registry / @jacksondr5/j5code
@jacksondr5/j5code
This report shows the evidence for @jacksondr5/j5code@0.0.43. 0 of 5 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package is a coding agent CLI with a guarded executable entrypoint and purpose-aligned service and terminal process execution. The flagged Unicode search found a zero-width space used in editor text handling, not bidi control characters or concealed attack behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The CLI runs when invoked; the service launcher starts a managed server when configured.
Impact
No malicious impact was identified.
Mechanism
Observed process execution starts the package’s own service runtime or a configured interactive shell; no harmful credential flow or unrelated payload execution was identified.
AI rationale
The package is a coding agent CLI with a guarded executable entrypoint and purpose-aligned service and terminal process execution. The flagged Unicode search found a zero-width space used in editor text handling, not bidi control characters or concealed attack behavior.
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a CLI binary and has no lifecycle scripts.
- The CLI dispatches commands only when run as the process entrypoint.
- The service launcher starts the package’s own `serve` entry using its selected runtime version and passes launcher context through the environment.
- The Bun PTY adapter starts the configured shell with the supplied working directory and environment, consistent with terminal functionality.
- The editor’s invisible character is a zero-width space used in text handling; searches found no bidi control characters in the flagged file.
Evidence against
- The package contains process execution and network-capable integrations, which are expected for a coding agent CLI and its provider support.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
9 flaggeddist/service-launcher.mjsView file
2L3: import * as NodeChildProcess from "node:child_process";
L4: import * as NodeCrypto from "node:crypto";
High
Child Process
Package source references child process execution.
dist/service-launcher.mjsView on unpkg · L2dist/esm-CGPqnf-p.mjsView file
3import { r as __require, t as __commonJSMin } from "./rolldown-runtime-BgTbyHMW.mjs";
L4: import { c as compressionNegotiate, f as Code, g as protoBase64, l as ConnectError, m as MethodKind, p as MethodIdempotency, r as validateReadWriteMaxBytes } from "./limit-io-Bu7cL...
L5: import { $ as contentTypeProto$1, A as createEndStreamSerialization, B as contentTypeUnaryRegExp, C as headerContentType$1, D as headerUnaryAcceptEncoding, E as headerTimeout$1, F ...
L6: import { a as sinkAllBytes, c as transformDecompressEnvelope, d as transformPrepend, f as transformSerializeEnvelope, i as readAllBytes, l as transformJoinEnvelopes, m as untilFirs...
L7: import * as https from "https";
L8: import * as http from "http";
...
L80: *
L81: * @private Internal code, does not follow semantic versionin
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/esm-CGPqnf-p.mjsView on unpkg · L3Findings
1 Critical4 High7 Medium6 Low
CriticalTrojan Source Unicodedist/client/assets/ComposerPromptEditor-CasaahWs.js
HighChild Processdist/service-launcher.mjs
HighShell
HighCross File Remote Execution Contextdist/NodeServices-e46V4522.mjs
HighKnown Malware Source Similaritydist/BunPtyAdapter-D0KxmSp1.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/resource-monitor/darwin-x64/t3-resource-monitor
MediumShips Wasm Moduledist/client/assets/ghostty-vt-DdA0Zryv.wasm
MediumOversized Source Filedist/binCli-DFMIt9AI.mjs
MediumOversized Cli Entrypointdist/binCli-DFMIt9AI.mjs
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @jacksondr5/j5code@0.0.43.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @jacksondr5/j5code@0.0.43 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.