@gajae-code/coding-agent: Suspicious npm security report (Warn)

Loading npm security reports…

Source & flagged code

9 flagged

src/tools/eval.tsView file

Lines 596-636typescript

596 code,

597 title: typeof cell.title === "string" ? cell.title : undefined,

598 });

599 }

600 return out;

601}

602

603/** Format a status event as a single line for display. */

604function formatStatusEvent(event: EvalStatusEvent, theme: Theme): string {

605 const { op, ...data } = event;

606

607 type AvailableIcon = "icon.file" | "icon.folder" | "icon.git" | "icon.package";

608 const opIcons: Record<string, AvailableIcon> = {

609 read: "icon.file",

610 write: "icon.file",

611 append: "icon.file",

612 cat: "icon.file",

613 touch: "icon.file",

614 ls: "icon.folder",

615 cd: "icon.folder",

616 pwd: "icon.folder",

Medium

Secret Pattern

Package contains a possible secret pattern.

src/tools/eval.tsView on unpkg · L616

617 mkdir: "icon.folder",

618 tree: "icon.folder",

619 git_status: "icon.git",

620 git_diff: "icon.git",

621 git_log: "icon.git",

622 git_show: "icon.git",

623 git_branch: "icon.git",

624 git_file_at: "icon.git",

625 git_has_changes: "icon.git",

626 run: "icon.package",

627 sh: "icon.package",

628 env: "icon.package",

629 batch: "icon.package",

630 };

631

632 const iconKey = opIcons[op] ?? "icon.file";

633 const icon = theme.styledSymbol(iconKey, "muted");

634

635 const parts: string[] = [];

636

scripts/verify-insane-vendor.tsView file

Lines 1-34typescript

1#!/usr/bin/env bun

2/**

3 * Vendor verification for packages/coding-agent/vendor/insane-search.

4 *

5 * Asserts:

6 * 1. Forbidden upstream paths/patterns are absent (install hooks, star-baiting,

7 * update-notifier, transcript-language scanner, .claude-plugin).

8 * 2. MANIFEST.json exists and pins a full 40-char upstream commit SHA.

9 * 3. The vendored runtime files are present.

10 * 4. `npm pack --dry-run --json` includes the vendor tree (engine entrypoint,

src/utils/clipboard.tsView file

Lines 48-88typescript

48 }

49 }

50 }

52 // Also try native tools (best effort for local sessions)

53 try {

54 if (process.env.TERMUX_VERSION) {

55 try {

scripts/build-sdk-package-smoke.tsView file

Lines 84-124typescript

84 "@gajae-code/tui": `file:${tuiTarballPath}`,

85 "@gajae-code/natives": `file:${nativesTarballPath}`,

86 "@gajae-code/natives-linux-x64": `file:${linuxX64TarballPath}`,

87 },

src/utils/shell-snapshot.tsView file

Lines 1-24typescript

1/**

2 * Shell environment snapshot for preserving user aliases, functions, and options.

3 *

4 * Creates a snapshot file that captures the user's shell environment from their

5 * .bashrc/.zshrc, which can be sourced before each command to provide a familiar

6 * shell experience.

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/utils/shell-snapshot.tsView on unpkg · L4

7 */

8import

src/internal-urls/docs-index.generated.tsView file

34"gpt-5.6-codex-preset-benchmark.md": "# GPT-5.6 Codex preset benchmark\n\nThis report records descriptive local exact-edit evidence and the product judgments used to assign GPT-5.6... L35: "grok-build-provider-design.md": "# Grok Build provider design\n\n## Status\n\nProposal for maintainer design review. This document intentionally does not add a bundled provider im... L36: "handoff-generation-pipeline.md": "# `/handoff` generation pipeline\n\nThis document describes how the coding-agent implements `/handoff`: trigger path, oneshot generation, session... ... L38: "hotspot-map-successor.md": "# cpu-hotspot-map.json — successor pointer\n\n[`cpu-hotspot-map.json`](./cpu-hotspot-map.json) is **closed out**. All 11 CPU hotspots (H01–H11) and 5 m... L39: "keybindings.md": "# Keybindings\n\

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/internal-urls/docs-index.generated.tsView on unpkg · L34

src/stt/setup.tsView file

Lines 1-23typescript

1import { detectRecordingTools } from "./recorder";

2import { resolvePython } from "./transcriber";

4const isWindows = process.platform === "win32";

vendor/insane-search/engine/phase0.pyView file

•path = vendor/insane-search/engine/phase0.py kind = build_helper sizeBytes = 11007 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/insane-search/engine/phase0.pyView on unpkg

src/gjc-runtime/launch-tmux.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @gajae-code/coding-agent@0.11.0 matchedIdentity = npm:[redacted]:0.11.0 similarity = 0.633 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/gjc-runtime/launch-tmux.tsView on unpkg

Source & flagged code

9 flagged · loading source

src/tools/eval.tsView file

616patternName = generic_password severity = medium line = 616 matchedText = pwd: "...

Medium

Secret Pattern

Package contains a possible secret pattern.

src/tools/eval.tsView on unpkg · L616

scripts/verify-insane-vendor.tsView file

14*/ L15: import { execFileSync } from "node:child_process"; L16: import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

scripts/verify-insane-vendor.tsView on unpkg · L14

src/utils/clipboard.tsView file

68L69: // PowerShell one-liner that emits the clipboard image as base64-encoded PNG on L70: // stdout, or nothing when the clipboard does not hold image data. Used as the

@gajae-code/coding-agent: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

9 flagged

src/tools/eval.tsView file

Lines 596-636typescript

596 code,

597 title: typeof cell.title === "string" ? cell.title : undefined,

598 });

599 }

600 return out;

601}

602

603/** Format a status event as a single line for display. */

604function formatStatusEvent(event: EvalStatusEvent, theme: Theme): string {

605 const { op, ...data } = event;

606

607 type AvailableIcon = "icon.file" | "icon.folder" | "icon.git" | "icon.package";

608 const opIcons: Record<string, AvailableIcon> = {

609 read: "icon.file",

610 write: "icon.file",

611 append: "icon.file",

612 cat: "icon.file",

613 touch: "icon.file",

614 ls: "icon.folder",

615 cd: "icon.folder",

616 pwd: "icon.folder",

Medium

Secret Pattern

Package contains a possible secret pattern.

src/tools/eval.tsView on unpkg · L616

617 mkdir: "icon.folder",

618 tree: "icon.folder",

619 git_status: "icon.git",

620 git_diff: "icon.git",

621 git_log: "icon.git",

622 git_show: "icon.git",

623 git_branch: "icon.git",

624 git_file_at: "icon.git",

625 git_has_changes: "icon.git",

626 run: "icon.package",

627 sh: "icon.package",

628 env: "icon.package",

629 batch: "icon.package",

630 };

631

632 const iconKey = opIcons[op] ?? "icon.file";

633 const icon = theme.styledSymbol(iconKey, "muted");

634

635 const parts: string[] = [];

636

scripts/verify-insane-vendor.tsView file

Lines 1-34typescript

1#!/usr/bin/env bun

2/**

3 * Vendor verification for packages/coding-agent/vendor/insane-search.

4 *

5 * Asserts:

6 * 1. Forbidden upstream paths/patterns are absent (install hooks, star-baiting,

7 * update-notifier, transcript-language scanner, .claude-plugin).

8 * 2. MANIFEST.json exists and pins a full 40-char upstream commit SHA.

9 * 3. The vendored runtime files are present.

10 * 4. `npm pack --dry-run --json` includes the vendor tree (engine entrypoint,

src/utils/clipboard.tsView file

Lines 48-88typescript

48 }

49 }

50 }

52 // Also try native tools (best effort for local sessions)

53 try {

54 if (process.env.TERMUX_VERSION) {

55 try {

scripts/build-sdk-package-smoke.tsView file

Lines 84-124typescript

84 "@gajae-code/tui": `file:${tuiTarballPath}`,

85 "@gajae-code/natives": `file:${nativesTarballPath}`,

86 "@gajae-code/natives-linux-x64": `file:${linuxX64TarballPath}`,

87 },

src/utils/shell-snapshot.tsView file

Lines 1-24typescript

1/**

2 * Shell environment snapshot for preserving user aliases, functions, and options.

3 *

4 * Creates a snapshot file that captures the user's shell environment from their

5 * .bashrc/.zshrc, which can be sourced before each command to provide a familiar

6 * shell experience.

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/utils/shell-snapshot.tsView on unpkg · L4

7 */

8import

src/internal-urls/docs-index.generated.tsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/internal-urls/docs-index.generated.tsView on unpkg · L34

src/stt/setup.tsView file

Lines 1-23typescript

1import { detectRecordingTools } from "./recorder";

2import { resolvePython } from "./transcriber";

4const isWindows = process.platform === "win32";

vendor/insane-search/engine/phase0.pyView file

•path = vendor/insane-search/engine/phase0.py kind = build_helper sizeBytes = 11007 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/insane-search/engine/phase0.pyView on unpkg

src/gjc-runtime/launch-tmux.tsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/gjc-runtime/launch-tmux.tsView on unpkg

@gajae-code/coding-agent

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code