@gajae-code/coding-agent@0.10.2: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@gajae-code/coding-agent@0.10.2: Suspicious npm security report | LPM Firewall

Source & flagged code

9 flagged · loading source

src/tools/eval.tsView file

617patternName = generic_password severity = medium line = 617 matchedText = pwd: "...

Medium

Secret Pattern

Package contains a possible secret pattern.

src/tools/eval.tsView on unpkg · L617

scripts/verify-insane-vendor.tsView file

14*/ L15: import { execFileSync } from "node:child_process"; L16: import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

scripts/verify-insane-vendor.tsView on unpkg · L14

src/utils/clipboard.tsView file

68L69: // PowerShell one-liner that emits the clipboard image as base64-encoded PNG on L70: // stdout, or nothing when the clipboard does not hold image data. Used as the

High

Shell

Package source references shell execution.

src/utils/clipboard.tsView on unpkg · L68

vendor/insane-search/engine/templates/playwright_mobile_chrome.jsView file

13L14: const dns = require('dns').promises; L15: const net = require('net');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

vendor/insane-search/engine/templates/playwright_mobile_chrome.jsView on unpkg · L13

src/utils/shell-snapshot.tsView file

4* Creates a snapshot file that captures the user's shell environment from their L5: * .bashrc/.zshrc, which can be sourced before each command to provide a familiar L6: * shell experience. ... L26: function getShellConfigFile(shell: string): string { L27: const home = os.homedir(); L28: if (shell.includes("zsh")) return path.join(home, ".zshrc"); ... L52: typeset -f > /dev/null 2>&1 L53: # Get user function names - filter system/private ones L54: typeset +f 2>/dev/null | grep -vE '^(_|__)' | grep -vE '${commonToolsRegex}' | while read func; do ... L135: // Skip on Windows (no .bashrc in standard location) L136: if (process.platform === "win32") { L137: return null;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/utils/shell-snapshot.tsView on unpkg · L4

src/internal-urls/docs-index.generated.tsView file

32"gpt-5.6-codex-preset-benchmark.md": "# GPT-5.6 Codex preset benchmark\n\nThis report records descriptive local exact-edit evidence and the product judgments used to assign GPT-5.6... L33: "grok-build-provider-design.md": "# Grok Build provider design\n\n## Status\n\nProposal for maintainer design review. This document intentionally does not add a bundled provider im... L34: "handoff-generation-pipeline.md": "# `/handoff` generation pipeline\n\nThis document describes how the coding-agent implements `/handoff`: trigger path, oneshot generation, session... ... L36: "hotspot-map-successor.md": "# cpu-hotspot-map.json — successor pointer\n\n[`cpu-hotspot-map.json`](./cpu-hotspot-map.json) is **closed out**. All 11 CPU hotspots (H01–H11) and 5 m... L37: "keybindings.md": "# Keybindings\n\

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/internal-urls/docs-index.generated.tsView on unpkg · L32

src/stt/setup.tsView file

3L4: const isWindows = process.platform === "win32"; L5: ... L14: const recorderHint = isWindows L15: ? "PowerShell fallback available. For better quality: install SoX or FFmpeg." L16: : "Install SoX: sudo apt install sox, or FFmpeg: sudo apt install ffmpeg"; ... L18: const pythonCmd = resolvePython(); L19: const pythonHint = "Install Python 3.8+ from https://python.org"; L20: ... L23: const check = Bun.spawnSync([pythonCmd, "-c", "import whisper"], { L24: stdout: "pipe", L25: stderr: "pipe",

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/stt/setup.tsView on unpkg · L3

vendor/insane-search/engine/phase0.pyView file

•path = vendor/insane-search/engine/phase0.py kind = build_helper sizeBytes = 9969 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/insane-search/engine/phase0.pyView on unpkg

src/gjc-runtime/tmux-owner-isolation.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @gajae-code/coding-agent@0.10.0 matchedIdentity = npm:[redacted]:0.10.0 similarity = 0.925 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/gjc-runtime/tmux-owner-isolation.tsView on unpkg

Source & flagged code

9 flagged

src/tools/eval.tsView file

Lines 597-637typescript

597 code,

598 title: typeof cell.title === "string" ? cell.title : undefined,

599 });

600 }

601 return out;

602}

603

604/** Format a status event as a single line for display. */

605function formatStatusEvent(event: EvalStatusEvent, theme: Theme): string {

606 const { op, ...data } = event;

607

608 type AvailableIcon = "icon.file" | "icon.folder" | "icon.git" | "icon.package";

609 const opIcons: Record<string, AvailableIcon> = {

610 read: "icon.file",

611 write: "icon.file",

612 append: "icon.file",

613 cat: "icon.file",

614 touch: "icon.file",

615 ls: "icon.folder",

616 cd: "icon.folder",

617 pwd: "icon.folder",

Medium

Secret Pattern

Package contains a possible secret pattern.

src/tools/eval.tsView on unpkg · L617

618 mkdir: "icon.folder",

619 tree: "icon.folder",

620 git_status: "icon.git",

621 git_diff: "icon.git",

622 git_log: "icon.git",

623 git_show: "icon.git",

624 git_branch: "icon.git",

625 git_file_at: "icon.git",

626 git_has_changes: "icon.git",

627 run: "icon.package",

628 sh: "icon.package",

629 env: "icon.package",

630 batch: "icon.package",

631 };

632

633 const iconKey = opIcons[op] ?? "icon.file";

634 const icon = theme.styledSymbol(iconKey, "muted");

635

636 const parts: string[] = [];

637

scripts/verify-insane-vendor.tsView file

Lines 1-34typescript

1#!/usr/bin/env bun

2/**

3 * Vendor verification for packages/coding-agent/vendor/insane-search.

4 *

5 * Asserts:

6 * 1. Forbidden upstream paths/patterns are absent (install hooks, star-baiting,

7 * update-notifier, transcript-language scanner, .claude-plugin).

8 * 2. MANIFEST.json exists and pins a full 40-char upstream commit SHA.

9 * 3. The vendored runtime files are present.

10 * 4. `npm pack --dry-run --json` includes the vendor tree (engine entrypoint,

src/utils/clipboard.tsView file

Lines 48-88typescript

48 }

49 }

50 }

51

52 // Also try native tools (best effort for local sessions)

53 try {

54 if (process.env.TERMUX_VERSION) {

55 try {

56

vendor/insane-search/engine/templates/playwright_mobile_chrome.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2/**

3 * Generic Playwright mobile fetcher — real Chrome + device emulation.

4 *

5 * Usage:

6 * echo '{"url":"...", "device":"iPhone 13 Pro"}' | node playwright_mobile_chrome.js

7 *

8 * Device name must match playwright `devices[...]` keys (Pixel 7, iPhone 13 Pro,

9 * iPad Pro 11, etc.). When in doubt, omit `device` — default is iPhone 13 Pro.

10 *

src/utils/shell-snapshot.tsView file

Lines 1-24typescript

1/**

2 * Shell environment snapshot for preserving user aliases, functions, and options.

3 *

4 * Creates a snapshot file that captures the user's shell environment from their

5 * .bashrc/.zshrc, which can be sourced before each command to provide a familiar

6 * shell experience.

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/utils/shell-snapshot.tsView on unpkg · L4

7 */

8import

src/internal-urls/docs-index.generated.tsView file

32"gpt-5.6-codex-preset-benchmark.md": "# GPT-5.6 Codex preset benchmark\n\nThis report records descriptive local exact-edit evidence and the product judgments used to assign GPT-5.6... L33: "grok-build-provider-design.md": "# Grok Build provider design\n\n## Status\n\nProposal for maintainer design review. This document intentionally does not add a bundled provider im... L34: "handoff-generation-pipeline.md": "# `/handoff` generation pipeline\n\nThis document describes how the coding-agent implements `/handoff`: trigger path, oneshot generation, session... ... L36: "hotspot-map-successor.md": "# cpu-hotspot-map.json — successor pointer\n\n[`cpu-hotspot-map.json`](./cpu-hotspot-map.json) is **closed out**. All 11 CPU hotspots (H01–H11) and 5 m... L37: "keybindings.md": "# Keybindings\n\

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/internal-urls/docs-index.generated.tsView on unpkg · L32

src/stt/setup.tsView file

Lines 1-23typescript

1import { detectRecordingTools } from "./recorder";

2import { resolvePython } from "./transcriber";

3

4const isWindows = process.platform === "win32";

5

vendor/insane-search/engine/phase0.pyView file

•path = vendor/insane-search/engine/phase0.py kind = build_helper sizeBytes = 9969 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/insane-search/engine/phase0.pyView on unpkg

src/gjc-runtime/tmux-owner-isolation.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @gajae-code/coding-agent@0.10.0 matchedIdentity = npm:[redacted]:0.10.0 similarity = 0.925 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/gjc-runtime/tmux-owner-isolation.tsView on unpkg