@desplega.ai/agent-swarm@1.164.1: Suspicious npm security report

Loading npm security reports…

@desplega.ai/agent-swarm@1.164.1: Suspicious npm security report | LPM Firewall

Source & flagged code

23 flagged

dist/cli-nvvfd8bq.jsView file

32352// node_modules/@earendil-works/pi-coding-agent/dist/core/exec.js L32353: import { spawn } from "node:child_process"; L32354: async function execCommand(command, args, cwd, options) {

High

Child Process

Package source references child process execution.

dist/cli-nvvfd8bq.jsView on unpkg · L32352

58formatToolCallWithArgs, L59: getPowerShellConfig, L60: getShellConfig,

High

Shell

Package source references shell execution.

dist/cli-nvvfd8bq.jsView on unpkg · L58

1152var require_util = __commonJS(function(exports, module) { L1153: var assert = __require("node:assert"); L1154: var { kDestroyed, kBodyUsed, kListeners, kBody } = require_symbols();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli-nvvfd8bq.jsView on unpkg · L1152

dist/photon_rs-q3vet37k.jsView file

1196var $__wbg_newnoargs_e643855c6572a4a8 = function(arg0, arg1) { L1197: const ret = new Function(getStringFromWasm0(arg0, arg1)); L1198: return ret;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/photon_rs-q3vet37k.jsView on unpkg · L1196

src/tests/page-proxy.test.tsView file

14import { unlink } from "node:fs/promises"; L15: import net from "node:net"; L16: import { runInNewContext } from "node:vm"; ... L39: }, L40: body: JSON.stringify({ L41: name, ... L49: if (res.status !== 201 && res.status !== 200) { L50: throw new Error(`Failed to register agent: ${res.status} ${await res.text()}`); L51: } ... L65: // signPageSession() in-process validate at the proxy. L66: process.env.PAGE_SESSION_SECRET = PAGE_SECRET; L67:

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/tests/page-proxy.test.tsView on unpkg · L14

dist/http-ncr8rmd0.jsView file

576import { L577: import_websocket, L578: import_websocket_server ... L1273: end: () => { L1274: bestEffortTelemetry("span.end", () => span.end()); L1275: } ... L1291: } L1292: function readPositiveIntEnv(key, env = process.env) { L1293: const raw = env[key]?.trim(); ... L2041: const bytes = crypto.getRandomValues(new Uint8Array(24)); L2042: ticket = Buffer.from(bytes).toString("base64url"); L2043: } while (tickets.has(ticket));

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/http-ncr8rmd0.jsView on unpkg · L576

576Trigger-reachable chain: manifest.bin -> dist/cli.js -> dist/http-ncr8rmd0.js L576: import { L577: import_websocket, L578: import_websocket_server ... L1273: end: () => { L1274: bestEffortTelemetry("span.end", () => span.end()); L1275: } ... L1291: } L1292: function readPositiveIntEnv(key, env = process.env) { L1293: const raw = env[key]?.trim(); ... L2041: const bytes = crypto.getRandomValues(new Uint8Array(24)); L2042: ticket = Buffer.from(bytes).toString("base64url"); L2043: } while (tickets.has(ticket));

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/http-ncr8rmd0.jsView on unpkg · L576

20971// src/realtime/browser.generated.txt L20972: var browser_generated_default = "var Tp=Object.defineProperty;var Ap=(e)=>e;function Op(e,t){this[e]=Ap.bind(null,t)}var Zp=(e,t)=>{for(var r in t)Tp(e,r,{get:t[r],enumerable:!0,co... L20973:

dist/cli-ng97fjq7.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli-ng97fjq7.js: const match = (headers?.authorization ?? "").match(/Signature=(\w+)$/); const match = request.headers?.authorization?.match(/Signature=([\w]+)$/); var { writeFile } = promises; return writeFile(tokenFilepath, tokenString); "Proxy-Authorization": `Negotiate ${token}` headers["Proxy-Authorization"] = `Basic ${Buffer.from(auth).toString("base64")}`; headers["Proxy-Authorization"] = `Basic ${Buffer.from(auth).toString("base64")}`; headers["Proxy-Authorization"] = `Basic ${Buffer.from(auth).toString("base64")}`;

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli-ng97fjq7.jsView on unpkg

dist/claude-sdk-session-6nb9raem.jsView file

21Cross-file remote execution chain: dist/claude-sdk-session-6nb9raem.js spawns dist/cli-pkke6geq.js; helper contains network access plus dynamic code execution. L21: SessionErrorTracker, L22: parseStderrForErrors, L23: redactRateLimitEvent, ... L108: import { constants as $c, createWriteStream as yye } from "fs"; L109: import { execFile as gye } from "child_process"; L110: import { promisify as hye } from "util"; ... L133: import { posix as cze, win32 as uze } from "path"; L134: import { isIPv4 as qFe, isIPv6 as ZFe } from "net"; L135: import { userInfo as Nje } from "os"; ... L1269: Object.defineProperty(sF, "__esModule", { value: true }); L1270: var Ue = Te(), TTe = { data: new Ue.Name("data"), valCxt: new Ue.Name("valCxt"), instancePath: new Ue.Name("instancePath"), parentData: new Ue.Na

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/claude-sdk-session-6nb9raem.jsView on unpkg · L21

dist/quickjs-r1pq2107.wasmView file

•path = dist/quickjs-r1pq2107.wasm kind = wasm_module sizeBytes = 637405 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/quickjs-r1pq2107.wasmView on unpkg

templates/official/ux-principles/start-up.shView file

•path = templates/official/ux-principles/start-up.sh kind = build_helper sizeBytes = 582 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/official/ux-principles/start-up.shView on unpkg

dist/cli-g3qgrzck.jsView file

•path = dist/cli-g3qgrzck.js kind = oversized_source_file sizeBytes = 8860122 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli-g3qgrzck.jsView on unpkg

dist/cli-2c8eky5y.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 26

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli-2c8eky5y.js#virtual:normalized:round1View on unpkg

dist/cli-5bfdm1ah.jsView file

•matchType = normalized_sha256 matchedPackage = @desplega.ai/agent-swarm@1.149.1 matchedPath = dist/cli-5bfdm1ah.js matchedIdentity = npm:[redacted]:1.149.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli-5bfdm1ah.jsView on unpkg

dist/cli-q51yprfq.jsView file

•matchType = normalized_sha256 matchedPackage = @desplega.ai/agent-swarm@1.149.1 matchedPath = dist/cli-q51yprfq.js matchedIdentity = npm:[redacted]:1.149.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli-q51yprfq.jsView on unpkg

dist/cli-gt8v96qx.jsView file

•matchType = token_shingles matchedPackage = @desplega.ai/agent-swarm@1.149.1 matchedPath = dist/cli-5my3bjsd.js matchedIdentity = npm:[redacted]:1.149.1 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli-gt8v96qx.jsView on unpkg

src/script-workflows/executor.tsView file

•matchType = normalized_sha256 matchedPackage = @desplega.ai/agent-swarm@1.149.1 matchedPath = src/script-workflows/executor.ts matchedIdentity = npm:[redacted]:1.149.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/script-workflows/executor.tsView on unpkg

dist/claude-k04qfvsv.jsView file

•matchType = normalized_sha256 matchedPackage = @desplega.ai/agent-swarm@1.149.1 matchedPath = dist/claude-k04qfvsv.js matchedIdentity = npm:[redacted]:1.149.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/claude-k04qfvsv.jsView on unpkg

src/http/metrics.tsView file

•matchType = normalized_sha256 matchedPackage = @desplega.ai/agent-swarm@1.149.1 matchedPath = src/http/metrics.ts matchedIdentity = npm:[redacted]:1.149.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/http/metrics.tsView on unpkg

src/http/pages-public.tsView file

•matchType = normalized_sha256 matchedPackage = @desplega.ai/agent-swarm@1.149.1 matchedPath = src/http/pages-public.ts matchedIdentity = npm:[redacted]:1.149.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/http/pages-public.tsView on unpkg

src/http/x.tsView file

•matchType = normalized_sha256 matchedPackage = @desplega.ai/agent-swarm@1.149.1 matchedPath = src/http/x.ts matchedIdentity = npm:[redacted]:1.149.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/http/x.tsView on unpkg

dist/cli-gt4hxb8p.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @desplega.ai/agent-swarm@1.159.0 matchedIdentity = npm:[redacted]:1.159.0 similarity = 0.433 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli-gt4hxb8p.jsView on unpkg

Source & flagged code

23 flagged · loading source

dist/cli-nvvfd8bq.jsView file

32352// node_modules/@earendil-works/pi-coding-agent/dist/core/exec.js L32353: import { spawn } from "node:child_process"; L32354: async function execCommand(command, args, cwd, options) {

High

Child Process

Package source references child process execution.

dist/cli-nvvfd8bq.jsView on unpkg · L32352

58formatToolCallWithArgs, L59: getPowerShellConfig, L60: getShellConfig,

High

Shell

Package source references shell execution.

dist/cli-nvvfd8bq.jsView on unpkg · L58

1152var require_util = __commonJS(function(exports, module) { L1153: var assert = __require("node:assert"); L1154: var { kDestroyed, kBodyUsed, kListeners, kBody } = require_symbols();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli-nvvfd8bq.jsView on unpkg · L1152

dist/photon_rs-q3vet37k.jsView file

1196var $__wbg_newnoargs_e643855c6572a4a8 = function(arg0, arg1) { L1197: const ret = new Function(getStringFromWasm0(arg0, arg1)); L1198: return ret;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/photon_rs-q3vet37k.jsView on unpkg · L1196

src/tests/page-proxy.test.tsView file

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/tests/page-proxy.test.tsView on unpkg · L14

dist/http-ncr8rmd0.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/http-ncr8rmd0.jsView on unpkg · L576

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/http-ncr8rmd0.jsView on unpkg · L576

dist/cli-ng97fjq7.jsView file

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli-ng97fjq7.jsView on unpkg

dist/claude-sdk-session-6nb9raem.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/claude-sdk-session-6nb9raem.jsView on unpkg · L21

dist/quickjs-r1pq2107.wasmView file

•path = dist/quickjs-r1pq2107.wasm kind = wasm_module sizeBytes = 637405 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/quickjs-r1pq2107.wasmView on unpkg

templates/official/ux-principles/start-up.shView file

•path = templates/official/ux-principles/start-up.sh kind = build_helper sizeBytes = 582 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/official/ux-principles/start-up.shView on unpkg

dist/cli-g3qgrzck.jsView file

•path = dist/cli-g3qgrzck.js kind = oversized_source_file sizeBytes = 8860122 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli-g3qgrzck.jsView on unpkg

dist/cli-2c8eky5y.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 26

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli-2c8eky5y.js#virtual:normalized:round1View on unpkg

dist/cli-5bfdm1ah.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli-5bfdm1ah.jsView on unpkg

dist/cli-q51yprfq.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli-q51yprfq.jsView on unpkg

dist/cli-gt8v96qx.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli-gt8v96qx.jsView on unpkg

src/script-workflows/executor.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/script-workflows/executor.tsView on unpkg

dist/claude-k04qfvsv.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/claude-k04qfvsv.jsView on unpkg

src/http/metrics.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/http/metrics.tsView on unpkg

src/http/pages-public.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/http/pages-public.tsView on unpkg

src/http/x.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/http/x.tsView on unpkg

dist/cli-gt4hxb8p.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli-gt4hxb8p.jsView on unpkg

Source & flagged code

23 flagged

dist/cli-nvvfd8bq.jsView file

32352// node_modules/@earendil-works/pi-coding-agent/dist/core/exec.js L32353: import { spawn } from "node:child_process"; L32354: async function execCommand(command, args, cwd, options) {

High

Child Process

Package source references child process execution.

dist/cli-nvvfd8bq.jsView on unpkg · L32352

58formatToolCallWithArgs, L59: getPowerShellConfig, L60: getShellConfig,

High

Shell

Package source references shell execution.

dist/cli-nvvfd8bq.jsView on unpkg · L58

1152var require_util = __commonJS(function(exports, module) { L1153: var assert = __require("node:assert"); L1154: var { kDestroyed, kBodyUsed, kListeners, kBody } = require_symbols();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli-nvvfd8bq.jsView on unpkg · L1152

dist/photon_rs-q3vet37k.jsView file

1196var $__wbg_newnoargs_e643855c6572a4a8 = function(arg0, arg1) { L1197: const ret = new Function(getStringFromWasm0(arg0, arg1)); L1198: return ret;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/photon_rs-q3vet37k.jsView on unpkg · L1196

src/tests/page-proxy.test.tsView file

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/tests/page-proxy.test.tsView on unpkg · L14

dist/http-ncr8rmd0.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/http-ncr8rmd0.jsView on unpkg · L576

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/http-ncr8rmd0.jsView on unpkg · L576

dist/cli-ng97fjq7.jsView file

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli-ng97fjq7.jsView on unpkg

dist/claude-sdk-session-6nb9raem.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/claude-sdk-session-6nb9raem.jsView on unpkg · L21

dist/quickjs-r1pq2107.wasmView file

•path = dist/quickjs-r1pq2107.wasm kind = wasm_module sizeBytes = 637405 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/quickjs-r1pq2107.wasmView on unpkg

templates/official/ux-principles/start-up.shView file

•path = templates/official/ux-principles/start-up.sh kind = build_helper sizeBytes = 582 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/official/ux-principles/start-up.shView on unpkg

dist/cli-g3qgrzck.jsView file

•path = dist/cli-g3qgrzck.js kind = oversized_source_file sizeBytes = 8860122 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli-g3qgrzck.jsView on unpkg

dist/cli-2c8eky5y.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 26

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli-2c8eky5y.js#virtual:normalized:round1View on unpkg

dist/cli-5bfdm1ah.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli-5bfdm1ah.jsView on unpkg

dist/cli-q51yprfq.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli-q51yprfq.jsView on unpkg

dist/cli-gt8v96qx.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli-gt8v96qx.jsView on unpkg

src/script-workflows/executor.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/script-workflows/executor.tsView on unpkg

dist/claude-k04qfvsv.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/claude-k04qfvsv.jsView on unpkg

src/http/metrics.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/http/metrics.tsView on unpkg

src/http/pages-public.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/http/pages-public.tsView on unpkg

src/http/x.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/http/x.tsView on unpkg

dist/cli-gt4hxb8p.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli-gt4hxb8p.jsView on unpkg

@desplega.ai/agent-swarm@1.164.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code