registry / @firstpick/pi-package-webui / 0.6.9

@firstpick/pi-package-webui@0.6.9

⚠ Under review

Pi Web UI companion package with a local browser UI CLI plus /webui-start and /webui-status commands.

Static Scan Results

scanned 9h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 45 file(s), 2.43 MB of source, external domains: 127.0.0.1, api.github.com, api.openai.com, chatgpt.com, example.com, github.com, pi.dev, registry.npmjs.org, www.npmjs.com, www.w3.org

Source & flagged code

7 flagged

bin/pi-webui.mjsView file

1#!/usr/bin/env node L2: import { spawn } from "node:child_process"; L3: import { createHash, randomInt, randomUUID, timingSafeEqual } from "node:crypto"; L4: import { createReadStream, readFileSync, realpathSync, statSync } from "node:fs"; L5: import { createServer } from "node:http"; L6: import { createRequire } from "node:module"; ... L77: L78: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L79: const require = createRequire(import.meta.url); ... L82: const webuiHelperExtensionPath = path.join(packageRoot, "webui-rpc-helper.mjs"); L83: const agentDir = process.env.PI_CODING_AGENT_DIR || path.join(homedir(), ".pi", "agent"); L84: const OPTIONAL_FEATURE_INSTALL_ROOT_ENV = "PI_WEBUI_OPTIONAL_FEATURE_INSTALL_ROOT";

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

bin/pi-webui.mjsView on unpkg · L1

1Trigger-reachable chain: manifest.bin -> bin/pi-webui.mjs L1: #!/usr/bin/env node L2: import { spawn } from "node:child_process"; L3: import { createHash, randomInt, randomUUID, timingSafeEqual } from "node:crypto"; L4: import { createReadStream, readFileSync, realpathSync, statSync } from "node:fs"; L5: import { createServer } from "node:http"; L6: import { createRequire } from "node:module"; ... L77: L78: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L79: const require = createRequire(import.meta.url); ... L82: const webuiHelperExtensionPath = path.join(packageRoot, "webui-rpc-helper.mjs"); L83: const agentDir = process.env.PI_CODING_AGENT_DIR || path.join(homedir(), ".pi", "agent"); L84: const OPTIONAL_FEATURE_INSTALL_ROOT_ENV = "PI_WEBUI_OPTIONAL_FEATURE_INSTALL_ROOT

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

bin/pi-webui.mjsView on unpkg · L1

•matchType = previous_version_dangerous_delta matchedPackage = @firstpick/pi-package-webui@0.6.3 matchedIdentity = npm:[redacted]:0.6.3 similarity = 0.481 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/pi-webui.mjsView on unpkg

1#!/usr/bin/env node L2: import { spawn } from "node:child_process"; L3: import { createHash, randomInt, randomUUID, timingSafeEqual } from "node:crypto";

High

Child Process

Package source references child process execution.

bin/pi-webui.mjsView on unpkg · L1

78const __dirname = path.dirname(fileURLToPath(import.meta.url)); L79: const require = createRequire(import.meta.url); L80: const packageRoot = path.resolve(__dirname, "..");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/pi-webui.mjsView on unpkg · L78

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/pi-webui.mjsView on unpkg · L1

tests/markdown-links.test.mjsView file

Lines 35-75javascript

35 assert.fail(`${name} body should close`);

36}

38const helperNames = [

39 "markdownFilePathFromHref",

40 "safeMarkdownLinkHref",

Source & flagged code

7 flagged · loading source

bin/pi-webui.mjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code