@deepseekcode/cli@1.0.2: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@deepseekcode/cli@1.0.2: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

15 flagged · loading source

dist/cli.jsView file

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/cli.jsView on unpkg · L1

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V,$){if(typeof V==="object"&&V!==null){var B=fp.get(V);if(B!==undef

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L1

106L107: [truncated]`:X,path:this.relative(J),size:Kf8(J).size,truncated:K}}fileTree(D=".",z=2,J=200){const X=this.resolve(D);let K=0;const q=(Y,G)=>{K+=1;const Z=zf8(Y);const H=this.relati... L108: })`,{filename:"workflow-script.js"});const q=K.runInContext(X,{timeout:1000});const Y=await q(J);if(!Y){return TO({title:z.message||"Workflow",description:z.message||"Workflow",goa... ... L110: `)}const K=this.getPrimitive(D);if(K?.kind==="agent"){return await this.executeAgentPrimitive(K,D,z)}if(K?.kind==="tool"){return await this.executeToolPrimitive(K,D,z)}const q=this... L111: `)}const G=this.evalExpression(Y,this.expressionContext(z,X),z,D);let Z;const H=q.cases&&typeof q.cases==="object"?q.cases:undefined;if(H){const W=H[String(G)];if(typeof W==="strin... L112: `)} L113: `}function _T

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/cli.jsView on unpkg · L106

536`)){const Y=q.lastIndexOf(` L537: `);if(Y>=0){const G=q.slice(0,Y+1);const Z=q.slice(Y+1);this.contentBuffers.set(J,Z);D.send(z,G).catch((H)=>kW.error(`发送流式内容失败 [${D.channelId}->${z}]: ${H instanceof Error?H.messag... L538: `)){const X=J.trim();if(!X||X.startsWith("#"))continue;const K=X.indexOf(":");if(K===-1)continue;const q=X.slice(0,K).trim();let Y=X.slice(K+1).trim();if(typeof Y==="string"&&Y.sta... ... L543: ${D}`}renderSkillPrompt(D){const z=[`[Skill: ${D.name}]`,D.description?`Description: ${D.description}`:"",D.systemPrompt];return z.filter(Boolean).join(` L544: `)}}function Xv(){return[{id:"code-review",name:"Code Review",description:"Review code changes for correctness, security, and best practices",enabled:true,category:"Development",ic... L545: `)+` L546: `;qu8(this.file

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/cli.jsView on unpkg · L536

1Trigger-reachable chain: scripts.start -> dist/cli.js L1: #!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V,$){if(typeo

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L1

2if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module';

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L2

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V,$){if(typeof V==="object"&&V!==null){var B=fp.get(V);if(B!==undef

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/cli.jsView on unpkg · L1

2if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L52: `+w.slice(g+1)}else{x+=w.slice(a)}return x.slice(1)}function Y8(w){let u="";let z8=0;for(let r=0;r<w.length;z8>=65536?r+=2:r++){z8=j6(w,r);const a=l[z8];if(!a&&B6(z8)){u+=w[r];if(z... L53: `;return""}YP.dump=q8;return YP}function nP8(){if(sr)return n0;sr=1;const D=dP8();const z=iP8();function J(X,K){return function(){throw new Error("Function yaml."+X+" is removed in... L54: ${z.slice(0,200)}`}return z.slice(0,200)||null}if(z&&z.length>0){return

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/cli.jsView on unpkg · L2

1Trigger-reachable credential exfiltration chain: scripts.start -> dist/cli.js L1: #!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}f

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/cli.jsView on unpkg · L1

106Trigger-reachable command-output exfiltration chain: scripts.start -> dist/cli.js L106: L107: [truncated]`:X,path:this.relative(J),size:Kf8(J).size,truncated:K}}fileTree(D=".",z=2,J=200){const X=this.resolve(D);let K=0;const q=(Y,G)=>{K+=1;const Z=zf8(Y);const H=this.relati... L108: })`,{filename:"workflow-script.js"});const q=K.runInContext(X,{timeout:1000});const Y=await q(J);if(!Y){return TO({title:z.message||"Workflow",description:z.message||"Workflow",goa... ... L110: `)}const K=this.getPrimitive(D);if(K?.kind==="agent"){return await this.executeAgentPrimitive(K,D,z)}if(K?.kind==="tool"){return await this.executeToolPrimitive(K,D,z)}const q=this... L111: `)}const G=this.evalExpression(Y,this.expressionContext(z,X),z,D);let Z;const H=q.cases&&typeof q.cases==="object"?q.cases:undefine

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/cli.jsView on unpkg · L106

1Trigger-reachable persistence chain: scripts.start -> dist/cli.js L1: #!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/cli.jsView on unpkg · L1

2if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module';

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L2

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V,$){if(typeof V==="object"&&V!==null){var B=fp.get(V);if(B!==undef

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/cli.jsView on unpkg · L1

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V,$){if(typeof V==="object"&&V!==null){var B=fp.get(V);if(B!==undef

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli.jsView on unpkg · L1

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V,$){if(typeof V==="object"&&V!==null){var B=fp.get(V);if(B!==undef

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli.jsView on unpkg · L1

Source & flagged code

15 flagged

dist/cli.jsView file

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/cli.jsView on unpkg · L1

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V,$){if(typeof V==="object"&&V!==null){var B=fp.get(V);if(B!==undef

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L1

106L107: [truncated]`:X,path:this.relative(J),size:Kf8(J).size,truncated:K}}fileTree(D=".",z=2,J=200){const X=this.resolve(D);let K=0;const q=(Y,G)=>{K+=1;const Z=zf8(Y);const H=this.relati... L108: })`,{filename:"workflow-script.js"});const q=K.runInContext(X,{timeout:1000});const Y=await q(J);if(!Y){return TO({title:z.message||"Workflow",description:z.message||"Workflow",goa... ... L110: `)}const K=this.getPrimitive(D);if(K?.kind==="agent"){return await this.executeAgentPrimitive(K,D,z)}if(K?.kind==="tool"){return await this.executeToolPrimitive(K,D,z)}const q=this... L111: `)}const G=this.evalExpression(Y,this.expressionContext(z,X),z,D);let Z;const H=q.cases&&typeof q.cases==="object"?q.cases:undefined;if(H){const W=H[String(G)];if(typeof W==="strin... L112: `)} L113: `}function _T

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/cli.jsView on unpkg · L106

536`)){const Y=q.lastIndexOf(` L537: `);if(Y>=0){const G=q.slice(0,Y+1);const Z=q.slice(Y+1);this.contentBuffers.set(J,Z);D.send(z,G).catch((H)=>kW.error(`发送流式内容失败 [${D.channelId}->${z}]: ${H instanceof Error?H.messag... L538: `)){const X=J.trim();if(!X||X.startsWith("#"))continue;const K=X.indexOf(":");if(K===-1)continue;const q=X.slice(0,K).trim();let Y=X.slice(K+1).trim();if(typeof Y==="string"&&Y.sta... ... L543: ${D}`}renderSkillPrompt(D){const z=[`[Skill: ${D.name}]`,D.description?`Description: ${D.description}`:"",D.systemPrompt];return z.filter(Boolean).join(` L544: `)}}function Xv(){return[{id:"code-review",name:"Code Review",description:"Review code changes for correctness, security, and best practices",enabled:true,category:"Development",ic... L545: `)+` L546: `;qu8(this.file

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/cli.jsView on unpkg · L536

1Trigger-reachable chain: scripts.start -> dist/cli.js L1: #!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V,$){if(typeo

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L1

2if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module';

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L2

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V,$){if(typeof V==="object"&&V!==null){var B=fp.get(V);if(B!==undef

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/cli.jsView on unpkg · L1

2if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L52: `+w.slice(g+1)}else{x+=w.slice(a)}return x.slice(1)}function Y8(w){let u="";let z8=0;for(let r=0;r<w.length;z8>=65536?r+=2:r++){z8=j6(w,r);const a=l[z8];if(!a&&B6(z8)){u+=w[r];if(z... L53: `;return""}YP.dump=q8;return YP}function nP8(){if(sr)return n0;sr=1;const D=dP8();const z=iP8();function J(X,K){return function(){throw new Error("Function yaml."+X+" is removed in... L54: ${z.slice(0,200)}`}return z.slice(0,200)||null}if(z&&z.length>0){return

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/cli.jsView on unpkg · L2

1Trigger-reachable credential exfiltration chain: scripts.start -> dist/cli.js L1: #!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}f

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/cli.jsView on unpkg · L1

106Trigger-reachable command-output exfiltration chain: scripts.start -> dist/cli.js L106: L107: [truncated]`:X,path:this.relative(J),size:Kf8(J).size,truncated:K}}fileTree(D=".",z=2,J=200){const X=this.resolve(D);let K=0;const q=(Y,G)=>{K+=1;const Z=zf8(Y);const H=this.relati... L108: })`,{filename:"workflow-script.js"});const q=K.runInContext(X,{timeout:1000});const Y=await q(J);if(!Y){return TO({title:z.message||"Workflow",description:z.message||"Workflow",goa... ... L110: `)}const K=this.getPrimitive(D);if(K?.kind==="agent"){return await this.executeAgentPrimitive(K,D,z)}if(K?.kind==="tool"){return await this.executeToolPrimitive(K,D,z)}const q=this... L111: `)}const G=this.evalExpression(Y,this.expressionContext(z,X),z,D);let Z;const H=q.cases&&typeof q.cases==="object"?q.cases:undefine

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/cli.jsView on unpkg · L106

1Trigger-reachable persistence chain: scripts.start -> dist/cli.js L1: #!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/cli.jsView on unpkg · L1

2if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module';

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L2

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V,$){if(typeof V==="object"&&V!==null){var B=fp.get(V);if(B!==undef

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/cli.jsView on unpkg · L1

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V,$){if(typeof V==="object"&&V!==null){var B=fp.get(V);if(B!==undef

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli.jsView on unpkg · L1

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as hB8}from"node:module";var wB8=Object.create;var SB8=Object.getPrototypeOf;var tL=Object.defineProperty;var vB8=Object.getOwnPropertyNames;var bB8=Object.pro... L9: at`)?" (<anonymous>)":-1<B.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+U.message+` L15: `+U.stack}}function $8(V,$){if(typeof V==="object"&&V!==null){var B=fp.get(V);if(B!==undef

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli.jsView on unpkg · L1