@cotal-ai/connector-opencode@0.54.0: Suspicious npm security | LPM Firewall

Loading npm security reports…

@cotal-ai/connector-opencode@0.54.0: Suspicious npm security | LPM Firewall

Source & flagged code

7 flagged · loading source

dist/serve.jsView file

1// src/serve.ts L2: import { execFileSync, spawn } from "node:child_process"; L3: import { createServer } from "node:net"; L4: import { once } from "node:events"; ... L8: function resolveOpencodeBin() { L9: const override = process.env.COTAL_OPENCODE_BIN?.trim() || process.env.COTAL_OPENCODE_RESOLVED_BIN?.trim(); L10: if (override) return override; L11: if (process.platform !== "win32") return "opencode"; L12: for (const dir of (process.env.PATH ?? "").split(delimiter)) { ... L31: async function killServe(serve) { L32: if (serve.exitCode !== null || serve.signalCode !== null) return; L33: serve.kill("SIGTERM");

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

dist/serve.jsView on unpkg · L1

1// src/serve.ts L2: import { execFileSync, spawn } from "node:child_process"; L3: import { createServer } from "node:net";

High

Child Process

Package source references child process execution.

dist/serve.jsView on unpkg · L1

1// src/serve.ts L2: import { execFileSync, spawn } from "node:child_process"; L3: import { createServer } from "node:net"; L4: import { once } from "node:events"; ... L8: function resolveOpencodeBin() { L9: const override = process.env.COTAL_OPENCODE_BIN?.trim() || process.env.COTAL_OPENCODE_RESOLVED_BIN?.trim(); L10: if (override) return override;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/serve.jsView on unpkg · L1

1// src/serve.ts L2: import { execFileSync, spawn } from "node:child_process"; L3: import { createServer } from "node:net"; L4: import { once } from "node:events"; ... L8: function resolveOpencodeBin() { L9: const override = process.env.COTAL_OPENCODE_BIN?.trim() || process.env.COTAL_OPENCODE_RESOLVED_BIN?.trim(); L10: if (override) return override; L11: if (process.platform !== "win32") return "opencode"; L12: for (const dir of (process.env.PATH ?? "").split(delimiter)) { ... L31: async function killServe(serve) { L32: if (serve.exitCode !== null || serve.signalCode !== null) return; L33: serve.kill("SIGTERM");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/serve.jsView on unpkg · L1

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @cotal-ai/connector-opencode@0.50.1 matchedIdentity = npm:[redacted]:0.50.1 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

7Cross-file remote execution chain: dist/index.js spawns dist/plugin.bundle.js; helper contains network access plus dynamic code execution. L7: // src/extension.ts L8: import { execFileSync } from "node:child_process"; L9: import { fileURLToPath } from "node:url"; ... L29: import { createHash, randomBytes } from "node:crypto"; L30: var SUN_PATH_MAX_BYTES = process.platform === "darwin" ? 104 : 108; L31: function controlEndpoint(space, name, token = randomBytes(32).toString("base64url")) { L32: const id = createHash("sha256").update(`${space}\0${name}\0${process.pid}\0${token}`).digest("base64url").slice(0, 32); ... L120: const sourceKey = /* @__PURE__ */ new Map(); L121: for (const k of Object.keys(process.env)) L122: sourceKey.set(k.toLowerCase(), k); ... L1815: error: new (_Err ?? $ZodErr

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L7

dist/plugin.bundle.jsView file

•matchType = normalized_sha256 matchedPackage = @cotal-ai/connector-opencode@0.29.0 matchedPath = dist/plugin.bundle.js matchedIdentity = npm:[redacted]:0.29.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/plugin.bundle.jsView on unpkg

Source & flagged code

7 flagged

dist/serve.jsView file

Lines 1-21javascript

1// src/serve.ts

2import { execFileSync, spawn } from "node:child_process";

3import { createServer } from "node:net";

High

Child Process

Package source references child process execution.

dist/serve.jsView on unpkg · L1

4import { once } from "node:events";

5import { randomBytes } from "node:crypto";

6import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";

7import { delimiter, join } from "node:path";

8function resolveOpencodeBin() {

9 const override = process.env.COTAL_OPENCODE_BIN?.trim() || process.env.COTAL_OPENCODE_RESOLVED_BIN?.trim();

10 if (override) return override;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/serve.jsView on unpkg · L1

11 if (process.platform !== "win32") return "opencode";

12 for (const dir of (process.env.PATH ?? "").split(delimiter)) {

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

dist/serve.jsView on unpkg · L1

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/serve.jsView on unpkg · L1

13 if (!dir) continue;

14 for (const exe of [join(dir, "opencode.exe"), join(dir, "node_modules", "opencode-ai", "bin", "opencode.exe")]) {

15 if (existsSync(exe)) return exe;

16 }

17 }

18 return "opencode";

19}

20var BIN = resolveOpencodeBin();

21var USERNAME = "opencode";

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @cotal-ai/connector-opencode@0.50.1 matchedIdentity = npm:[redacted]:0.50.1 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

7Cross-file remote execution chain: dist/index.js spawns dist/plugin.bundle.js; helper contains network access plus dynamic code execution. L7: // src/extension.ts L8: import { execFileSync } from "node:child_process"; L9: import { fileURLToPath } from "node:url"; ... L29: import { createHash, randomBytes } from "node:crypto"; L30: var SUN_PATH_MAX_BYTES = process.platform === "darwin" ? 104 : 108; L31: function controlEndpoint(space, name, token = randomBytes(32).toString("base64url")) { L32: const id = createHash("sha256").update(`${space}\0${name}\0${process.pid}\0${token}`).digest("base64url").slice(0, 32); ... L120: const sourceKey = /* @__PURE__ */ new Map(); L121: for (const k of Object.keys(process.env)) L122: sourceKey.set(k.toLowerCase(), k); ... L1815: error: new (_Err ?? $ZodErr

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L7

dist/plugin.bundle.jsView file

•matchType = normalized_sha256 matchedPackage = @cotal-ai/connector-opencode@0.29.0 matchedPath = dist/plugin.bundle.js matchedIdentity = npm:[redacted]:0.29.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/plugin.bundle.jsView on unpkg