@codex-ultra/cxu@0.2.41: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@codex-ultra/cxu@0.2.41: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node dist/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node dist/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/postinstall.jsView file

1import{spawnSync as w}from"node:child_process";import{chmodSync as k,copyFileSync as p,existsSync as o,mkdirSync as m,statSync as h,writeFileSync as B}from"node:fs";import{createRe...

High

Child Process

Package source references child process execution.

dist/postinstall.jsView on unpkg · L1

1import{spawnSync as w}from"node:child_process";import{chmodSync as k,copyFileSync as p,existsSync as o,mkdirSync as m,statSync as h,writeFileSync as B}from"node:fs";import{createRe...

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/postinstall.jsView on unpkg · L1

dist/index.jsView file

1Install-time code directly mutates a foreign AI-agent control surface: L1: (function(_0x1d44b9,_0x379ce7){function _0x16a719(_0x453a20,_0x52b4d8,_0x5b0243,_0x2d359a){return _0x4b8c(_0x52b4d8-0x34c,_0x2d359a);}const _0x2ea0b7=_0x1d44b9();function _0x1c611a... Write operation from dist/postinstall.js: L1: import{spawnSync as w}from"node:child_process";import{chmodSync as k,copyFileSync as p,existsSync as o,mkdirSync as m,statSync as h,writeFileSync as B}from"node:fs";import{createRe... Foreign user/project scope from dist/postinstall.js: L1: import{spawnSync as w}from"node:child_process";import{chmodSync as k,copyFileSync as p,existsSync as o,mkdirSync as m,statSync as h,writeFileSync as B}from"node:fs";import{createRe...

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/index.jsView on unpkg · L1

1(function(_0x1d44b9,_0x379ce7){function _0x16a719(_0x453a20,_0x52b4d8,_0x5b0243,_0x2d359a){return _0x4b8c(_0x52b4d8-0x34c,_0x2d359a);}const _0x2ea0b7=_0x1d44b9();function _0x1c611a...

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L1

1(function(_0x1d44b9,_0x379ce7){function _0x16a719(_0x453a20,_0x52b4d8,_0x5b0243,_0x2d359a){return _0x4b8c(_0x52b4d8-0x34c,_0x2d359a);}const _0x2ea0b7=_0x1d44b9();function _0x1c611a...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

server-bundle/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @codex-ultra/cxu@0.2.34 matchedIdentity = npm:QGNvZGV4LXVsdHJhL2N4dQ:0.2.34 similarity = 0.429 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

server-bundle/index.jsView on unpkg

1Cross-file remote execution chain: server-bundle/index.js spawns dist/index.js; helper contains network access plus dynamic code execution. L1: var y_=Object.create;var aR=Object.defineProperty;var E_=Object.getOwnPropertyDescriptor;var J_=Object.getOwnPropertyNames;var C_=Object.getPrototypeOf,A_=Object.prototype.hasOwnPr... L2: `,G===l&&(t+=" ".repeat(c+e+2),t+=`^ ... L8: `||e==="\r"&&I[b+1]===` L9: `))a=a&&3;else{if(e<" "&&e!==" "||e==="\x7F")throw new zI("control characters are not allowed in strings",{toml:I,ptr:b});if((!a||a===3)&&e===n&&(!c||I[b+1]===n&&I[b+2]===n))return... L10: `;else if(e==="f")G+="\f";else if(e==="r")G+="\r";else if(e==="e")G+="\x1B";else if(e==='"')G+='"';else if(e==="\\")G+="\\";else throw new zI("unrecognized escape sequence",{toml:I... ... L29: `?n+` L30: `:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

server-bundle/index.jsView on unpkg · L1

wasm/tree-sitter.wasmView file

•path = wasm/tree-sitter.wasm kind = wasm_module sizeBytes = 205488 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

wasm/tree-sitter.wasmView on unpkg

web-dist/assets/main-qd5fv87v.jsView file

•path = web-dist/assets/main-qd5fv87v.js kind = oversized_source_file sizeBytes = 9135206 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

web-dist/assets/main-qd5fv87v.jsView on unpkg

Source & flagged code

13 flagged

package.jsonView file

Lines 12-52json

12 }

13 },

14 "bin": {

15 "cxu": "dist/cli.js"

16 },

17 "files": [

18 "dist",

19 "wasm",

20 "web-dist",

21 "server-bundle",

22 "extensions",

23 "README.md",

24 "LICENSE"

25 ],

26 "scripts": {

27 "vendor": "node scripts/vendor-sa-vm.mjs",

28 "build": "node scripts/build.mjs",

29 "build:bun": "bun scripts/build.mjs",

30 "obfuscate": "node scripts/obfuscate.mjs",

31 "typecheck": "tsc -p tsconfig.json --noEmit",

32 "postinstall": "node dist/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L32

33 "prepack": "npm run build && npm run obfuscate",

34 "test": "bun test test/ 2>/dev/null || node --test test/*.test.mjs"

35 },

36 "publishConfig": {

37 "access": "public"

38 },

39 "dependencies": {

40 "tree-sitter-wasms": "^0.1.13",

41 "web-tree-sitter": "0.25.10"

42 },

43 "devDependencies": {

44 "esbuild": "^0.25.12",

45 "javascript-obfuscator": "^5.5.0",

46 "typescript": "^5.9.3"

47 },

48 "engines": {

49 "node": ">=18"

50 },

51 "license": "MIT",

52 "homepage": "https://github.com/layola13/codex-ultra#readme",

dist/postinstall.jsView file

Lines 1-2javascript

1import{spawnSync as w}from"node:child_process";import{chmodSync as k,copyFileSync as p,existsSync as o,mkdirSync as m,statSync as h,writeFileSync as B}from"node:fs";import{createRequire as j}

dist/index.jsView file

1Install-time code directly mutates a foreign AI-agent control surface: L1: (function(_0x1d44b9,_0x379ce7){function _0x16a719(_0x453a20,_0x52b4d8,_0x5b0243,_0x2d359a){return _0x4b8c(_0x52b4d8-0x34c,_0x2d359a);}const _0x2ea0b7=_0x1d44b9();function _0x1c611a... Write operation from dist/postinstall.js: L1: import{spawnSync as w}from"node:child_process";import{chmodSync as k,copyFileSync as p,existsSync as o,mkdirSync as m,statSync as h,writeFileSync as B}from"node:fs";import{createRe... Foreign user/project scope from dist/postinstall.js: L1: import{spawnSync as w}from"node:child_process";import{chmodSync as k,copyFileSync as p,existsSync as o,mkdirSync as m,statSync as h,writeFileSync as B}from"node:fs";import{createRe...

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/index.jsView on unpkg · L1

1(function(_0x1d44b9,_0x379ce7){function _0x16a719(_0x453a20,_0x52b4d8,_0x5b0243,_0x2d359a){return _0x4b8c(_0x52b4d8-0x34c,_0x2d359a);}const _0x2ea0b7=_0x1d44b9();function _0x1c611a...

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L1

1(function(_0x1d44b9,_0x379ce7){function _0x16a719(_0x453a20,_0x52b4d8,_0x5b0243,_0x2d359a){return _0x4b8c(_0x52b4d8-0x34c,_0x2d359a);}const _0x2ea0b7=_0x1d44b9();function _0x1c611a...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

server-bundle/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @codex-ultra/cxu@0.2.34 matchedIdentity = npm:QGNvZGV4LXVsdHJhL2N4dQ:0.2.34 similarity = 0.429 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

server-bundle/index.jsView on unpkg

1Cross-file remote execution chain: server-bundle/index.js spawns dist/index.js; helper contains network access plus dynamic code execution. L1: var y_=Object.create;var aR=Object.defineProperty;var E_=Object.getOwnPropertyDescriptor;var J_=Object.getOwnPropertyNames;var C_=Object.getPrototypeOf,A_=Object.prototype.hasOwnPr... L2: `,G===l&&(t+=" ".repeat(c+e+2),t+=`^ ... L8: `||e==="\r"&&I[b+1]===` L9: `))a=a&&3;else{if(e<" "&&e!==" "||e==="\x7F")throw new zI("control characters are not allowed in strings",{toml:I,ptr:b});if((!a||a===3)&&e===n&&(!c||I[b+1]===n&&I[b+2]===n))return... L10: `;else if(e==="f")G+="\f";else if(e==="r")G+="\r";else if(e==="e")G+="\x1B";else if(e==='"')G+='"';else if(e==="\\")G+="\\";else throw new zI("unrecognized escape sequence",{toml:I... ... L29: `?n+` L30: `:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

server-bundle/index.jsView on unpkg · L1

wasm/tree-sitter.wasmView file

•path = wasm/tree-sitter.wasm kind = wasm_module sizeBytes = 205488 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

wasm/tree-sitter.wasmView on unpkg

web-dist/assets/main-qd5fv87v.jsView file

•path = web-dist/assets/main-qd5fv87v.js kind = oversized_source_file sizeBytes = 9135206 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

web-dist/assets/main-qd5fv87v.jsView on unpkg