@deepseekcode/cli@1.0.13: Suspicious npm security report (Warn)

Loading npm security reports…

@deepseekcode/cli@1.0.13: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

18 flagged

web/dist/assets/SessionGrid-OuKqyYjF.jsView file

Lines 1-23javascript

1import{j as e,M as pt,P as he}from"./markdown-hmVtvQNZ.js";import{r as p,s as mt,ar as Ge,e as ee,a as X,b as Ee,au as We,X as oe,av as xt,A as te,o as be,L as le,an as ve,F as ke,aw as ye,ax as gt,D as ft,p as ht,B as bt,a5 as kt,ay as Ce,az as yt,R as ce,w as wt,$ as Nt,aA as Et,u as vt,aB as jt,ao as St,aC as At,ak as Tt,aD as _t,ai as Ct,n as It,aE as Rt,V as qe,Z as Ot,q as Lt,ag as Ft,aa as Dt}from"./icons-CjRO1znb.js";import{i as H,e as F,w as U,j as Ie,u as Q,a as J,t as W,k as P,l as $t,W as Mt,m as Pt,n as we,b as zt,o as Re,d as Ne}from"./index-CektHuu_.js";import{c as Bt,e as Ut,R ...

2`).replace(/\n{3,}/g,`

High

Child Process

Package source references child process execution.

web/dist/assets/SessionGrid-OuKqyYjF.jsView on unpkg · L1

4`);return e.jsx("div",{className:`markdown-content ${t}`,style:{wordBreak:"break-word"},children:e.jsx(pt,{components:{code({className:i,children:c,...u}){const g=/language-(\w+)/.exec(i||""),f=String(c).replace(/\n$/,"");return g&&g[1]?e.jsx(Wt,{language:g[1],code:f}):e.jsx("code",{className:"bg-dark-hover px-1.5 py-0.5 rounded text-sm font-mono text-accent-blue",...u,children:c})},a({href:i,children:c}){return e.jsx("a",{href:i,target:"_blank",rel:"noopener noreferrer",className:"text-accent-blue hover:underline",children:c})},table({children:i}){return e.jsx("div",{className:"overflow-x-aut ...

5`)){if(a.startsWith("---")||a.startsWith("+++")||a.startsWith("index ")||a.startsWith("diff --git")||a.startsWith("==="))continue;const r=a.match(/^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@/);if(r){n&&t.push(n),n={oldStart:parseInt(r[1],10),oldLines:parseInt(r[2]??"1",10),newStart:parseInt(r[3],10),newLines:parseInt(r[4]??"1",10),lines:[]};continue}if(!a.startsWith("\\")){if(n&&(a.startsWith("+")||a.startsWith("-")||a.startsWith(" ")||a==="")){n.lines.push(a);continue}n&&a&&(t.push(n),n=null)}}return n&&t.push(n),t}function Ze(s){let t=s.oldStart,n=s.newStart;const a=[];for(const r of s.lines ...

Medium

6`);let n=0,a=0,r=0;for(const l of t)l.startsWith("@@")?r++:l.startsWith("+")&&!l.startsWith("+++")?n++:l.startsWith("-")&&!l.startsWith("---")&&a++;return{additions:n,deletions:a,hunks:r,filesChanged:1}}function nn(s){const t=[],n=(r,l)=>{if(!l)return;const o=t[t.length-1];o&&o.type===r?o.text+=l:t.push({type:r,text:l})},a=(r,l)=>{if(typeof r=="string"){n(l,r);return}const o=r.type||l;if(typeof r.content=="string"){n(o,r.content);return}for(const d of r.content)a(d,o)};for(const r of s)a(r,"");return t}function Je(s,t){const n=he.languages[t];return n?nn(he.tokenize(s,n)):[{type:"",text:s}]}fu ...

7`)})]}),t.action&&e.jsxs("div",{className:"py-0.5 px-2 text-xs border-l-2 border-accent-yellow/40 bg-accent-yellow/5 rounded-r",children:[e.jsx("div",{className:"flex items-center gap-1 text-accent-yellow mb-0.5",children:"⚡ 执行"}),e.jsx("div",{className:"text-dark-text leading-snug font-mono text-[11px]",children:t.action})]}),t.toolCalls&&t.toolCalls.length>0&&t.toolCalls.map(m=>e.jsx("div",{className:"px-1 py-0.5",children:e.jsx(Ye,{toolCall:m})},m.id)),t.result&&e.jsxs("div",{className:"py-0.5 px-2 text-xs border-l-2 border-accent-green/40 bg-accent-green/5 rounded-r",children:[e.jsx("div", ...

9`)})}),e.jsx(ze,{ts:t.timestamp,align:"right",children:e.jsx(Pe,{message:t,sessionId:n,onRegenerate:a,onDeleteMessage:r})})]})});if(g)return e.jsx("div",{className:"flex justify-center animate-fade-in-up px-1 py-1",children:e.jsx("div",{className:"text-[11px] text-dark-muted bg-dark-surface border border-dark-border/60 rounded-full px-3.5 py-1 max-w-[90%] text-center",children:t.content})});const m=!t.hookApproval&&!!(t.thinking&&t.thinking.trim()||t.steps&&t.steps.length>0||t.toolCalls&&t.toolCalls.length>0);return e.jsx("div",{className:"group flex animate-fade-in-up px-1",children:e.jsxs("d ...

11`)})]}),t.toolCalls&&t.toolCalls.length>0&&!t.hookApproval&&e.jsx("div",{className:"mb-1 space-y-0.5",children:t.toolCalls.map(E=>e.jsx(Ye,{toolCall:E},E.id))})]}),t.content?e.jsx("div",{className:"leading-relaxed",children:e.jsx(qt,{content:t.content.replace(/\n{3,}/g,`

13`)})}):!t.thinking&&!t.hookApproval&&((N=t.steps)!=null&&N.length)?null:!t.thinking&&!t.hookApproval&&!((y=t.steps)!=null&&y.length)&&o?e.jsxs("div",{className:"flex items-center gap-3 py-1 text-xs text-dark-muted",children:[e.jsxs("span",{className:"flex items-center gap-1",children:[e.jsx("span",{className:"w-1.5 h-1.5 rounded-full bg-accent-blue animate-blink"}),e.jsx("span",{className:"w-1.5 h-1.5 rounded-full bg-accent-blue animate-blink",style:{animationDelay:"0.2s"}}),e.jsx("span",{className:"w-1.5 h-1.5 rounded-full bg-accent-blue animate-blink",style:{animationDelay:"0.4s"}})]}),l("ch ...

14`)}

16`:""},[k,o]),ot=p.useCallback(x=>{const h=x.clipboardData.getData("text/plain");if(x.clipboardData.files&&x.clipboardData.files.length>0){x.preventDefault(),K(x.clipboardData.files);return}if(!h||!Cn(h))return;x.preventDefault();const{label:w}=In(h),C=g.current;if(!C)return;const v=C.selectionStart,j=C.selectionEnd,_=C.value,M=_.slice(0,v)+w+_.slice(j);B(M),requestAnimationFrame(()=>{C.selectionStart=C.selectionEnd=v+w.length})},[B,K]),ae=p.useCallback(async()=>{let h=Rn(d);const w=[],C=T.current;for(const Z of C){const L=`@${Z}`;h.includes(L)&&(h=h.split(L).join(""),w.push(Z))}h=h.replace(/[ ...

17`).trim(),S(!1);const v=h,j=k.length>0;if(!v&&!j)return;let _="";if(j){if(k.some(Z=>Z.uploading)){W.warning(o("fileJob.stillUploading"));return}_=await Te()}const M=(_+h).trim();!M&&!j||(n(M||_.trim(),w.length>0?w:void 0),B(""),N([]),T.current=new Set)},[d,k,n,B,Te,o]),lt=p.useCallback(x=>{if(!x.nativeEvent.isComposing){if(b&&I.length>0){if(x.key==="ArrowDown"){x.preventDefault(),G(h=>(h+1)%I.length);return}if(x.key==="ArrowUp"){x.preventDefault(),G(h=>(h-1+I.length)%I.length);return}if(x.key==="Enter"&&!x.shiftKey&&!x.ctrlKey&&!x.metaKey){const h=I[D];h&&(x.preventDefault(),pe(h));return}if(x ...

18 resize-none focus:outline-none min-h-[44px] max-h-[40vh] leading-relaxed

19 disabled:opacity-50 disabled:cursor-not-allowed`}),e.jsxs("div",{className:"flex items-center gap-2 px-2.5 pb-2.5",children:[e.jsx(jn,{}),e.jsx("span",{className:"text-[11px] text-dark-muted/80 font-mono truncate max-w-[10rem] hidden sm:block",children:ue||""}),e.jsx("div",{className:"flex-1"}),$>0&&d.length>0&&e.jsxs("span",{className:`text-[10px] tabular-nums ${_e?"text-accent-red font-medium":"text-dark-muted/60"}`,children:["~",$," tokens",_e?` · ${o("chat.nearLimit")}`:""]}),!c&&e.jsx("button",{onClick:()=>void nt(),className:"flex h-8 w-8 items-center justify-center ...

20 hover:opacity-80 active:scale-95 disabled:opacity-25 disabled:cursor-not-allowed`,title:o("chat.sendBtn"),"aria-label":o("chat.sendBtn"),children:e.jsx(It,{size:15,"aria-hidden":"true"})})]})]}),e.jsxs("div",{className:"mt-1.5 hidden sm:flex items-center justify-center gap-3 text-[10px] text-dark-muted/50 select-none",children:[e.jsx("span",{children:o("chat.shiftEnter")}),e.jsx("span",{"aria-hidden":"true",children:"·"}),e.jsx("span",{children:o("chat.escHint")})]})]})}),Un=p.memo(function(){const{t}=F(),[n,a]=p.useState(0),[r,l]=p.useState(0),o=p.useCallback(()=>{con ...

21 ${n?"ring-1 ring-accent-blue":"hover:border-dark-muted/40"}

22 ${t.status==="running"?"border-l-2 border-l-accent-blue":"border-l-2 border-l-transparent"}`,children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx(Wn,{status:t.status}),e.jsxs("div",{className:"flex-1 min-w-0",children:[e.jsxs("div",{className:"flex items-center gap-1.5",children:[e.jsx("span",{className:"text-xs text-dark-text truncate",children:t.title}),e.jsx("span",{className:`text-[10px] ${r.color} shrink-0`,children:r.label})]}),e.jsxs("div",{className:"flex items-center gap-2 text-[10px] text-dark-muted",children:[e.jsx("span",{children:t.agentType||t.sourc ...

Long lines were clipped for display.

dist/cli.jsView file

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as MU8}from"node:module";var VU8=Object.create;var WU8=Object.getPrototypeOf;var jE=Object.defineProperty;var OU8=Object.getOwnPropertyNames;var $U8=Object.pro... L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/cli.jsView on unpkg · L1

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L1

Source & flagged code

18 flagged · loading source

web/dist/assets/SessionGrid-OuKqyYjF.jsView file

1import{j as e,M as pt,P as he}from"./markdown-hmVtvQNZ.js";import{r as p,s as mt,ar as Ge,e as ee,a as X,b as Ee,au as We,X as oe,av as xt,A as te,o as be,L as le,an as ve,F as ke,... L2: `).replace(/\n{3,}/g,`

High

Child Process

Package source references child process execution.

web/dist/assets/SessionGrid-OuKqyYjF.jsView on unpkg · L1

3L4: `);return e.jsx("div",{className:`markdown-content ${t}`,style:{wordBreak:"break-word"},children:e.jsx(pt,{components:{code({className:i,children:c,...u}){const g=/language-(\w+)/.... L5: `)){if(a.startsWith("---")||a.startsWith("+++")||a.startsWith("index ")||a.startsWith("diff --git")||a.startsWith("==="))continue;const r=a.match(/^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

web/dist/assets/SessionGrid-OuKqyYjF.jsView on unpkg · L3

dist/cli.jsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/cli.jsView on unpkg · L1

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L1

89L90: [truncated]`:K,path:this.relative(J),size:Og8(J).size,truncated:X}}fileTree(z=".",D=2,J=200){const K=this.resolve(z);let X=0;const q=(Y,G)=>{X+=1;const Z=Hg8(Y);const H=this.relati... L91: })`,{filename:"workflow-script.js"});const q=X.runInContext(K,{timeout:1000});const Y=await q(J);if(!Y){return YW({title:D.message||"Workflow",description:D.message||"Workflow",goa... ... L93: `)}const X=this.getPrimitive(z);if(X?.kind==="agent"){return await this.executeAgentPrimitive(X,z,D)}if(X?.kind==="tool"){return await this.executeToolPrimitive(X,z,D)}const q=this... L94: `)}const G=this.evalExpression(Y,this.expressionContext(D,K),D,z);let Z;const H=q.cases&&typeof q.cases==="object"?q.cases:undefined;if(H){const V=H[String(G)];if(typeof V==="strin... L95: `)} L96: `}function aw(z){if(

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/cli.jsView on unpkg · L89

552`,"utf-8")}catch{for(const D of z){try{process.stderr.write(D+` L553: `)}catch{}}}}destroy(){this.destroyed=true;if(this.flushTimer){clearInterval(this.flushTimer);this.flushTimer=null}this.flushSync()}ensureDir(){if(!ji8(this.dir)){Qi8(this.dir,{rec... L554: `)){const Y=q.lastIndexOf(` ... L561: ${z}`}renderSkillPrompt(z){const D=[`[Skill: ${z.name}]`,z.description?`Description: ${z.description}`:"",z.systemPrompt];return D.filter(Boolean).join(` L562: `)}}function bb(){return[{id:"code-review",name:"Code Review",description:"Review code changes for correctness, security, and best practices",enabled:true,category:"Development",ic... L563: `)+` L564: `;Dn8(this.filePath,z);this.buffer.length=0}catch{}}}function nb(z){const D=Number(process.env.DEEPSEEKCODE_PERMISSION_TIMEOUT_MS);if(N

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/cli.jsView on unpkg · L552

1Trigger-reachable chain: scripts.start -> dist/cli.js L1: #!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as MU8}from"node:module";var VU8=Object.create;var WU8=Object.getPrototypeOf;var jE=Object.defineProperty;var OU8=Object.getOwnPropertyNames;var $U8=Object.pro... L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function q8(W,O){if(typeo

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L1

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/cli.jsView on unpkg · L1

2if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L52: `+w.slice(Z8+1)}else{O8+=w.slice(D8)}return O8.slice(1)}function t8(w){let m="";let r=0;for(let a=0;a<w.length;r>=65536?a+=2:a++){r=f6(w,a);const D8=c[r];if(!D8&&R6(r)){m+=w[a];if(... L53: `;return""}FT.dump=Y8;return FT}function Tv8(){if(At)return J4;At=1;const z=Rv8();const D=Pv8();function J(K,X){return function(){throw new Error("Function yaml."+K+" is removed in... L54: ${D.slice(0,200)}`}return D.slice(0,200)||null}if(D&&D.length>0){return

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/cli.jsView on unpkg · L2

1Trigger-reachable credential exfiltration chain: scripts.start -> dist/cli.js L1: #!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as MU8}from"node:module";var VU8=Object.create;var WU8=Object.getPrototypeOf;var jE=Object.defineProperty;var OU8=Object.getOwnPropertyNames;var $U8=Object.pro... L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}f

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/cli.jsView on unpkg · L1

89Trigger-reachable command-output exfiltration chain: scripts.start -> dist/cli.js L89: L90: [truncated]`:K,path:this.relative(J),size:Og8(J).size,truncated:X}}fileTree(z=".",D=2,J=200){const K=this.resolve(z);let X=0;const q=(Y,G)=>{X+=1;const Z=Hg8(Y);const H=this.relati... L91: })`,{filename:"workflow-script.js"});const q=X.runInContext(K,{timeout:1000});const Y=await q(J);if(!Y){return YW({title:D.message||"Workflow",description:D.message||"Workflow",goa... ... L93: `)}const X=this.getPrimitive(z);if(X?.kind==="agent"){return await this.executeAgentPrimitive(X,z,D)}if(X?.kind==="tool"){return await this.executeToolPrimitive(X,z,D)}const q=this... L94: `)}const G=this.evalExpression(Y,this.expressionContext(D,K),D,z);let Z;const H=q.cases&&typeof q.cases==="object"?q.cases:undefined;if(

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/cli.jsView on unpkg · L89

1Trigger-reachable persistence chain: scripts.start -> dist/cli.js L1: #!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as MU8}from"node:module";var VU8=Object.create;var WU8=Object.getPrototypeOf;var jE=Object.defineProperty;var OU8=Object.getOwnPropertyNames;var $U8=Object.pro... L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function q8(W

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/cli.jsView on unpkg · L1

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli.jsView on unpkg

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/cli.jsView on unpkg · L1

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli.jsView on unpkg · L1

•path = dist/cli.js kind = oversized_source_file sizeBytes = 6294237 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.jsView on unpkg

•path = dist/cli.js kind = oversized_cli_entrypoint sizeBytes = 6294237 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.jsView on unpkg

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli.jsView on unpkg · L1

Source & flagged code

18 flagged

web/dist/assets/SessionGrid-OuKqyYjF.jsView file

Lines 1-23javascript

2`).replace(/\n{3,}/g,`

High

Child Process

Package source references child process execution.

web/dist/assets/SessionGrid-OuKqyYjF.jsView on unpkg · L1

Medium

14`)}

18 resize-none focus:outline-none min-h-[44px] max-h-[40vh] leading-relaxed

21 ${n?"ring-1 ring-accent-blue":"hover:border-dark-muted/40"}

Long lines were clipped for display.

dist/cli.jsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/cli.jsView on unpkg · L1

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L1

@deepseekcode/cli@1.0.13

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code