registry / @jacksondr5/j5code / 0.0.42
@jacksondr5/j5code@0.0.42
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe reviewed findings fit the package’s coding CLI purpose: its PTY adapter launches caller-supplied shell commands, and the Unicode match is an editor spacer. The main bundled entrypoint could not be read directly, but the available evidence did not establish malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The CLI’s application features can invoke the PTY adapter.
Impact
No malicious impact was identified in the inspected source.
Mechanism
The adapter launches caller-supplied shell commands; the editor bundle uses a zero-width space as a spacer.
AI rationale
The reviewed findings fit the package’s coding CLI purpose: its PTY adapter launches caller-supplied shell commands, and the Unicode match is an editor spacer. The main bundled entrypoint could not be read directly, but the available evidence did not establish malicious behavior.
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a `j5` CLI and declares no install lifecycle scripts.
- The PTY adapter starts the shell and arguments supplied by its caller, consistent with a coding CLI.
- The generic process service passes a command and its arguments to Node’s child-process API.
- The invisible character in the editor bundle is a zero-width-space spacer.
Evidence against
- The package includes process execution and bundled AI-agent SDK code, which warrant checking for automatic credential forwarding.
- The main `dist/bin.mjs` entrypoint could not be read directly by the source tool because it contains NUL bytes.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
10 flaggeddist/NodeServices-Cs5uPtwB.mjsView file
6import { a as Size, c as BadArgument, d as systemError, i as FileTypeId, n as TypeId$5, o as WatchBackend, r as FileSystem, s as make$12, t as Path$1, u as badArgument } from "./Pa...
L7: import * as NodeChildProcess from "node:child_process";
L8: import { PassThrough } from "node:stream";
High
Child Process
Package source references child process execution.
dist/NodeServices-Cs5uPtwB.mjsView on unpkg · L66Cross-file remote execution chain: dist/NodeServices-Cs5uPtwB.mjs spawns dist/Schema-jqAifT37.mjs; helper contains network access plus dynamic code execution.
L6: import { a as Size, c as BadArgument, d as systemError, i as FileTypeId, n as TypeId$5, o as WatchBackend, r as FileSystem, s as make$12, t as Path$1, u as badArgument } from "./Pa...
L7: import * as NodeChildProcess from "node:child_process";
L8: import { PassThrough } from "node:stream";
...
L226: * operating-system processes. A spawner turns a command description into a
L227: * handle that can write to stdin, read stdout and stderr, wait for exit, kill
L228: * the process, and manage whether the process keeps its parent alive. Platform
...
L581: return callback(function loop(resume) {
L582: for (; i < chunk.length;) if (!optio
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/NodeServices-Cs5uPtwB.mjsView on unpkg · L6Findings
1 Critical5 High7 Medium6 Low
CriticalTrojan Source Unicodedist/client/assets/ComposerPromptEditor-BkbxsuSu.js
HighChild Processdist/NodeServices-Cs5uPtwB.mjs
HighShell
HighCross File Remote Execution Contextdist/NodeServices-Cs5uPtwB.mjs
HighKnown Malware Source Similaritydist/NodePtyAdapter-DgsthENb.mjs
HighKnown Malware Source Similaritydist/BunPtyAdapter-BRG4gp4_.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/resource-monitor/darwin-x64/t3-resource-monitor
MediumShips Wasm Moduledist/client/assets/ghostty-vt-DdA0Zryv.wasm
MediumOversized Source Filedist/bin.mjs
MediumOversized Cli Entrypoint
Affected versions and remediation
This report applies to @jacksondr5/j5code@0.0.42.
See all versions of @jacksondr5/j5code for other recorded verdicts.
- Review the evidence and your use of @jacksondr5/j5code@0.0.42 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.