@github/copilot-win32-arm64@1.0.66: Clean npm security report | LPM Firewall

Loading npm security reports…

@github/copilot-win32-arm64@1.0.66: Clean npm security report | LPM Firewall

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

Ships Windows ARM64 native binaries: copilot.exe and prebuilds/win32-arm64/*.exe/*.node.
index.js can load app.js, voice-server.js, and native cli/runtime addons at CLI runtime.
preloads/extension_bootstrap.mjs imports EXTENSION_PATH, but only as an extension subprocess bootstrap path.

Evidence against

package.json has no install/preinstall/postinstall lifecycle scripts; bin points to copilot.exe only.
README.md and package.json identify this as the platform package for GitHub Copilot CLI win32-arm64.
sdk/index.js restricts non-builtin require resolution to inside the application directory, except vendored native modules.
preloads/extension_sdk_resolver.mjs only redirects @github/copilot-sdk imports to bundled SDK files.
app.js network/auth/env usage is aligned with Copilot CLI features, GitHub auth, semantic search, telemetry, extension/server modes, and user-invoked shell tools.
No source-inspected lifecycle persistence, credential harvesting/exfiltration, destructive install behavior, or reviewer/prompt manipulation found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 13 file(s), 1.47 MB of source, external domains: aka.ms, api.anthropic.com, api.github.com, collector.example.com, collector.internal, docs.github.com, example.com, github.com, malicious-site.com, mcp.notion.com, mcp.stripe.com, my-api.example.com, my-resource.openai.azure.com, no-color.org, proxy.corp.example, proxy.example.com

Oversized source lightweight scan

app.js8.06 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsHighEntropyStringsUrlStringsapi.anthropic.comapi.github.comcollector.example.comcollector.internaldocs.github.comexample.comgithub.commalicious-site.commcp.notion.commcp.stripe.commy-api.example.commy-resource.openai.azure.comno-color.orgproxy.corp.exampleproxy.example.com

sdk/index.js2.87 MB file, sampled 256 KB

FilesystemNetworkEnvironmentVarsObfuscatedHighEntropyStringsMinifiedUrlStringsgithub.com

Source & flagged code

9 flagged · loading source

index.jsView file

8L9: var Ve=Object.create;var B=Object.defineProperty;var Ue=Object.getOwnPropertyDescriptor;var je=Object.getOwnPropertyNames;var We=Object.getPrototypeOf,qe=Object.prototype.hasOwnPro... L10: `)}else s.length>0&&(t=A(s[0],"app.js"))}return t}import{existsSync as br}from"node:fs";import{basename as vr,resolve as xr}from"node:path";var Pe="extension_bootstrap.mjs";functio...

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L8

8L9: var Ve=Object.create;var B=Object.defineProperty;var Ue=Object.getOwnPropertyDescriptor;var je=Object.getOwnPropertyNames;var We=Object.getPrototypeOf,qe=Object.prototype.hasOwnPro... L10: `)}else s.length>0&&(t=A(s[0],"app.js"))}return t}import{existsSync as br}from"node:fs";import{basename as vr,resolve as xr}from"node:path";var Pe="extension_bootstrap.mjs";functio... ... L14: ${s}`)}function Hr(e){if(e instanceof Error)return e.message;if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return Object.prototype.toString.call(e)}}function Ae... L15: `),process.exit(1)}}else if(process.env.COPILOT_SHUTDOWN_FLUSH){try{let{url:e,headers:r,body:t}=JSON.parse(process.env.COPILOT_SHUTDOWN_FLUSH);await fetch(e,{method:"POST",headers:...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L8

8L9: var Ve=Object.create;var B=Object.defineProperty;var Ue=Object.getOwnPropertyDescriptor;var je=Object.getOwnPropertyNames;var We=Object.getPrototypeOf,qe=Object.prototype.hasOwnPro... L10: `)}else s.length>0&&(t=A(s[0],"app.js"))}return t}import{existsSync as br}from"node:fs";import{basename as vr,resolve as xr}from"node:path";var Pe="extension_bootstrap.mjs";functio... ... L14: ${s}`)}function Hr(e){if(e instanceof Error)return e.message;if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return Object.prototype.toString.call(e)}}function Ae... L15: `),process.exit(1)}}else if(process.env.COPILOT_SHUTDOWN_FLUSH){try{let{url:e,headers:r,body:t}=JSON.parse(process.env.COPILOT_SHUTDOWN_FLUSH);await fetch(e,{method:"POST",headers:...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

index.jsView on unpkg · L8

preloads/extension_bootstrap.mjsView file

15// Register a CJS require hook so that CommonJS extensions can L16: // `require("@github/copilot-sdk")` and have it resolve to the bundled SDK. L17: const sdkPath = process.env.COPILOT_SDK_PATH;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

preloads/extension_bootstrap.mjsView on unpkg · L15

copilot-sdk/index.jsView file

839Cross-file remote execution chain: copilot-sdk/index.js spawns index.js; helper contains network access plus dynamic code execution. L839: /** L840: * To be kept private to fire an event to L841: * subscribers ... L1377: try { L1378: await this.writable.write(headers.join(""), "ascii"); L1379: return this.writable.write(data); ... L2890: fromString(value, encoding) { L2891: return Buffer.from(value, encoding); L2892: } ... L3058: var crypto_1 = __require("crypto"); L3059: var net_1 = __require("net"); L3060: var api_1 = require_api();

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

copilot-sdk/index.jsView on unpkg · L839

prebuilds/win32-arm64/cli-native.nodeView file

•path = prebuilds/win32-arm64/cli-native.node kind = native_binary sizeBytes = 882464 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

prebuilds/win32-arm64/cli-native.nodeView on unpkg

tree-sitter-go.wasmView file

•path = tree-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

tree-sitter-go.wasmView on unpkg

sdk/index.jsView file

•path = sdk/index.js kind = oversized_source_file sizeBytes = 3010127 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

sdk/index.jsView on unpkg

app.jsView file

•path = app.js kind = oversized_cli_entrypoint sizeBytes = 8454521 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

app.jsView on unpkg

Source & flagged code

9 flagged

index.jsView file

Lines 1-16javascript

1#!/usr/bin/env node

2

3/*---------------------------------------------------------------------------------------------

4 * Copyright (c) Microsoft Corporation. All rights reserved.

5 *--------------------------------------------------------------------------------------------*/

6import __module from "module";

7const require = __module.createRequire(import.meta.url);

8

9var Ve=Object.create;var B=Object.defineProperty;var Ue=Object.getOwnPropertyDescriptor;var je=Object.getOwnPropertyNames;var We=Object.getPrototypeOf,qe=Object.prototype.hasOwnProperty;var M=(e=>typeof require<"u"

10`)}else s.length>0&&(t=A(s[0],"app.js"))}return t}import{existsSync as br}from"node:fs";import{basename as vr,resolve as xr}from"node:path";var Pe="extension_bootstrap.mjs"

11`);let o=xr(r,"preloads",Pe),i=t(o);if(process.stderr.write(`[extension-fork] resolveBootstrapPath: localBootstrap=${o}, localExists=${i}

12`),i)return o}var Er=new Set(["--server","--headless","--acp"]),Lr=new Set(["completion","help","init","login","mcp","plugin","update","version"]);function

13`);throw new Error(`Native addon "${e}" not found for ${t}. Tried:

14${s}`)}function Hr(e){if(e instanceof Error)return e.message;if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return Object.prototype.toString.call(e)}}function Ae(e){try{return{ok:!0,value:kr(e)}}catch(r){return{ok:!1,err:r}}}function kr(e){return Or(Nr(import.meta.url))(e)}var v,ke=Re.dirname(Rr(import.meta.url));function De(){if(v){if(v.kind==="ok")return v.addon;throw v.error}try{let e=He("cli-native",[ke,Re.resolve(ke,"..","native","cli")]);return v={kind:"ok",addon:e},e}catch(e){let r=e instanceof Error?e:new Error(`Failed to load cli-native addon: ${Ie(e)}`);throw v={ki ...

15`),process.exit(1)}}else if(process.env.COPILOT_SHUTDOWN_FLUSH){try{let{url:e,headers:r,body:t}=JSON.parse(process.env.COPILOT_SHUTDOWN_FLUSH);

16

Long lines were clipped for display.

preloads/extension_bootstrap.mjsView file

Lines 1-35javascript

1/*---------------------------------------------------------------------------------------------

2 * Copyright (c) Microsoft Corporation. All rights reserved.

3 *--------------------------------------------------------------------------------------------*/

4

5// Bootstrap script for extension subprocesses.

6// This is the fork target — it sets up the SDK resolver in-process,

7// then dynamically imports the user's extension via the EXTENSION_PATH env var.

8

9import Module from "node:module"

copilot-sdk/index.jsView file

Lines 819-859javascript

819 const result = {

820 dispose: () => {

821 if (!this._callbacks) {

822 return;

823 }

prebuilds/win32-arm64/cli-native.nodeView file

•path = prebuilds/win32-arm64/cli-native.node kind = native_binary sizeBytes = 882464 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

prebuilds/win32-arm64/cli-native.nodeView on unpkg

tree-sitter-go.wasmView file

•path = tree-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

tree-sitter-go.wasmView on unpkg

sdk/index.jsView file

•path = sdk/index.js kind = oversized_source_file sizeBytes = 3010127 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

sdk/index.jsView on unpkg

app.jsView file

•path = app.js kind = oversized_cli_entrypoint sizeBytes = 8454521 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

app.jsView on unpkg