@deslop/workbench@0.0.437: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@deslop/workbench@0.0.437: Suspicious npm security report (Warn) | LPM Firewall

Decision evidence

public snapshot

AI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

dist/server.js exposes an interactive coding-agent CLI with default tools read/bash/edit/write.
dist/server.js loads project context files AGENTS.md/CLAUDE.md and extension/skill/prompt/theme resources after project-trust checks.
dist/server.js persists first-party agent auth/trust/settings/session files under the agent directory during explicit CLI use.

Evidence against

package.json has no preinstall/install/postinstall lifecycle hooks; only a user-invoked bin maps workbench to dist/server.js.
dist/execAsync-CdIY0r0r.mjs and getMachineId-*.mjs child_process use is OpenTelemetry machine-id detection, not payload execution.
Network/API key handling is provider-aligned for OpenAI/Anthropic/Google/Azure/OpenRouter clients and auth storage, with no hardcoded exfiltration endpoint found.
No unconsented install-time mutation of foreign AI-agent config or broad control surface found.
Trojan-source scanner hint in chunk-KEIR6QF5 file was not confirmed by targeted bidi-control search.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

Manifest

NoLicenseWildcardDependency

scanned 527 file(s), 19.1 MB of source, external domains: 169.254.169.254, accounts.google.com, aiplatform.googleapis.com, api.anthropic.com, api.mistral.ai, api.openai.com, base-ui.com, chatgpt.com, chevrotain.io, cloud.google.com, cloudresourcemanager.googleapis.com, developer.mozilla.org, docs.anthropic.com, docs.expo.dev, docs.mistral.ai, dummy.com, en.wikipedia.org, fetch.spec.whatwg.org, generativelanguage.googleapis.com, github.com, help.openai.com, jimmy.warting.se, json-schema.org, langium.org, metadata.google.internal, oauth2.googleapis.com, platform.claude.com, react.dev, w3c.github.io, www.googleapis.com, www.gstatic.com, www.w3.org

Oversized source lightweight scan

dist/server.js9.75 MB file, sampled 256 KB

FilesystemNetworkChildProcessCryptoShellHighEntropyStringsUrlStringsgithub.com

Source & flagged code

9 flagged · loading source

dist/google-shared-C8nQUN7A.mjsView file

8291const executable_response_1 = require_executable_response(); L8292: const childProcess = __require("child_process"); L8293: const fs$3 = __require("fs");

High

Child Process

Package source references child process execution.

dist/google-shared-C8nQUN7A.mjsView on unpkg · L8291

2import { i as __require, o as __toESM, t as __commonJSMin } from "./rolldown-runtime-CC-oIOqs.mjs"; L3: import { Mi as import_websocket } from "./server.js"; L4: import { t as sanitizeSurrogates } from "./sanitize-unicode-DceI5AnU.mjs"; ... L15: if (typeof options === "boolean") options = { forever: options }; L16: this._originalTimeouts = JSON.parse(JSON.stringify(timeouts)); L17: this._timeouts = timeouts; ... L328: //#endregion L329: //#region ../../node_modules/.pnpm/gaxios@7.1.6/node_modules/gaxios/package.json L330: var require_package$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => { ... L610: if (!obj || typeof obj !== "object") return; L611: else if (obj instanceof FormData || obj instanceof URLSearchParams || "forEach" in obj && "set" in obj) obj.forEach((_, key) => {

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/google-shared-C8nQUN7A.mjsView on unpkg · L2

2Cross-file remote execution chain: dist/google-shared-C8nQUN7A.mjs spawns dist/dist-zHviHa-X.mjs; helper contains network access plus dynamic code execution. L2: import { i as __require, o as __toESM, t as __commonJSMin } from "./rolldown-runtime-CC-oIOqs.mjs"; L3: import { Mi as import_websocket } from "./server.js"; L4: import { t as sanitizeSurrogates } from "./sanitize-unicode-DceI5AnU.mjs"; ... L15: if (typeof options === "boolean") options = { forever: options }; L16: this._originalTimeouts = JSON.parse(JSON.stringify(timeouts)); L17: this._timeouts = timeouts; ... L328: //#endregion L329: //#region ../../node_modules/.pnpm/gaxios@7.1.6/node_modules/gaxios/package.json L330: var require_package$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => { ... L610: if (!obj || typeof obj

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/google-shared-C8nQUN7A.mjsView on unpkg · L2

dist/photon_rs-CAtKufSV.mjsView file

4180module.exports.__wbg_newnoargs_e643855c6572a4a8 = function(arg0, arg1) { L4181: return new Function(getStringFromWasm0(arg0, arg1)); L4182: };

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/photon_rs-CAtKufSV.mjsView on unpkg · L4180

dist/openai-codex-responses-D3EL6TtC.mjsView file

108let _os = null; L109: const dynamicImport = (specifier) => import(__rewriteRelativeImportExtension(specifier)); L110: const NODE_OS_SPECIFIER = "node:os";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/openai-codex-responses-D3EL6TtC.mjsView on unpkg · L108

dist/client/assets/chunk-KEIR6QF5-BfrZ3jm6.jsView file

46contains invisible/control Unicode U+FEFF (zero width no-break space) \r \v \xA0  \u2028\u2029  　<U+FEFF>`.split(``);function Da(e){let t=typeof e==`string`?new RegExp(e):e;return Ea.some(e=>t.test(e))}o(Da,`isWhitespace`);function Oa(e){return e.replace(/[.*+?^${}()|[\]\\]/g,`\\$&`)}o(Oa,`escapeReg

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/client/assets/chunk-KEIR6QF5-BfrZ3jm6.jsView on unpkg · L46

dist/client/assets/jetbrains-mono-latin-wght-normal-B9CIFXIH.woff2View file

•path = dist/client/assets/jetbrains-mono-latin-wght-normal-B9CIFXIH.woff2 kind = high_entropy_blob sizeBytes = 40404 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/client/assets/jetbrains-mono-latin-wght-normal-B9CIFXIH.woff2View on unpkg

dist/server.jsView file

•path = dist/server.js kind = oversized_source_file sizeBytes = 10227778 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/server.jsView on unpkg

•path = dist/server.js kind = oversized_cli_entrypoint sizeBytes = 10227778 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/server.jsView on unpkg