@hanzlaa/rcode@4.11.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@hanzlaa/rcode@4.11.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

19 flagged · loading source

package.jsonView file

•devDependencies registry_only=@clack/prompts,diff,esbuild,fast-glob,nanospinner,picocolors,semver,zod

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•scripts.postinstall = node cli/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node cli/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/rcode.jsView file

117`),f(),n()};return{start:y,stop:h,message:(w="")=>{o=m(w??o)}}},_$=async(t,e)=>{let r={},n=Object.keys(t);for(let s of n){let i=t[s],o=await i({results:r})?.catch(a=>{throw a});if(... L118: `)}fg.exports={readPackageManifest:Po,verifyInstall:S$,verifyClaudeInstall:lg,verifyRulesInstall:Gc,verifyAntigravityInstall:dg,formatReport:E$}});var cs=v((HI,ft)=>{var D=require(... L119: `)+`

High

Child Process

Package source references child process execution.

dist/rcode.jsView on unpkg · L117

3var v=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports);var Qt=v((zF,Nu)=>{var yy=require("crypto"),at=require("fs"),pn=require("path");function Ou(t,e,r={}){let{encoding:n="... L4: `;Ou(t,n,r)}function _y(t,e){let r;try{r=at.lstatSync(t)}catch(o){return o.code==="ENOENT"?{ok:!0,reason:"missing"}:{ok:!1,reason:`lstat: ${o.message}`}}if(r.isSymbolicLink())try{r... L5: `).reduce((r,n)=>r+=Math.max(1,Math.ceil(n.length/e)),0)}function jy(t="",e={}){let r=0,n=e.interval||50,s=e.stream||process.stderr,i=e.frames&&e.frames.length?e.frames:Mt.symbols.... L6: `,h.write(C,!0),Mt.isTTY&&(c=Fy(C,s.columns)),h},spin(){return h.render(),r=++r%i.length,h},update(C){return typeof C=="string"?t=C:(t=C.text||t,i=C.frames&&C.frames.length?C.frame... L7: `}`:"",!0),Mt.isTTY&&!A?h.write("\x1B[?25h")

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/rcode.jsView on unpkg · L3

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: w starter / advanced / ultra / standards tier map doctor run compliance check on skills set-profile change model profile (quality | balanced | budget | inherit) set-mode toggle communication mode (guided | yolo) version print version help show this help getting started: cd my-project rcode install # set up agents + slash commands rcode tiers # see the golden path rcode set-profile # choose model profile (quality | balanced | budget) documentation: https: `.trim())}function iu(t,e,r){_u()(["show",t,...e],r);let n=e.includes("--auto")||e.includes("--run");console.log(` \u2500\u2500\u2500\u2500\u2500\u2500

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/rcode.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @hanzlaa/rcode@4.10.5 matchedPath = dist/rcode.js matchedIdentity = npm:QGhhbnpsYWEvcmNvZGU:4.10.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/rcode.jsView on unpkg

2/* rcode — built with esbuild. Source: github.com/hanzlahabib/rihal-code */ L3: var v=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports);var Qt=v((zF,Nu)=>{var yy=require("crypto"),at=require("fs"),pn=require("path");function Ou(t,e,r={}){let{encoding:n="... L4: `;Ou(t,n,r)}function _y(t,e){let r;try{r=at.lstatSync(t)}catch(o){return o.code==="ENOENT"?{ok:!0,reason:"missing"}:{ok:!1,reason:`lstat: ${o.message}`}}if(r.isSymbolicLink())try{r...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/rcode.jsView on unpkg · L2

rcode/bin/lib/brain.cjsView file

212const BRAIN_ALLOWED_ORGS = new Set(['hanzlahabib', 'rcode-om']); L213: if (process.env.RCODE_BRAIN_ALLOW_UNVERIFIED !== '1') { L214: let host = '', org = ''; ... L240: // after this change. Cache TTL is configurable per source (defaults to 6h). L241: const { execSync, execFileSync: execFileSyncBrain } = require('child_process'); L242: const crypto = require('crypto'); ... L270: .slice(0, 16); L271: const cacheRoot = path.join(os.homedir(), '.rcode', 'brain-cache'); L272: const cacheDir = path.join(cacheRoot, cacheKey); ... L292: if (!fs.existsSync(cacheManifest)) return null; L293: try { return JSON.parse(fs.readFileSync(cacheManifest, 'utf8')); } L294: catch { return null; }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

rcode/bin/lib/brain.cjsView on unpkg · L212

server/dashboard.jsView file

22L23: const http = require('http'); L24: const path = require('path'); ... L27: const crypto = require('crypto'); L28: const { spawn } = require('child_process'); L29: ... L37: // ---------- Configuration ---------- L38: let PORT = parseInt(process.env.PORT || '7717', 10); L39: // #969 — the orchestrator's actual port, injected into the client so it never

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

server/dashboard.jsView on unpkg · L22

cli/postinstall.jsView file

4* Auto-installs commands, skills, workflows, and bin tools into the global L5: * Claude Code directory (~/.claude/) so every project can use rcode immediately L6: * without needing a per-project `rcode install` run. ... L61: // #924 — opt-out for users who install the package globally but do NOT want L62: // their ~/.claude mutated (e.g. inspecting the package, or managing the global L63: // install themselves). Setting RCODE_NO_POSTINSTALL=1 (or the npm-config ... L80: L81: const globalTarget = path.join(os.homedir(), '.claude'); L82: ... L109: }; L110: fs.mkdirSync(globalTarget, { recursive: true }); L111: fs.writeFileSync(receiptPath, JSON.stringify(receipt, null, 2) + '\n');

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

cli/postinstall.jsView on unpkg · L4

32Cross-file remote execution chain: cli/postinstall.js spawns dist/rcode.js; helper contains network access plus dynamic code execution. L32: * Pure function — takes its inputs explicitly so tests can drive every L33: * branch without needing to mutate process.env / __dirname / process.cwd. L34: * ... L67: if (require.main === module) { L68: if (process.env.CI || process.env.NODE_ENV === 'test') { L69: process.exit(0); ... L71: if (process.env.RCODE_NO_POSTINSTALL === '1' || process.env.npm[redacted]) { L72: process.stderr.write('\nrcode: skipping global auto-install (RCODE_NO_POSTINSTALL set).\n'); L73: process.stderr.write(" Run 'rcode install --global' when you want /rcode-* commands.\n\n"); ... L86: // devDependencies (picocolors, semver, etc.) are not installed for global package

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

cli/postinstall.jsView on unpkg · L32

cli/update.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. function detectinstallededitors(cwd) { const editors = []; const homeskills = path.join(homedir(), '.claude/skills'); const projectclaude = ( (fs.existssync(path.join(cwd, '.claude/skills')) && fs.readdirsync(path.join(cwd, '.claude/skills')).some(n => n.startswith('rcode-'))) || (fs.existssync(path.joi

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

cli/update.jsView on unpkg

rcode/skills/core/rcode-distillator/scripts/tests/test_analyze_sources.pyView file

•path = rcode/skills/core/rcode-distillator/scripts/tests/test_analyze_sources.py kind = payload_in_excluded_dir sizeBytes = 7723 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

rcode/skills/core/rcode-distillator/scripts/tests/test_analyze_sources.pyView on unpkg

•path = rcode/skills/core/rcode-distillator/scripts/tests/test_analyze_sources.py kind = build_helper sizeBytes = 7723 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

rcode/skills/core/rcode-distillator/scripts/tests/test_analyze_sources.pyView on unpkg

server/orchestrator.jsView file

•matchType = normalized_sha256 matchedPackage = @hanzlaa/rcode@4.10.5 matchedPath = server/orchestrator.js matchedIdentity = npm:QGhhbnpsYWEvcmNvZGU:4.10.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/orchestrator.jsView on unpkg

cli/agent.jsView file

•matchType = normalized_sha256 matchedPackage = @hanzlaa/rcode@4.10.5 matchedPath = cli/agent.js matchedIdentity = npm:QGhhbnpsYWEvcmNvZGU:4.10.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/agent.jsView on unpkg

rcode/bin/lib/memory-drift.cjsView file

•matchType = normalized_sha256 matchedPackage = @hanzlaa/rcode@4.10.5 matchedPath = rcode/bin/lib/memory-drift.cjs matchedIdentity = npm:QGhhbnpsYWEvcmNvZGU:4.10.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

rcode/bin/lib/memory-drift.cjsView on unpkg

Lines 97-137javascript

97${t}

98`.split(`

99`),n=Mc.stripVTControlCharacters(e).length,s=Math.max(r.reduce((o,a)=>{let c=Mc.stripVTControlCharacters(a);return c.length>o?c.length:o},0),n)+2,i=r.map(o=>`${_.gray(ee)} ${_.dim(o)}${" ".repeat(s-Mc.stripVTControlCharacters(o).length)}${_.gray(ee)}`).join(`

100`);process.stdout.write(`${_.gray(ee)}

101${_.green(To)} ${_.reset(e)} ${_.gray(ng.repeat(Math.max(s-n-1,1))+r$)}

102${i}

103${_.gray(n$+ng.repeat(s+2)+s$)}

104`)},D$=(t="")=>{process.stdout.write(`${_.gray(it)} ${_.red(t)}

105

106`)},y$=(t="")=>{process.stdout.write(`${_.gray(e$)} ${t}

107`)},v$=(t="")=>{process.stdout.write(`${_.gray(ee)}

108${_.gray(it)} ${t}

109

110`)},sn={message:(t="",{symbol:e=_.gray(ee)}={})=>{let r=[`${_.gray(ee)}`];if(t){let[n,...s]=t.split(`

111`);r.push(`${e} ${n}`,...s.map(i=>`${_.gray(ee)} ${i}`))}process.stdout.write(`${r.join(`

112`)}

113`)},info:t=>{sn.message(t,{symbol:_.blue(o$)})},success:t=>{sn.message(t,{symbol:_.green(i$)})},step:t=>{sn.message(t,{symbol:_.green(To)})},warn:t=>{sn.message(t,{symbol:_.yellow(a$)})},warning:t=>{sn.warn(t)},error:t=>{sn.message(t,{symbol:_.red(c$)})}},cg=()=>{let t=qc?["\u25D2","\u25D0","\u25D3","\u25D1"]:["\u2022","o","O","0"],e=qc?80:120,r=process.env.CI==="true",n,s,i=!1,o="",a,c=w=>{let C=w>1?"Something went wrong":"Canceled";i&&h(C,w)},u=()=>c(2),l=()=>c(1),d=()=>{process.on("uncaughtExceptionMonitor",u),process.on("unhandledRejection",u),process.on("SIGINT",l),process.on("SIGTERM",l) ...

114`);let w=a.split(`

115`);process.stdout.write(rg.cursor.move(-999,w.length-1)),process.stdout.write(rg.erase.down(w.length))},m=w=>w.replace(/\.+$/,""),y=

116`);let C=0,A=0;d(),s=setInterval(()=>{if(r&&o===a)return;g(),a=o;let T=_.

117`),f(),n()};return{start:y,stop:h,message:(w="")=>{o=m(w??o)}}},_$=async(t,e)=>{let r={},n=Object.

118`)}fg.exports={readPackageManifest:Po,verifyInstall:S$,verifyClaudeInstall:lg,verifyRulesInstall:Gc,verifyAntigravityInstall:dg,formatReport:E$}});var cs=v((HI,ft)=>{var D=require("fs"),p=require("path"),C$=require("crypto"),w$=require("os"),{writeFileAtomic:Oe,safeRmSync:Jc}=Qt(),{homedir:Qe}=hr(),J=Nn(),{createSpinner:x$}=Uu(),k$=Lf(),{z:Te}=Ya(),In=Jp(),{createTwoFilesPatch:hg}=Rm(),Pe=Vc(),ar=t=>J.green("\u2713")+" "+t,pg=t=>J.red("\u2717")+" "+t,Et=t=>J.yellow("\u26A0")+" "+t,Oo=t=>J.cyan("\u2192")+" "+t,Y=t=>J.dim(t),Tt=t=>J.bold(t),dt=p.resolve(__dirname,".."),Ae=p.join(dt,"rcode"),as=O ...

119`)+`

High

Child Process

Package source references child process execution.

dist/rcode.jsView on unpkg · L117

120`,encoding:"utf8"});return c.status!==0?{ok:!1,warning:`tar failed: ${(c.stderr||"").trim().split(`

121`)[0]}`,fileCount:n.length}:{ok:!0,path:a,fileCount:n.length}}function j$(t){let e=t||Ve(),r=["",J.cyan(

122`))}function mg(t){let e={claude:!1,cursor:!1,gemini:!1,vscode:!1,antigravity:!1,windsurf:!1,codex:!1};D.existsSync(p.join(t,".claude"))&&(e.claude=!0),D.existsSync(p.join(t,".cursor"))&&(e.cursor=!0),D.existsSync(p.join(t,".gemini"))&&(e.gemini=!0),D.existsSync(p.join(t,".vscode"))&&(e.vscode=!0),D.existsSync(p.join(t,".antigravity"))&&(e.antigravity=!0),D.existsSync(p.join(t,".windsurf"))&&(e.windsurf=!0);let r=Qe();return D.existsSync(p.join(r,".claude"))&&(e.claude=!0),D.existsSync(p.join(r,".cursor"))&&(e.cursor=!0),D.existsSync(p.join(r,".config","Cursor"))&&(e.cursor=!0),D.existsSync(p. ...

123`),{action:"merged"}}catch{return{action:"skipped-error"}}}function vg(){console.log(`

124rcode installer

125

126Usage:

127 node cli/install.js [target-dir]

128

129Options:

130 --force overwrite existing files without prompting

131 --reset with --force, also delete config.yaml and state.json to re-init

132 --yes non-interactive, accept defaults

133 --user <name> set user_name in config.yaml (default: $USER)

134 --project <name> set project_name (default: basename of target-dir)

135 --language <lang> set communication_language (default: English)

136 --mode <guided|yolo> default mode (default: guided)

137 --ide <name> target IDE (claude, cursor, gemini; default: claude)

Long lines were clipped for display.