@dmccore/code@0.0.33-synaptic.21: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@dmccore/code@0.0.33-synaptic.21: Suspicious npm security report | LPM Firewall

Source & flagged code

22 flagged · loading source

dist/bin.mjsView file

3import { _ as __commonJSMin, a as isQuitError, b as __toESM, c as layer$97, d as pipeThroughDuplex, f as toArrayBuffer, g as ChildProcessSpawner, h as make$142, i as Terminal$1, l ... L4: import { $ as decode$5, $a as spaced, $c as isZero, $i as runForkWith, $l as add$2, $n as nowUnsafe, $o as failCause$3, $r as flatMap$1, $t as toRepresentations, $u as toJson, A as... L5: import { $ as runFold$1, A as fromQueue, At as mapInput$1, B as merge$4, Bt as make$156, C as flatMap$3, D as fromEffect, Et as forEach$1, F as make$155, G as orDie$1, Ht as bounde... ... L9: import { createRequire } from "node:module"; L10: import * as NodeChildProcess from "node:child_process"; L11: import { Duplex, Readable } from "node:stream"; ... L20: import { cwd } from "process"; L21: import * as NodeNet from

Critical

Sensitive Archive Exfiltration

Source archives sensitive local configuration and publishes encoded chunks through an authenticated package-registry request.

dist/bin.mjsView on unpkg · L3

3import { _ as __commonJSMin, a as isQuitError, b as __toESM, c as layer$97, d as pipeThroughDuplex, f as toArrayBuffer, g as ChildProcessSpawner, h as make$142, i as Terminal$1, l ... L4: import { $ as decode$5, $a as spaced, $c as isZero, $i as runForkWith, $l as add$2, $n as nowUnsafe, $o as failCause$3, $r as flatMap$1, $t as toRepresentations, $u as toJson, A as... L5: import { $ as runFold$1, A as fromQueue, At as mapInput$1, B as merge$4, Bt as make$156, C as flatMap$3, D as fromEffect, Et as forEach$1, F as make$155, G as orDie$1, Ht as bounde... ... L9: import { createRequire } from "node:module"; L10: import * as NodeChildProcess from "node:child_process"; L11: import { Duplex, Readable } from "node:stream"; ... L20: import { cwd } from "process"; L21: import * as NodeNet from

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/bin.mjsView on unpkg · L3

•context = xplorer's contract is the single argument `/select,"<path>"` with\n* only the path quoted; Node's default spawn quoting wraps the whole argument\n* when the path has spaces and Explorer misparses it, silently opening a\n* fallback folder. A single `-ArgumentList` string in Windows PowerShell 5.1\n* reaches the child's command line verbatim, preserving the raw switch.\n*\n* Exported so the Windows smoke test can drive the identical source through a\n* real PowerShell against a recording stub instead of Explorer.\n*/\nfunction [redacted](explorerCommand, target) {\n return `$ProgressPreference = 'SilentlyContinue'; Start-Process ${escapePowerShellStringLiteral(explorerCommand)} -ArgumentList ('/select,"' + ${escapePowerShellStringLiteral(target)} + '"')`;\n}\nfunction fileExplorerR

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/bin.mjsView on unpkg

3Trigger-reachable chain: manifest.bin -> dist/bin.mjs L3: import { _ as __commonJSMin, a as isQuitError, b as __toESM, c as layer$97, d as pipeThroughDuplex, f as toArrayBuffer, g as ChildProcessSpawner, h as make$142, i as Terminal$1, l ... L4: import { $ as decode$5, $a as spaced, $c as isZero, $i as runForkWith, $l as add$2, $n as nowUnsafe, $o as failCause$3, $r as flatMap$1, $t as toRepresentations, $u as toJson, A as... L5: import { $ as runFold$1, A as fromQueue, At as mapInput$1, B as merge$4, Bt as make$156, C as flatMap$3, D as fromEffect, Et as forEach$1, F as make$155, G as orDie$1, Ht as bounde... ... L9: import { createRequire } from "node:module"; L10: import * as NodeChildProcess from "node:child_process"; L11: import { Duplex, Readable } from "node:stream"; ... L20: import

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/bin.mjsView on unpkg · L3

•matchType = previous_version_dangerous_delta matchedPackage = @dmccore/code@0.0.33-synaptic.15 matchedIdentity = npm:QGRtY2NvcmUvY29kZQ:0.0.33-synaptic.15 similarity = 0.958 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bin.mjsView on unpkg

9import { createRequire } from "node:module"; L10: import * as NodeChildProcess from "node:child_process"; L11: import { Duplex, Readable } from "node:stream";

High

Child Process

Package source references child process execution.

dist/bin.mjsView on unpkg · L9

47492const POSIX_PATH_DELIMITER = ":"; L47493: const WINDOWS_SHELL_CANDIDATES = ["pwsh.exe", "powershell.exe"]; L47494: function canExecuteFile(filePath) {

High

Shell

Package source references shell execution.

dist/bin.mjsView on unpkg · L47492

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/bin.mjs: import * as NodeReadline from "node:readline"; import { appendFile, copyFile, mkdir, open, readFile, readdir, rename, rm, rmdir, stat, symlink, unlink, writeFile } from "fs/promises"; import { createInterface } from "readline"; * readLine: Effect.die("unused"), * readLine: Effect.die("unused"), * readLine: Effect.die("unused"), * readLine: Effect.die("unused"), * readLine: Effect.die("unused"),

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/bin.mjsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/bin.mjs: import { appendFile, copyFile, mkdir, open, readFile, readdir, rename, rm, rmdir, stat, symlink, unlink, writeFile } from "fs/promises"; //#region ../../node_modules/.pnpm/effect@4.0.0-beta.103_patch_hash=[redacted]node_modules/effect/dist/Runtime.js * This teardown follows these exit-code rules: //#region ../../node_modules/.pnpm/@effect+platform-node@4.0.0-beta.103_bufferutil@4.1.0_effect@4.0.0-beta.103_patch_hash=_8d34148577283c90e6122750bede9b62/node_modules/@effect/pla... //#region ../../node_modules/.pnpm/effect@4.0.0-beta.103_patch_hash=[redacted]node_modules/effect/dist/UndefinedOr.js //#region ../../node_modules/.pnpm/effect@4.0.0-be

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/bin.mjsView on unpkg

3import { _ as __commonJSMin, a as isQuitError, b as __toESM, c as layer$97, d as pipeThroughDuplex, f as toArrayBuffer, g as ChildProcessSpawner, h as make$142, i as Terminal$1, l ... L4: import { $ as decode$5, $a as spaced, $c as isZero, $i as runForkWith, $l as add$2, $n as nowUnsafe, $o as failCause$3, $r as flatMap$1, $t as toRepresentations, $u as toJson, A as... L5: import { $ as runFold$1, A as fromQueue, At as mapInput$1, B as merge$4, Bt as make$156, C as flatMap$3, D as fromEffect, Et as forEach$1, F as make$155, G as orDie$1, Ht as bounde... ... L9: import { createRequire } from "node:module"; L10: import * as NodeChildProcess from "node:child_process"; L11: import { Duplex, Readable } from "node:stream"; ... L20: import { cwd } from "process"; L21: import * as NodeNet from

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bin.mjsView on unpkg · L3

3import { _ as __commonJSMin, a as isQuitError, b as __toESM, c as layer$97, d as pipeThroughDuplex, f as toArrayBuffer, g as ChildProcessSpawner, h as make$142, i as Terminal$1, l ... L4: import { $ as decode$5, $a as spaced, $c as isZero, $i as runForkWith, $l as add$2, $n as nowUnsafe, $o as failCause$3, $r as flatMap$1, $t as toRepresentations, $u as toJson, A as... L5: import { $ as runFold$1, A as fromQueue, At as mapInput$1, B as merge$4, Bt as make$156, C as flatMap$3, D as fromEffect, Et as forEach$1, F as make$155, G as orDie$1, Ht as bounde... ... L9: import { createRequire } from "node:module"; L10: import * as NodeChildProcess from "node:child_process"; L11: import { Duplex, Readable } from "node:stream"; ... L20: import { cwd } from "process"; L21: import * as NodeNet from

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/bin.mjsView on unpkg · L3

9import { createRequire } from "node:module"; L10: import * as NodeChildProcess from "node:child_process"; L11: import { Duplex, Readable } from "node:stream"; ... L20896: try: () => { L20897: const urlInstance = new URL(url, baseUrl()); L20898: for (let i = 0; i < params.params.length; i++) { ... L96448: * L96449: * Get a list of available tools with their JSON schema parameters for a specific provider and model combination. L96450: */ ... L112435: }, L112436: readFileSync(e, t) { L112437: let o = [];

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/bin.mjsView on unpkg · L9

3Cross-file remote execution chain: dist/bin.mjs spawns dist/Schema-CpT6RVrl.mjs; helper contains network access plus dynamic code execution. L3: import { _ as __commonJSMin, a as isQuitError, b as __toESM, c as layer$97, d as pipeThroughDuplex, f as toArrayBuffer, g as ChildProcessSpawner, h as make$142, i as Terminal$1, l ... L4: import { $ as decode$5, $a as spaced, $c as isZero, $i as runForkWith, $l as add$2, $n as nowUnsafe, $o as failCause$3, $r as flatMap$1, $t as toRepresentations, $u as toJson, A as... L5: import { $ as runFold$1, A as fromQueue, At as mapInput$1, B as merge$4, Bt as make$156, C as flatMap$3, D as fromEffect, Et as forEach$1, F as make$155, G as orDie$1, Ht as bounde... ... L9: import { createRequire } from "node:module"; L10: import * as NodeChildProcess from "no

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/bin.mjsView on unpkg · L3

3Trigger-reachable credential exfiltration chain: manifest.bin -> dist/bin.mjs L3: import { _ as __commonJSMin, a as isQuitError, b as __toESM, c as layer$97, d as pipeThroughDuplex, f as toArrayBuffer, g as ChildProcessSpawner, h as make$142, i as Terminal$1, l ... L4: import { $ as decode$5, $a as spaced, $c as isZero, $i as runForkWith, $l as add$2, $n as nowUnsafe, $o as failCause$3, $r as flatMap$1, $t as toRepresentations, $u as toJson, A as... L5: import { $ as runFold$1, A as fromQueue, At as mapInput$1, B as merge$4, Bt as make$156, C as flatMap$3, D as fromEffect, Et as forEach$1, F as make$155, G as orDie$1, Ht as bounde... ... L9: import { createRequire } from "node:module"; L10: import * as NodeChildProcess from "node:child_process"; L11: import { Duplex, Readable } from "node:

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/bin.mjsView on unpkg · L3

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bin.mjsView on unpkg

6772var require_log = /* @__PURE__ */ __commonJSMin(((exports) => { L6773: var node_process$2 = __require("process"); L6774: function debug(logLevel, ...messages) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bin.mjsView on unpkg · L6772

•path = dist/bin.mjs kind = oversized_source_file sizeBytes = 6968406 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/bin.mjsView on unpkg

•path = dist/bin.mjs kind = oversized_cli_entrypoint sizeBytes = 6968406 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/bin.mjsView on unpkg

dist/client/assets/ghostty-vt-DdA0Zryv.wasmView file

•path = dist/client/assets/ghostty-vt-DdA0Zryv.wasm kind = wasm_module sizeBytes = 630932 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/client/assets/ghostty-vt-DdA0Zryv.wasmView on unpkg

dist/NodeServices-DqQ8XQJg.mjsView file

•matchType = normalized_sha256 matchedPackage = @dmccore/code@0.0.33-synaptic.10 matchedPath = dist/NodeServices-Ca--v9Zz.mjs matchedIdentity = npm:QGRtY2NvcmUvY29kZQ:0.0.33-synaptic.10 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/NodeServices-DqQ8XQJg.mjsView on unpkg

dist/NodePtyAdapter-DCBOv10f.mjsView file

•matchType = normalized_sha256 matchedPackage = @dmccore/code@0.0.33-synaptic.10 matchedPath = dist/NodePtyAdapter-Bww4kU4T.mjs matchedIdentity = npm:QGRtY2NvcmUvY29kZQ:0.0.33-synaptic.10 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/NodePtyAdapter-DCBOv10f.mjsView on unpkg

dist/BunPtyAdapter-BF4_3q4k.mjsView file

•matchType = normalized_sha256 matchedPackage = @dmccore/code@0.0.33-synaptic.10 matchedPath = dist/BunPtyAdapter-CUYfkmpJ.mjs matchedIdentity = npm:QGRtY2NvcmUvY29kZQ:0.0.33-synaptic.10 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/BunPtyAdapter-BF4_3q4k.mjsView on unpkg