@expo/cli@57.0.23: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

@expo/cli@57.0.23: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

16 flagged · loading source

internal/unstable-expo-updates-exports.jsView file

2// NOTE for Expo Maintainers: Do not add to this file. We want to remove this L3: module.exports = require('../build/src/expoUpdatesExports');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

internal/unstable-expo-updates-exports.jsView on unpkg · L2

build/src/utils/errors.jsView file

41} L42: function _child_process() { L43: const data = require("child_process"); ... L107: * L108: * @see https://github.com/expo/expo/issues/29083 L109: * @see https://github.com/facebook/metro/issues/834 ... L112: // Only enable special logging when running on macOS and are running into the `EMFILE` error L113: if ('code' in error && error.code === 'EMFILE' && process.platform === 'darwin') { L114: try {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

build/src/utils/errors.jsView on unpkg · L41

•matchType = normalized_sha256 matchedPackage = @depup/expo__cli@57.0.22-depup.2 matchedPath = build/src/utils/errors.js matchedIdentity = npm:QGRlcHVwL2V4cG9fX2NsaQ:57.0.22-depup.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/src/utils/errors.jsView on unpkg

build/src/start/platforms/android/adbReverse.jsView file

66package = @expo/cli; repositoryIdentity = expo; dependency = debug L66: } L67: const debug = require('debug')('expo:start:platforms:android:adbReverse'); L68: let removeExitHook = null;

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

build/src/start/platforms/android/adbReverse.jsView on unpkg · L66

build/src/api/user/expoSsoLauncher.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

build/src/api/user/expoSsoLauncher.js#virtual:normalized:round1View on unpkg

build/src/export/embed/exportServer.jsView file

•matchType = normalized_sha256 matchedPackage = @depup/expo__cli@57.0.22-depup.2 matchedPath = [redacted].js matchedIdentity = npm:QGRlcHVwL2V4cG9fX2NsaQ:57.0.22-depup.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/src/export/embed/exportServer.jsView on unpkg

build/src/start/doctor/apple/XcodePrerequisite.jsView file

•matchType = normalized_sha256 matchedPackage = @depup/expo__cli@57.0.22-depup.2 matchedPath = [redacted].js matchedIdentity = npm:QGRlcHVwL2V4cG9fX2NsaQ:57.0.22-depup.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/src/start/doctor/apple/XcodePrerequisite.jsView on unpkg

build/src/run/ios/XcodeBuild.jsView file

•matchType = normalized_sha256 matchedPackage = @depup/expo__cli@57.0.22-depup.2 matchedPath = build/src/run/ios/XcodeBuild.js matchedIdentity = npm:QGRlcHVwL2V4cG9fX2NsaQ:57.0.22-depup.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/src/run/ios/XcodeBuild.jsView on unpkg

build/src/start/server/metro/withMetroMultiPlatform.jsView file

•matchType = normalized_sha256 matchedPackage = @depup/expo__cli@57.0.22-depup.2 matchedPath = [redacted].js matchedIdentity = npm:QGRlcHVwL2V4cG9fX2NsaQ:57.0.22-depup.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/src/start/server/metro/withMetroMultiPlatform.jsView on unpkg

build/bin/cliView file

•matchType = normalized_sha256 matchedPackage = @depup/expo__cli@57.0.22-depup.2 matchedPath = build/bin/cli matchedIdentity = npm:QGRlcHVwL2V4cG9fX2NsaQ:57.0.22-depup.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/bin/cliView on unpkg

build/src/prebuild/resolveOptions.jsView file

•matchType = normalized_sha256 matchedPackage = @depup/expo__cli@57.0.22-depup.2 matchedPath = [redacted].js matchedIdentity = npm:QGRlcHVwL2V4cG9fX2NsaQ:57.0.22-depup.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/src/prebuild/resolveOptions.jsView on unpkg

build/src/start/platforms/android/emulator.jsView file

•matchType = normalized_sha256 matchedPackage = @depup/expo__cli@57.0.22-depup.2 matchedPath = [redacted].js matchedIdentity = npm:QGRlcHVwL2V4cG9fX2NsaQ:57.0.22-depup.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/src/start/platforms/android/emulator.jsView on unpkg

build/src/utils/npm.jsView file

•matchType = normalized_sha256 matchedPackage = @depup/expo__cli@57.0.22-depup.2 matchedPath = build/src/utils/npm.js matchedIdentity = npm:QGRlcHVwL2V4cG9fX2NsaQ:57.0.22-depup.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/src/utils/npm.jsView on unpkg

build/src/export/exportHermes.jsView file

•matchType = normalized_sha256 matchedPackage = @depup/expo__cli@57.0.22-depup.2 matchedPath = build/src/export/exportHermes.js matchedIdentity = npm:QGRlcHVwL2V4cG9fX2NsaQ:57.0.22-depup.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/src/export/exportHermes.jsView on unpkg

build/src/start/platforms/ios/AppleDeviceManager.jsView file

•matchType = normalized_sha256 matchedPackage = @depup/expo__cli@57.0.22-depup.2 matchedPath = [redacted].js matchedIdentity = npm:QGRlcHVwL2V4cG9fX2NsaQ:57.0.22-depup.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/src/start/platforms/ios/AppleDeviceManager.jsView on unpkg

build/src/start/platforms/ios/simctl.jsView file

•matchType = normalized_sha256 matchedPackage = @depup/expo__cli@57.0.22-depup.2 matchedPath = [redacted].js matchedIdentity = npm:QGRlcHVwL2V4cG9fX2NsaQ:57.0.22-depup.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/src/start/platforms/ios/simctl.jsView on unpkg