('path'),rt=require('os'),Me=require('https'),xe=require('http'),child_process=require('child_process'),crypto=require('crypto');function ... L2: `;try{h.writeFileSync(De,e,{flag:"a"});}catch(n){process.stderr.write(`[flow-obs debug ERROR] ${n.message} L3: `);}}var v=class extends Error{statusCode;constructor(e,n=0){super(e),this.name="AuthError",this.statusCode=n;}},Be=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function He(t){if...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.main -> dist/index.js L1: 'use strict';var h=require('fs'),G=require('path'),rt=require('os'),Me=require('https'),xe=require('http'),child_process=require('child_process'),crypto=require('crypto');function ... L2: `;try{h.writeFileSync(De,e,{flag:"a"});}catch(n){process.stderr.write(`[flow-obs debug ERROR] ${n.message} L3: `);}}var v=class extends Error{statusCode;constructor(e,n=0){super(e),this.name="AuthError",this.statusCode=n;}},Be=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function He(t){if...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L1

dist/cli.jsView file

30`)+` L31: `),1}var bt=T(()=>{"use strict";ue();});function Pe(){if(process.platform==="linux"&&process.getuid?.()===0&&process.env.SUDO_USER){let t=child_process.spawnSync("getent",["passwd"... L32: `,{encoding:"utf8",mode:384});try{___namespace.chmodSync(r,384);}catch{}}finally{nn(n);}return {settingsPath:r,preserved:s}}function Z(e){if(ft===void 0)try{let r=___namespace.read...

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L30

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli.js: 'use strict';var er=require('readline/promises'),Ms=require('https'),_=require('fs'),ke=require('os'),k=require('path'),child_process=require('child_process'),ro=require('http'),En... `);}catch(i){throw r.close(),i}if(r.close(),t!==void 0)return t;throw new Error("Too many invalid attempts for yes/no prompt")}async function tr(e,t){let r=er__namespace.createInte... `);let r=child_process.spawn("npm",["install","-g",`${t}@${e}`],{detached:true,stdio:"ignore",shell:process.platform==="win32",windowsHide:true});r.on("error",()=>{}),r.unref();}as... `);}r();}}n.on("close",(i,a)=>o(i===0,a??void 0)),n.on("error",i=>o(false,i.co

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli.jsView on unpkg

1#!/usr/bin/env node L2: 'use strict';var er=require('readline/promises'),Ms=require('https'),_=require('fs'),ke=require('os'),k=require('path'),child_process=require('child_process'),ro=require('http'),En... L3: `);}catch(i){throw r.close(),i}if(r.close(),t!==void 0)return t;throw new Error("Too many invalid attempts for yes/no prompt")}async function tr(e,t){let r=er__namespace.createInte... L4: \u256D${i}\u256E ... L11: L12: `);let r=child_process.spawn("npm",["install","-g",`${t}@${e}`],{detached:true,stdio:"ignore",shell:process.platform==="win32",windowsHide:true});r.on("error",()=>{}),r.unref();}as... L13: \u256D${p}\u256E ... L30: `)+` L31: `),1}var bt=T(()=>{"use strict";ue();});function Pe(){if(process.platform==="linux"&&process.getuid?.()===0&&process.env.SUDO_USER){let t=c

dist/index.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index.js#virtual:string-array:round1View on unpkg

Source & flagged code

12 flagged

package.jsonView file

Lines 1-38json

2 "name": "@ciandt-flow/flow-ai-obs",

3 "version": "0.15.1",

4 "description": "Claude Code hooks for Langfuse OTLP tracing — cross-platform",

5 "main": "dist/index.js",

6 "bin": {

7 "flow-ai-obs": "dist/cli.js",

8 "flow-ai-obs-setup": "dist/setup.js"

9 },

10 "scripts": {

11 "build": "tsup",

12 "test": "jest",

13 "typecheck": "tsc --noEmit",

14 "lint": "eslint src bin scripts",

15 "format": "prettier --write \"src/**/*.ts\" \"bin/**/*.ts\" \"scripts/**/*.ts\"",

16 "format:check": "prettier --check \"src/**/*.ts\" \"bin/**/*.ts\" \"scripts/**/*.ts\"",

17 "security-scan": "trufflehog filesystem src/ --fail --no-update --exclude-paths .trufflehogignore",

18 "postinstall": "node -e \"require('fs').existsSync('dist/setup.js') && require('child_process').execFileSync(process.execPath, ['dist/setup.js'], {stdio:'inherit'})\"",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L18

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L18

19 "prepare": "lefthook install || echo '[WARNING] lefthook install failed - git hooks not installed'",

20 "prepublishOnly": "npm run security-scan && npm run build",

21 "release:npm": "changeset publish",

22 "changeset": "changeset",

23 "version-packages": "changeset version",

24 "install:hooks": "node dist/cli.js install",

25 "auth:login": "node dist/cli.js auth login",

26 "auth:logout": "node dist/cli.js auth logout",

27 "auth:status": "node dist/cli.js auth status",

28 "smoke": "bash scripts/smoke-test.sh",

29 "smoke:debug": "bash scripts/smoke-test.sh --debug",

30 "smoke:send": "bash scripts/smoke-test.sh --send --allow-http --debug",

31 "regression": "jest --config jest.regression.config.js --forceExit",

32 "regression:update": "UPDATE_GOLDEN=1 jest --config jest.regression.config.js --forceExit"

33 },

34 "files": [

35 "dist/",

36 "README.md",

37 "LICENSE.md"

38 ],

dist/index.jsView file

Lines 1-21javascript

1'use strict';var h=require('fs'),G=require('path'),rt=require('os'),Me=require('https'),xe=require('http'

dist/cli.jsView file

Lines 1-50javascript

1#!/usr/bin/env node

2'use strict';var er=require('readline/promises'),Ms=require('https'),_=require('fs'),ke=require('os'),k=require(

dist/index.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index.js#virtual:string-array:round1View on unpkg

@ciandt-flow/flow-ai-obs@0.15.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code