registry / @firstpick/pi-package-webui / 0.6.8

@firstpick/pi-package-webui@0.6.8

⚠ Under review

Pi Web UI companion package with a local browser UI CLI plus /webui-start and /webui-status commands.

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 45 file(s), 2.40 MB of source, external domains: 127.0.0.1, api.openai.com, chatgpt.com, example.com, github.com, pi.dev, registry.npmjs.org, www.w3.org

Source & flagged code

7 flagged

bin/pi-webui.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawn } from "node:child_process";

3import { createHash, randomInt, randomUUID, timingSafeEqual } from "node:crypto";

High

Child Process

Package source references child process execution.

bin/pi-webui.mjsView on unpkg · L1

4import { createReadStream, readFileSync, realpathSync, statSync } from "node:fs";

5import { createServer } from "node:http";

6import { createRequire } from "node:module";

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

bin/pi-webui.mjsView on unpkg · L1

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

bin/pi-webui.mjsView on unpkg · L1

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/pi-webui.mjsView on unpkg · L1

7import { access, copyFile, mkdir, readFile, readdir, realpath, rename, rm, stat, writeFile } from "node:fs/promises";

8import { homedir, networkInterfaces, platform, tmpdir } from "node:os";

9import path from "node:path";

10import { StringDecoder } from "node:string_decoder";

11import { fileURLToPath, pathToFileURL } from "node:url";

12import { promisify } from "node:util";

13import { brotliCompress, constants as zlibConstants, gzip } from "node:zlib";

14import { SessionManager, SettingsManager, DefaultPackageManager } from "@earendil-works/pi-coding-agent";

15import { authProvidersPayload, createAuthContext, logoutStoredProvider } from "../lib/auth-actions.mjs";

16import { resolveCodexUsageAuth } from "../lib/codex-usage-auth.mjs";

17import { nativeExportDownloadPayload } from "../lib/native-export-payload.mjs";

18import {

19 collectOpenSessionFiles,

20 deleteSessionFile,

21 isSessionPathAllowed,

Lines 58-98javascript

58} from "../lib/trust-boundaries.mjs";

59import {

60 nativeCommandBlocked,

61 nativeCommandResponse,

62 nativeCommandUnavailable,

63 nativeSlashCommandEntries,

64 parseSlashCommand as parseNativeSlashCommand,

65} from "../lib/native-command-adapter.mjs";

66import {

•matchType = previous_version_dangerous_delta matchedPackage = @firstpick/pi-package-webui@0.6.3 matchedIdentity = npm:[redacted]:0.6.3 similarity = 0.481 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/pi-webui.mjsView on unpkg

tests/markdown-links.test.mjsView file

Lines 35-75javascript

35 assert.fail(`${name} body should close`);

36}

38const helperNames = [

39 "markdownFilePathFromHref",

40 "safeMarkdownLinkHref",

Source & flagged code

7 flagged · loading source

bin/pi-webui.mjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code