Loading npm security reports…

@gajae-code/coding-agent@0.11.3: Suspicious npm security report | LPM Firewall

registry / @gajae-code/coding-agent / 0.11.3

@gajae-code/coding-agent@0.11.3

Gajae Code CLI with read, bash, edit, write tools and session management

Static Scan Results

scanned 15h ago · by rust-scanner

Static analysis flagged 18 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,160 file(s), 14.2 MB of source, external domains: 127.0.0.1, addons.mozilla.org, api.anthropic.com, api.coingecko.com, api.crossref.org, api.deepinfra.com, api.discogs.com, api.exa.ai, api.example.com, api.github.com, api.kimi.com, api.layofflabs.com, api.minimax.io, api.npmjs.org, api.nuget.org, api.openai.com, api.opencorporates.com, api.osv.dev, api.parallel.ai, api.perplexity.ai, api.proxy.example, api.rawg.io, api.search.brave.com, api.semanticscholar.org, api.smithery.ai, api.snapcraft.io, api.stackexchange.com, api.synthetic.new, api.tavily.com, api.telegram.org, api.w3.org, api.x.ai, api.z.ai, api.zenmux.example, artifacthub.io, arxiv.org, aside.com, aside.example.invalid, aur.archlinux.org, auth.example.com, auth.kimi.com, auth.x.ai, bedrock-runtime.us-east-1.amazonaws.com, broker.tailnet, cdn.syndication.twimg.com, cdnjs.cloudflare.com, chatgpt.com, cheat.sh, choosealicense.com, cli-chat-proxy.grok.com

Source & flagged code

9 flagged · loading source

src/tools/eval.tsView file

616patternName = generic_password severity = medium line = 616 matchedText = pwd: "...

Medium

Secret Pattern

Package contains a possible secret pattern.

src/tools/eval.tsView on unpkg · L616

scripts/verify-insane-vendor.tsView file

14*/ L15: import { execFileSync } from "node:child_process"; L16: import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

scripts/verify-insane-vendor.tsView on unpkg · L14

src/utils/clipboard.tsView file

68L69: // PowerShell one-liner that emits the clipboard image as base64-encoded PNG on L70: // stdout, or nothing when the clipboard does not hold image data. Used as the

High

Shell

Package source references shell execution.

src/utils/clipboard.tsView on unpkg · L68

scripts/build-sdk-package-smoke.tsView file

104probePath, L105: `import * as fs from "node:fs/promises";\nimport * as path from "node:path";\nimport * as root from ${JSON.stringify(packageName)};\nimport * as sdk from ${JSON.stringify(`${packag... L106: );

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/build-sdk-package-smoke.tsView on unpkg · L104

src/utils/shell-snapshot.tsView file

4* Creates a snapshot file that captures the user's shell environment from their L5: * .bashrc/.zshrc, which can be sourced before each command to provide a familiar L6: * shell experience. ... L26: function getShellConfigFile(shell: string): string { L27: const home = os.homedir(); L28: if (shell.includes("zsh")) return path.join(home, ".zshrc"); ... L52: typeset -f > /dev/null 2>&1 L53: # Get user function names - filter system/private ones L54: typeset +f 2>/dev/null | grep -vE '^(_|__)' | grep -vE '${commonToolsRegex}' | while read func; do ... L135: // Skip on Windows (no .bashrc in standard location) L136: if (process.platform === "win32") { L137: return null;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/utils/shell-snapshot.tsView on unpkg · L4

src/internal-urls/docs-index.generated.tsView file

34"gpt-5.6-codex-preset-benchmark.md": "# GPT-5.6 Codex preset benchmark\n\nThis report records descriptive local exact-edit evidence and the product judgments used to assign GPT-5.6... L35: "grok-build-provider-design.md": "# Grok Build provider design\n\n## Status\n\nProposal for maintainer design review. This document intentionally does not add a bundled provider im... L36: "handoff-generation-pipeline.md": "# `/handoff` generation pipeline\n\nThis document describes how the coding-agent implements `/handoff`: trigger path, oneshot generation, session... ... L38: "hotspot-map-successor.md": "# cpu-hotspot-map.json — successor pointer\n\n[`cpu-hotspot-map.json`](./cpu-hotspot-map.json) is **closed out**. All 11 CPU hotspots (H01–H11) and 5 m... L39: "keybindings.md": "# Keybindings\n\

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/internal-urls/docs-index.generated.tsView on unpkg · L34

src/stt/setup.tsView file

3L4: const isWindows = process.platform === "win32"; L5: ... L14: const recorderHint = isWindows L15: ? "PowerShell fallback available. For better quality: install SoX or FFmpeg." L16: : "Install SoX: sudo apt install sox, or FFmpeg: sudo apt install ffmpeg"; ... L18: const pythonCmd = resolvePython(); L19: const pythonHint = "Install Python 3.8+ from https://python.org"; L20: ... L23: const check = Bun.spawnSync([pythonCmd, "-c", "import whisper"], { L24: stdout: "pipe", L25: stderr: "pipe",

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/stt/setup.tsView on unpkg · L3

vendor/insane-search/engine/phase0.pyView file

•path = vendor/insane-search/engine/phase0.py kind = build_helper sizeBytes = 11007 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/insane-search/engine/phase0.pyView on unpkg

src/gjc-runtime/launch-tmux.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @gajae-code/coding-agent@0.11.0 matchedIdentity = npm:[redacted]:0.11.0 similarity = 0.633 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/gjc-runtime/launch-tmux.tsView on unpkg

Source & flagged code

9 flagged

src/tools/eval.tsView file

Lines 596-636typescript

596 code,

597 title: typeof cell.title === "string" ? cell.title : undefined,

598 });

599 }

600 return out;

601}

602

603/** Format a status event as a single line for display. */

604function formatStatusEvent(event: EvalStatusEvent, theme: Theme): string {

605 const { op, ...data } = event;

606

607 type AvailableIcon = "icon.file" | "icon.folder" | "icon.git" | "icon.package";

608 const opIcons: Record<string, AvailableIcon> = {

609 read: "icon.file",

610 write: "icon.file",

611 append: "icon.file",

612 cat: "icon.file",

613 touch: "icon.file",

614 ls: "icon.folder",

615 cd: "icon.folder",

616 pwd: "icon.folder",

Medium

Secret Pattern

Package contains a possible secret pattern.

src/tools/eval.tsView on unpkg · L616

617 mkdir: "icon.folder",

618 tree: "icon.folder",

619 git_status: "icon.git",

620 git_diff: "icon.git",

621 git_log: "icon.git",

622 git_show: "icon.git",

623 git_branch: "icon.git",

624 git_file_at: "icon.git",

625 git_has_changes: "icon.git",

626 run: "icon.package",

627 sh: "icon.package",

628 env: "icon.package",

629 batch: "icon.package",

630 };

631

632 const iconKey = opIcons[op] ?? "icon.file";

633 const icon = theme.styledSymbol(iconKey, "muted");

634

635 const parts: string[] = [];

636

scripts/verify-insane-vendor.tsView file

Lines 1-34typescript

1#!/usr/bin/env bun

2/**

3 * Vendor verification for packages/coding-agent/vendor/insane-search.

4 *

5 * Asserts:

6 * 1. Forbidden upstream paths/patterns are absent (install hooks, star-baiting,

7 * update-notifier, transcript-language scanner, .claude-plugin).

8 * 2. MANIFEST.json exists and pins a full 40-char upstream commit SHA.

9 * 3. The vendored runtime files are present.

10 * 4. `npm pack --dry-run --json` includes the vendor tree (engine entrypoint,

src/utils/clipboard.tsView file

Lines 48-88typescript

48 }

49 }

50 }

51

52 // Also try native tools (best effort for local sessions)

53 try {

54 if (process.env.TERMUX_VERSION) {

55 try {

56

scripts/build-sdk-package-smoke.tsView file

Lines 84-124typescript

84 "@gajae-code/tui": `file:${tuiTarballPath}`,

85 "@gajae-code/natives": `file:${nativesTarballPath}`,

86 "@gajae-code/natives-linux-x64": `file:${linuxX64TarballPath}`,

87 },

src/utils/shell-snapshot.tsView file

Lines 1-24typescript

1/**

2 * Shell environment snapshot for preserving user aliases, functions, and options.

3 *

4 * Creates a snapshot file that captures the user's shell environment from their

5 * .bashrc/.zshrc, which can be sourced before each command to provide a familiar

6 * shell experience.

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/utils/shell-snapshot.tsView on unpkg · L4

7 */

8import

src/internal-urls/docs-index.generated.tsView file

34"gpt-5.6-codex-preset-benchmark.md": "# GPT-5.6 Codex preset benchmark\n\nThis report records descriptive local exact-edit evidence and the product judgments used to assign GPT-5.6... L35: "grok-build-provider-design.md": "# Grok Build provider design\n\n## Status\n\nProposal for maintainer design review. This document intentionally does not add a bundled provider im... L36: "handoff-generation-pipeline.md": "# `/handoff` generation pipeline\n\nThis document describes how the coding-agent implements `/handoff`: trigger path, oneshot generation, session... ... L38: "hotspot-map-successor.md": "# cpu-hotspot-map.json — successor pointer\n\n[`cpu-hotspot-map.json`](./cpu-hotspot-map.json) is **closed out**. All 11 CPU hotspots (H01–H11) and 5 m... L39: "keybindings.md": "# Keybindings\n\

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/internal-urls/docs-index.generated.tsView on unpkg · L34

src/stt/setup.tsView file

Lines 1-23typescript

1import { detectRecordingTools } from "./recorder";

2import { resolvePython } from "./transcriber";

3

4const isWindows = process.platform === "win32";

5

vendor/insane-search/engine/phase0.pyView file

•path = vendor/insane-search/engine/phase0.py kind = build_helper sizeBytes = 11007 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/insane-search/engine/phase0.pyView on unpkg

src/gjc-runtime/launch-tmux.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @gajae-code/coding-agent@0.11.0 matchedIdentity = npm:[redacted]:0.11.0 similarity = 0.633 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/gjc-runtime/launch-tmux.tsView on unpkg