@hold-rein/cli: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@hold-rein/cli: Suspicious npm security report (Warn) | LPM Firewall

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

`dist/runtime/api/modules/agents/shell-exec-tool.js` defines `shell_exec` and passes an arbitrary command to its execution environment.
`dist/runtime/api/runtime.js` starts an unauthenticated Express service; user can explicitly bind it beyond loopback.
`dist/runtime/api/plugin.js` dynamically imports installed and `--plugin-dev` plugin entries, executing their module code.
`dist/runtime/api/config/env.js` creates and loads `$HOME/.hold-rein/.env` and its plugin root at runtime.

Evidence against

`package.json` has no preinstall, install, or postinstall lifecycle hook.
`dist/cli.js` only dispatches explicit CLI arguments; package import does not start the service.
`dist/index.js.map` shows plugin initialization/installation requires explicit `plugin init` or `plugin install` commands.
`dist/runtime/api/runtime.js` defaults to `127.0.0.1:3001`; no hard-coded external exfiltration endpoint was found.
`dist/runtime/api/modules/skills/skills-service.js` restricts its networked clone helper to user-supplied GitHub repository URLs.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

Manifest

NoLicense

scanned 213 file(s), 3.36 MB of source, external domains: bugzilla.mozilla.org, code.google.com, developer.mozilla.org, developers.google.com, drafts.csswg.org, en.wikipedia.org, github.com, googlechrome.github.io, hacks.mozilla.org, help.yahoo.com, html.spec.whatwg.org, json-schema.org, r12a.github.io, react.dev, sass-lang.com, schema.org, stackoverflow.com, support.google.com, tools.ietf.org, wiki.whatwg.org, www.bing.com, www.dmoz.org, www.iana.org, www.ietf.org, www.w3.org, www.whatwg.org

Oversized source lightweight scan

dist/runtime/web/assets/index-Bfurt1dJ.js8.03 MB file, sampled 256 KB

NetworkHighEntropyStringsMinifiedUrlStringsreact.dev

dist/runtime/web/assets/ts.worker-59MjiAqk.js6.70 MB file, sampled 256 KB

FilesystemNetworkChildProcessShell

Source & flagged code

3 flagged

dist/runtime/api/plugin.jsView file

Lines 51-91javascript

51 activeDevPluginManager = undefined;

52 devImportVersion = 0;

53 activeDevPlugins = [];

54}

55export async function createRuntimePluginRequestHandler(context) {

56 activeRouteContext = context;

57 await rebuildPluginRouter(context);

58 return (request, response, next) => {

59 activePluginRouter(request, response, next);

60 };

61}

62async function rebuildPluginRouter(context) {

63 const nextPluginRouter = Router();

64 await pluginRegistry.registerRoutes(nextPluginRouter, context);

65 activePluginRouter = nextPluginRouter;

66}

67async function loadDevServerPlugins(options) {

68 if (options.entries.length === 0) {

69 return { plugins: [] };

70 }

71 devImportVersion += 1;

72 const importDevModule = options.importDevModule ?? ((url) => import(url));

73 const plugins = [];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/runtime/api/plugin.jsView on unpkg · L71

74 for (const entry of options.entries) {

75 const importUrl = toDevImportUrl(entry.entryPath, devImportVersion);

76 const module = await importDevModule(importUrl);

77 if (!module.default) {

78 throw new Error(`Plugin "${entry.manifest.id}" does not export a default plugin.`);

79 }

80 plugins.push({

81 ...module.default,

82 packageName: entry.manifest.packageName

83 });

84 }

85 return { plugins };

86}

87async function disposeDevPlugins(plugins) {

88 for (const plugin of plugins) {

89 await plugin.dispose?.();

90 }

91}

dist/runtime/web/assets/ts.worker-59MjiAqk.jsView file

•path = dist/runtime/web/assets/ts.worker-59MjiAqk.js kind = oversized_source_file sizeBytes = 7021308 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/runtime/web/assets/ts.worker-59MjiAqk.jsView on unpkg

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @hold-rein/cli@0.0.9 matchedIdentity = npm:QGhvbGQtcmVpbi9jbGk:0.0.9 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg