@gobi-starweaver/ws-cli@0.3.5: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@gobi-starweaver/ws-cli@0.3.5: Suspicious npm security report | LPM Firewall

Source & flagged code

8 flagged · loading source

mcp/servers/doc-toolchain-server.jsView file

926init_esbuild_shims(); L927: import { spawn } from "node:child_process"; L928: import * as fs from "node:fs";

High

Child Process

Package source references child process execution.

mcp/servers/doc-toolchain-server.jsView on unpkg · L926

cli.jsView file

6Source sends the broad process environment to a literal external destination. L6: __commonJS, L7: __dirname, L8: __export, ... L495: ]; L496: if (process.platform !== "win32") { L497: module2.exports.push( ... L644: } L645: process24.exitCode = code || /* istanbul ignore next */ L646: 0; ... L1020: function formatProdErrorMessage(code) { L1021: var url2 = "https://react.dev/errors/" + code; L1022: if (1 < arguments.length) {

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

cli.jsView on unpkg · L6

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. cli.js: "Authorization", "Proxy-Authorization", get baseUrl() { return this.baseUrl?.origin; this[kProxyHeaders]["proxy-authorization"] = `Basic ${opts.auth}`; this[kProxyHeaders]["proxy-authorization"] = opts.token; this[kProxyHeaders]["proxy-authorization"] = `Basic ${Buffer.from(`${decodeURIComponent(username)}:${decodeURIComponent(password)}`).toString("base64")}`; const existProxyAuth = headers && Object.keys(headers).find((key) => key.toLowerCase() === "proxy-authorization");

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

cli.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. cli.js: // node_modules/react/cjs/react.production.js "node_modules/react/cjs/react.production.js"(exports2) { // node_modules/react/index.js "node_modules/react/index.js"(exports2, module2) { // node_modules/signal-exit/signals.js "node_modules/signal-exit/signals.js"(exports2, module2) { // node_modules/signal-exit/index.js "node_modules/signal-exit/index.js"(exports2, module2) {

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

cli.jsView on unpkg

6Cross-file remote execution chain: cli.js spawns chunks/devtools-V5WI5QLO.js; helper contains network access plus dynamic code execution. L6: __commonJS, L7: __dirname, L8: __export, ... L495: ]; L496: if (process.platform !== "win32") { L497: module2.exports.push( ... L644: } L645: process24.exitCode = code || /* istanbul ignore next */ L646: 0; ... L1020: function formatProdErrorMessage(code) { L1021: var url2 = "https://react.dev/errors/" + code; L1022: if (1 < arguments.length) {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

cli.jsView on unpkg · L6

•path = cli.js kind = oversized_source_file sizeBytes = 5214572 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

cli.jsView on unpkg

•path = cli.js kind = oversized_cli_entrypoint sizeBytes = 5214572 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

cli.jsView on unpkg

vendor/hj_corpus/hj_corpus_mcp_server.pyView file

•path = vendor/hj_corpus/hj_corpus_mcp_server.py kind = build_helper sizeBytes = 21718 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/hj_corpus/hj_corpus_mcp_server.pyView on unpkg

Source & flagged code

8 flagged

mcp/servers/doc-toolchain-server.jsView file

Lines 906-946javascript

906 }))

907 ].sort((a, b) => b.start - a.start || a.kind - b.kind || b.seq - a.seq);

908 let nextXml = documentXml;

909 for (const edit of edits) {

910 nextXml = nextXml.slice(0, edit.start) + edit.xml + nextXml.slice(edit.end);

911 }

912 const after = walkBody(tokenizeXml(nextXml));

913 const nextEntries = entries.map(

914 (entry) => entry.name === "word/document.xml" ? { name: entry.name, data: Buffer.from(nextXml, "utf8") } : { name: entry.name, data: inflateZipEntry(entry) }

915 );

916 return {

917 buffer: writeZip(nextEntries),

918 applied: ops.length,

919 paragraphCountBefore: walk.paragraphSpans.length,

920 paragraphCountAfter: after.paragraphSpans.length

921 };

922}

923__name(editDocx, "editDocx");

924

925// packages/core/src/mcp/servers/doc-toolchain/convert.ts

926init_esbuild_shims();

927import { spawn } from "node:child_process";

928import * as fs from "node:fs";

High

Child Process

Package source references child process execution.

mcp/servers/doc-toolchain-server.jsView on unpkg · L926

929import * as os from "node:os";

930import * as path from "node:path";

931import { pathToFileURL } from "node:url";

932var OUTPUT_CAPTURE_LIMIT = 64 * 1024;

933function appendCapped(previous, chunk) {

934 if (previous.length >= OUTPUT_CAPTURE_LIMIT) return previous;

935 return (previous + chunk).slice(0, OUTPUT_CAPTURE_LIMIT);

936}

937__name(appendCapped, "appendCapped");

938var defaultRunProcess = /* @__PURE__ */ __name((command, args, options) => new Promise((resolve3) => {

939 let settled = false;

940 let child;

941 try {

942 child = spawn(command, args, {

943 env: options.env,

944 shell: false,

945 windowsHide: true

946 });

cli.jsView file

6Source sends the broad process environment to a literal external destination. L6: __commonJS, L7: __dirname, L8: __export, ... L495: ]; L496: if (process.platform !== "win32") { L497: module2.exports.push( ... L644: } L645: process24.exitCode = code || /* istanbul ignore next */ L646: 0; ... L1020: function formatProdErrorMessage(code) { L1021: var url2 = "https://react.dev/errors/" + code; L1022: if (1 < arguments.length) {

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

cli.jsView on unpkg · L6

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. cli.js: "Authorization", "Proxy-Authorization", get baseUrl() { return this.baseUrl?.origin; this[kProxyHeaders]["proxy-authorization"] = `Basic ${opts.auth}`; this[kProxyHeaders]["proxy-authorization"] = opts.token; this[kProxyHeaders]["proxy-authorization"] = `Basic ${Buffer.from(`${decodeURIComponent(username)}:${decodeURIComponent(password)}`).toString("base64")}`; const existProxyAuth = headers && Object.keys(headers).find((key) => key.toLowerCase() === "proxy-authorization");

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

cli.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. cli.js: // node_modules/react/cjs/react.production.js "node_modules/react/cjs/react.production.js"(exports2) { // node_modules/react/index.js "node_modules/react/index.js"(exports2, module2) { // node_modules/signal-exit/signals.js "node_modules/signal-exit/signals.js"(exports2, module2) { // node_modules/signal-exit/index.js "node_modules/signal-exit/index.js"(exports2, module2) {

vendor/hj_corpus/hj_corpus_mcp_server.pyView file

•path = vendor/hj_corpus/hj_corpus_mcp_server.py kind = build_helper sizeBytes = 21718 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/hj_corpus/hj_corpus_mcp_server.pyView on unpkg