@deepseekcode/cli@1.0.27: Scan Failed npm security report (Allow)

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as Su8}from"node:module";var Fu8=Object.create;var Nu8=Object.getPrototypeOf;var Vv=Object.defineProperty;var Mu8=Object.getOwnPropertyNames;var Lu8=Object.pro... L9: at`)?" (<anonymous>)":-1<F.stack.indexOf("@")?"@unknown:0:0":""}return`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/cli.jsView on unpkg · L1

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as Su8}from"node:module";var Fu8=Object.create;var Nu8=Object.getPrototypeOf;var Vv=Object.defineProperty;var Mu8=Object.getOwnPropertyNames;var Lu8=Object.pro... L9: at`)?" (<anonymous>)":-1<F.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+E.message+` L15: `+E.stack}}function i(Q,j){if(typeof Q==="object"&&Q!==null){var F=L88.get(Q);if(F!==undef

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L1

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as Su8}from"node:module";var Fu8=Object.create;var Nu8=Object.getPrototypeOf;var Vv=Object.defineProperty;var Mu8=Object.getOwnPropertyNames;var Lu8=Object.pro... L9: at`)?" (<anonymous>)":-1<F.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+E.message+` L15: `+E.stack}}function i(Q,j){if(typeof Q==="object"&&Q!==null){var F=L88.get(Q);if(F!==undef

Critical

Remote Response Code Execution

Source passes code obtained from a remote response into a dynamic execution sink.

dist/cli.jsView on unpkg · L1

1Trigger-reachable chain: scripts.start -> dist/cli.js L1: #!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as Su8}from"node:module";var Fu8=Object.create;var Nu8=Object.getPrototypeOf;var Vv=Object.defineProperty;var Mu8=Object.getOwnPropertyNames;var Lu8=Object.pro... L9: at`)?" (<anonymous>)":-1<F.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+E.message+` L15: `+E.stack}}function i(Q,j){if(typeof

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L1

•matchType = previous_version_dangerous_delta matchedPackage = @deepseekcode/cli@1.0.37 matchedIdentity = npm:QGRlZXBzZWVrY29kZS9jbGk:1.0.37 similarity = 0.391 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli.js: `;return""}Wy.dump=M8;return Wy}function Ar8(){if(FJ8)return B5;FJ8=1;const J=Br8();const z=Ur8();function X(Y,K){return function(){throw new Error("Function yaml."+Y+" is removed ... ${z.slice(0,200)}`}return z.slice(0,200)||null}if(z&&z.length>0){return z.length>200?`${z.slice(0,200)}...`:z}return null}var B$,z28,U$;var D28=J8(()=>{B$={plan:{label:"Plan",accen... `)return J+"\\n";if(X==="\r")return J+"\\r"}return null}function KL(J){if(!J||typeof J!=="string")return J;let z=J;if(dx(z)){z=pD8(z)}if(z.startsWith('"')&&z.endsWith('"')){z=z.sli... [truncated]`:Y,path:this.relative(X),size:w16(X).size,truncated:K}}fileTree(J=

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli.jsView on unpkg

74`,weixin_qrcode_failed:"获取微信二维码失败: {status}",weixin_qrcode_failed_plain:"获取微信二维码失败",weixin_bind_status_failed:"查询绑定状态失败: {status}",weixin_bind_status_failed_plain:"查询绑定状态失败",approv... L75: 解析为: {path}`,approval_external_path:"工作区外路径: {path}",codeview_unwired_suffix:" 功能未接线"}});function Z6(J){return{schema:j8.unknown(),...J}}function t9(J){for(const z of J){if(Pz8.has... L76: ${z.slice(0,200)}`}return z.slice(0,200)||null}if(z&&z.length>0){return z.length>200?`${z.slice(0,200)}...`:z}return null}var B$,z28,U$;var D28=J8(()=>{B$={plan:{label:"Plan",accen... ... L81: [... truncated] L82: `,_t8;var W28=J8(()=>{_t8={maxBytes:40*1024,headRatio:0.6}});function p4(J){if(!J)return{};if(typeof J==="object"){if(Array.isArray(J))return{};return J}if(typeof J!=="string")retu... L83: `)}const X=[],

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L74

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as Su8}from"node:module";var Fu8=Object.create;var Nu8=Object.getPrototypeOf;var Vv=Object.defineProperty;var Mu8=Object.getOwnPropertyNames;var Lu8=Object.pro... L9: at`)?" (<anonymous>)":-1<F.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+E.message+` L15: `+E.stack}}function i(Q,j){if(typeof Q==="object"&&Q!==null){var F=L88.get(Q);if(F!==undef

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/cli.jsView on unpkg · L1

2if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L52: `+w.slice($8+1)}else{k8+=w.slice(e)}return k8.slice(1)}function W6(w){let n="";let Z8=0;for(let z8=0;z8<w.length;Z8>=65536?z8+=2:z8++){Z8=P6(w,z8);const e=p[Z8];if(!e&&A6(Z8)){n+=w... L53: `;return""}Wy.dump=M8;return Wy}function Ar8(){if(FJ8)return B5;FJ8=1;const J=Br8();const z=Ur8();function X(Y,K){return function(){throw new Error("Function yaml."+Y+" is removed ... L54: ⚠ Interrupt received, cancelling...`,autofix_exception:` ... L1116: mkd

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/cli.jsView on unpkg · L2

1Trigger-reachable credential exfiltration chain: scripts.start -> dist/cli.js L1: #!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as Su8}from"node:module";var Fu8=Object.create;var Nu8=Object.getPrototypeOf;var Vv=Object.defineProperty;var Mu8=Object.getOwnPropertyNames;var Lu8=Object.pro... L9: at`)?" (<anonymous>)":-1<F.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+E.message+` L15: `+E.stack}}f

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/cli.jsView on unpkg · L1

74Trigger-reachable command-output exfiltration chain: scripts.start -> dist/cli.js L74: `,weixin_qrcode_failed:"获取微信二维码失败: {status}",weixin_qrcode_failed_plain:"获取微信二维码失败",weixin_bind_status_failed:"查询绑定状态失败: {status}",weixin_bind_status_failed_plain:"查询绑定状态失败",approv... L75: 解析为: {path}`,approval_external_path:"工作区外路径: {path}",codeview_unwired_suffix:" 功能未接线"}});function Z6(J){return{schema:j8.unknown(),...J}}function t9(J){for(const z of J){if(Pz8.has... L76: ${z.slice(0,200)}`}return z.slice(0,200)||null}if(z&&z.length>0){return z.length>200?`${z.slice(0,200)}...`:z}return null}var B$,z28,U$;var D28=J8(()=>{B$={plan:{label:"Plan",accen... ... L81: [... truncated] L82: `,_t8;var W28=J8(()=>{_t8={maxBytes:40*1024,headRatio:0.6}});function p4(J){if(!J)return{};if(typeof J==="object"){if(Arr

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/cli.jsView on unpkg · L74

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @deepseekcode/cli@1.0.23 matchedPath = dist/cli.js matchedIdentity = npm:QGRlZXBzZWVrY29kZS9jbGk:1.0.23 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli.jsView on unpkg

2if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module';

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L2

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as Su8}from"node:module";var Fu8=Object.create;var Nu8=Object.getPrototypeOf;var Vv=Object.defineProperty;var Mu8=Object.getOwnPropertyNames;var Lu8=Object.pro... L9: at`)?" (<anonymous>)":-1<F.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+E.message+` L15: `+E.stack}}function i(Q,j){if(typeof Q==="object"&&Q!==null){var F=L88.get(Q);if(F!==undef

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/cli.jsView on unpkg · L1

•path = dist/cli.js kind = oversized_source_file sizeBytes = 8318144 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.jsView on unpkg

•path = dist/cli.js kind = oversized_cli_entrypoint sizeBytes = 8318144 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.jsView on unpkg

1#!/usr/bin/env node L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';} L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='... L4: import { createRequire as __clsCr } from 'module'; ... L7: __clsInitRequire(); L8: import{createRequire as Su8}from"node:module";var Fu8=Object.create;var Nu8=Object.getPrototypeOf;var Vv=Object.defineProperty;var Mu8=Object.getOwnPropertyNames;var Lu8=Object.pro... L9: at`)?" (<anonymous>)":-1<F.stack.indexOf("@")?"@unknown:0:0":""}return` ... L14: Error generating stack: `+E.message+` L15: `+E.stack}}function i(Q,j){if(typeof Q==="object"&&Q!==null){var F=L88.get(Q);if(F!==undef

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli.jsView on unpkg · L1

@deepseekcode/cli@1.0.27

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code