@cotal-ai/connector-opencode@0.63.0: Suspicious npm security | LPM Firewall

Loading npm security reports…

@cotal-ai/connector-opencode@0.63.0: Suspicious npm security | LPM Firewall

Source & flagged code

7 flagged · loading source

dist/serve.jsView file

1// src/serve.ts L2: import { execFileSync, spawn } from "node:child_process"; L3: import { createServer } from "node:net"; L4: import { once } from "node:events"; ... L20: function resolveOpencodeBin() { L21: const override = process.env.COTAL_OPENCODE_BIN?.trim() || process.env.COTAL_OPENCODE_RESOLVED_BIN?.trim(); L22: if (override) return override; L23: if (process.platform !== "win32") return "opencode"; L24: for (const dir of (process.env.PATH ?? "").split(delimiter)) { ... L43: async function killServe(serve) { L44: if (serve.exitCode !== null || serve.signalCode !== null) return; L45: serve.kill("SIGTERM");

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

dist/serve.jsView on unpkg · L1

1// src/serve.ts L2: import { execFileSync, spawn } from "node:child_process"; L3: import { createServer } from "node:net";

High

Child Process

Package source references child process execution.

dist/serve.jsView on unpkg · L1

84async function main() { L85: const port = process.env.COTAL_OPENCODE_PORT?.trim() || String(await freePort()); L86: const url = `http://127.0.0.1:${port}`; L87: const name = process.env.COTAL_NAME?.trim() || "agent"; ... L98: } L99: const versionRaw = execFileSync(BIN, ["--version"], { encoding: "utf8" }).trim(); L100: const line = opencodeLine(versionRaw, BIN);

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/serve.jsView on unpkg · L84

1// src/serve.ts L2: import { execFileSync, spawn } from "node:child_process"; L3: import { createServer } from "node:net"; L4: import { once } from "node:events"; ... L20: function resolveOpencodeBin() { L21: const override = process.env.COTAL_OPENCODE_BIN?.trim() || process.env.COTAL_OPENCODE_RESOLVED_BIN?.trim(); L22: if (override) return override; L23: if (process.platform !== "win32") return "opencode"; L24: for (const dir of (process.env.PATH ?? "").split(delimiter)) { ... L43: async function killServe(serve) { L44: if (serve.exitCode !== null || serve.signalCode !== null) return; L45: serve.kill("SIGTERM");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/serve.jsView on unpkg · L1

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @cotal-ai/connector-opencode@0.61.0 matchedIdentity = npm:[redacted]:0.61.0 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

7Cross-file remote execution chain: dist/index.js spawns dist/plugin/index.js; helper contains network access plus dynamic code execution. L7: // src/extension.ts L8: import { execFileSync } from "node:child_process"; L9: import { fileURLToPath } from "node:url"; ... L25: import { createHash, randomBytes } from "node:crypto"; L26: var SUN_PATH_MAX_BYTES = process.platform === "darwin" ? 104 : 108; L27: function controlEndpoint(space, name, token = randomBytes(32).toString("base64url")) { L28: const id = createHash("sha256").update(`${space}\0${name}\0${process.pid}\0${token}`).digest("base64url").slice(0, 32); ... L116: const sourceKey = /* @__PURE__ */ new Map(); L117: for (const k of Object.keys(process.env)) L118: sourceKey.set(k.toLowerCase(), k); ... L1811: error: new (_Err ?? $ZodErro

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L7

dist/plugin/index.jsView file

•matchType = normalized_sha256 matchedPackage = @cotal-ai/connector-opencode@0.29.0 matchedPath = dist/plugin.bundle.js matchedIdentity = npm:[redacted]:0.29.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/plugin/index.jsView on unpkg

Source & flagged code

7 flagged

dist/serve.jsView file

Lines 1-21javascript

1// src/serve.ts

2import { execFileSync, spawn } from "node:child_process";

3import { createServer } from "node:net";

High

Child Process

Package source references child process execution.

dist/serve.jsView on unpkg · L1

4import { once } from "node:events";

5import { randomBytes } from "node:crypto";

6import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";

7import { delimiter, join } from "node:path";

8

9// src/opencode-line.ts

10function opencodeLine(raw, bin) {

11 const m = raw.match(/(?:^|v)(\d+)\.\d+/);

12 const major = m ? Number(m[1]) : NaN;

13 if (major === 1 || major === 2) return major;

14 throw new Error(

15 `opencode connector: unsupported OpenCode version "${raw}" from ${bin}; this connector supports the 1.x (opencode-ai) and 2.x (@opencode/cli) lines`

16 );

17}

18

19// src/serve.ts

20function resolveOpencodeBin() {

21 const override = process.env.COTAL_OPENCODE_BIN?.trim() || process.env.COTAL_OPENCODE_RESOLVED_BIN?.trim();

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

dist/serve.jsView on unpkg · L1

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/serve.jsView on unpkg · L1

Lines 64-104javascript

64 }

65 return execFileSync("ps", ["-p", String(pid), "-o", "command="], {

66 encoding: "utf8",

67 stdio: ["ignore", "pipe", "ignore"]

68 }).

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @cotal-ai/connector-opencode@0.61.0 matchedIdentity = npm:[redacted]:0.61.0 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

7Cross-file remote execution chain: dist/index.js spawns dist/plugin/index.js; helper contains network access plus dynamic code execution. L7: // src/extension.ts L8: import { execFileSync } from "node:child_process"; L9: import { fileURLToPath } from "node:url"; ... L25: import { createHash, randomBytes } from "node:crypto"; L26: var SUN_PATH_MAX_BYTES = process.platform === "darwin" ? 104 : 108; L27: function controlEndpoint(space, name, token = randomBytes(32).toString("base64url")) { L28: const id = createHash("sha256").update(`${space}\0${name}\0${process.pid}\0${token}`).digest("base64url").slice(0, 32); ... L116: const sourceKey = /* @__PURE__ */ new Map(); L117: for (const k of Object.keys(process.env)) L118: sourceKey.set(k.toLowerCase(), k); ... L1811: error: new (_Err ?? $ZodErro

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L7

dist/plugin/index.jsView file

•matchType = normalized_sha256 matchedPackage = @cotal-ai/connector-opencode@0.29.0 matchedPath = dist/plugin.bundle.js matchedIdentity = npm:[redacted]:0.29.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/plugin/index.jsView on unpkg