Loading npm security reports…

@indigoai-us/hq-cloud@6.16.36: Malicious npm security report | LPM Firewall

registry / @indigoai-us/hq-cloud / 6.16.36

@indigoai-us/hq-cloud@6.16.36

HQ by Indigo cloud sync engine — bidirectional S3 sync for mobile access

AI Security Review

scanned 28d ago · by lpm-firewall-ai

A normal sync can automatically capture raw Claude, Codex, and Grok session logs into the synced workspace. Those transcripts are then sent to the personal vault/S3, and company telemetry can bypass personal opt-out.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Run the sync runner on a changed HQ tree.

Impact

Private coding-agent transcripts and related work metadata can leave the local machine without a separate collection action or personal consent.

Mechanism

Automatic session-log collection and cloud synchronization.

Attack narrative

After a sync with changes, the runner invokes reindex. Reindex copies matching local coding-harness transcripts into workspace/.session-logs, and the package deliberately includes that subtree in personal-vault S3 synchronization. Separately, it scans and uploads company-attributed telemetry even when personal consent is off. On agent identities it also materializes remotely synchronized content into the global Codex instruction file. These are concrete collection, exfiltration, and agent-control behaviors rather than ordinary cloud sync of user-selected project files.

AI rationale

The package automatically harvests raw agent session logs and routes them into cloud sync, while its telemetry bypasses personal opt-out for company-attributed activity. The guarded global Codex instruction rewrite compounds the risk.

Evidence

dist/bin/sync-runner.jsdist/cli/reindex.jsdist/session-log-capture.jsdist/personal-vault.jsdist/telemetry.js~/.claude/projects/**~/.codex/sessions/**/*.jsonl

Source & flagged code

17 flagged · loading source

dist/machine-auth.test.jsView file

•matchType = normalized_sha256 matchedPackage = @indigoai-us/hq-cloud@6.16.26 matchedPath = dist/machine-auth.test.js matchedIdentity = npm:QGluZGlnb2FpLXVzL2hxLWNsb3Vk:6.16.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/machine-auth.test.jsView on unpkg

54async function importModule() { L55: return await import("./cognito-auth.js"); L56: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/machine-auth.test.jsView on unpkg · L54

dist/journal-snapshot-memory-helpers.jsView file

9export const MIN_SNAPSHOT_BYTES_PER_ROW = 300; L10: const originalStateDir = process.env.HQ_STATE_DIR; L11: const stateDirs = [];

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/journal-snapshot-memory-helpers.jsView on unpkg · L9

dist/lib/machine-id.jsView file

23* Resolution order (first hit wins, every miss falls through): L24: * 1. `process.env.HQ_MACHINE_ID` — explicit override for CI / tests. L25: * 2. `<hqRoot>/.hq/machine-id` — source-of-truth on the host. ... L42: * load) so tests overriding `HOME` post-import see the right file. Going L43: * through `os.homedir()` rather than `process.env.HOME` keeps the Windows L44: * USERPROFILE fallback intact. ... L75: const raw = fs.readFileSync(menubarJsonPath(), "utf-8"); L76: const parsed = JSON.parse(raw); L77: if (typeof parsed.machineId === "string" && parsed.machineId.length > 0) {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/machine-id.jsView on unpkg · L23

dist/cli/reindex.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. _locked_exit }; emitreindextelemetry(opts, result, "locked"); return result; } if (err instanceof operationlockunwritableerror) { warn(err.message); const result = { status: operation_lock_unwritable_exit };

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/cli/reindex.jsView on unpkg

dist/cli/reindex.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 18

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/reindex.js#virtual:normalized:round1View on unpkg

dist/object-io.test.jsView file

•matchType = normalized_sha256 matchedPackage = @indigoai-us/hq-cloud@6.16.26 matchedPath = dist/object-io.test.js matchedIdentity = npm:QGluZGlnb2FpLXVzL2hxLWNsb3Vk:6.16.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/object-io.test.jsView on unpkg

dist/cli/rescue-core.jsView file

•matchType = normalized_sha256 matchedPackage = @indigoai-us/hq-cloud@6.16.26 matchedPath = dist/cli/rescue-core.js matchedIdentity = npm:QGluZGlnb2FpLXVzL2hxLWNsb3Vk:6.16.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/rescue-core.jsView on unpkg

dist/cli/rescue-drop-dir-symlink.test.jsView file

•matchType = normalized_sha256 matchedPackage = @indigoai-us/hq-cloud@6.16.26 matchedPath = dist/cli/rescue-drop-dir-symlink.test.js matchedIdentity = npm:QGluZGlnb2FpLXVzL2hxLWNsb3Vk:6.16.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/rescue-drop-dir-symlink.test.jsView on unpkg

dist/cli/rescue-exec-bit-preserve.test.jsView file

•matchType = normalized_sha256 matchedPackage = @indigoai-us/hq-cloud@6.16.26 matchedPath = dist/cli/rescue-exec-bit-preserve.test.js matchedIdentity = npm:QGluZGlnb2FpLXVzL2hxLWNsb3Vk:6.16.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/rescue-exec-bit-preserve.test.jsView on unpkg

dist/cli/rescue-journal-reconcile.test.jsView file

•matchType = normalized_sha256 matchedPackage = @indigoai-us/hq-cloud@6.16.26 matchedPath = dist/cli/rescue-journal-reconcile.test.js matchedIdentity = npm:QGluZGlnb2FpLXVzL2hxLWNsb3Vk:6.16.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/rescue-journal-reconcile.test.jsView on unpkg

dist/sync-core.jsView file

•matchType = normalized_sha256 matchedPackage = @indigoai-us/hq-cloud@6.16.26 matchedPath = dist/sync-core.js matchedIdentity = npm:QGluZGlnb2FpLXVzL2hxLWNsb3Vk:6.16.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/sync-core.jsView on unpkg

dist/sync/child-process-sync-worker.test.jsView file

•matchType = normalized_sha256 matchedPackage = @indigoai-us/hq-cloud@6.16.26 matchedPath = dist/sync/child-process-sync-worker.test.js matchedIdentity = npm:QGluZGlnb2FpLXVzL2hxLWNsb3Vk:6.16.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/sync/child-process-sync-worker.test.jsView on unpkg

dist/cli/rescue-classify-ordering.test.jsView file

•matchType = normalized_sha256 matchedPackage = @indigoai-us/hq-cloud@6.16.26 matchedPath = dist/cli/rescue-classify-ordering.test.js matchedIdentity = npm:QGluZGlnb2FpLXVzL2hxLWNsb3Vk:6.16.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/rescue-classify-ordering.test.jsView on unpkg

dist/cli/rescue-drift-reconcile.test.jsView file

•matchType = normalized_sha256 matchedPackage = @indigoai-us/hq-cloud@6.16.26 matchedPath = dist/cli/rescue-drift-reconcile.test.js matchedIdentity = npm:QGluZGlnb2FpLXVzL2hxLWNsb3Vk:6.16.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/rescue-drift-reconcile.test.jsView on unpkg

dist/cli/rescue-hq-root-guard.test.jsView file

•matchType = normalized_sha256 matchedPackage = @indigoai-us/hq-cloud@6.16.26 matchedPath = dist/cli/rescue-hq-root-guard.test.js matchedIdentity = npm:QGluZGlnb2FpLXVzL2hxLWNsb3Vk:6.16.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/rescue-hq-root-guard.test.jsView on unpkg

dist/cli/rescue-keep-local-ignore.test.jsView file

•matchType = normalized_sha256 matchedPackage = @indigoai-us/hq-cloud@6.16.26 matchedPath = dist/cli/rescue-keep-local-ignore.test.js matchedIdentity = npm:QGluZGlnb2FpLXVzL2hxLWNsb3Vk:6.16.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/rescue-keep-local-ignore.test.jsView on unpkg