@jait/gateway@0.1.693: Malicious npm security report (Block)

Loading npm security reports…

Source & flagged code

13 flagged

package.jsonView file

Lines 4-44json

4 "description": "Jait AI gateway — local-first AI coding agent with terminal, filesystem, and browser control",

5 "author": "JakobWl",

6 "type": "module",

7 "main": "dist/index.js",

8 "types": "dist/index.d.ts",

9 "bin": {

10 "jait": "./bin/jait.mjs"

11 },

12 "files": [

13 "dist",

14 "bin",

15 "web-dist",

16 "skills"

17 ],

18 "scripts": {

19 "prebuild": "bun run --filter @jait/web build && bun run bundle-web",

20 "bundle-web": "node scripts/bundle-web.mjs",

21 "build": "tsc",

22 "dev": "bun run --filter @jait/web build && bun --watch src/index.ts",

23 "start": "node dist/index.js",

24 "postinstall": "node ./bin/install-runtime.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L24

25 "typecheck": "tsc --noEmit"

26 },

27 "keywords": [

28 "ai",

29 "agent",

30 "coding",

31 "gateway",

32 "terminal",

33 "local-first"

34 ],

35 "license": "MIT",

36 "repository": {

37 "type": "git",

38 "url": "https://github.com/Widev-e-U/Jait.git",

39 "directory": "packages/gateway"

40 },

41 "homepage": "https://jait.dev",

42 "engines": {

43 "node": ">=22.5.0"

44 },

web-dist/assets/blade-BjGOyj-B.jsView file

Lines 1-3javascript

1import e from"./html-derivative-DlHx6ybY.js";import t from"./html-pp8916En.js";import n from"./xml-sdJ4AIDG.js";import a from"./sql-BLtJtn59.js";import r from"./javascript-wDzz0qaB.js";import i from

bin/jait.mjsView file

Lines 617-657javascript

617 process.exit(1);

618 }

619}

620

621function resolveNodePath() {

622 try {

623 return runSilent("which node"

dist/tools/screenshot-tools.jsView file

Lines 37-77javascript

37 description: "Click these elements before capturing (in order).",

38 },

39 fill: {

40 type: "array",

41 items: { type: "string",

web-dist/assets/ruby-Wjq7vjNf.jsView file

Lines 1-3javascript

1import e from"./html-pp8916En.js";import n from"./haml-D5jkg6IW.js";import t from"./xml-sdJ4AIDG.js";import a from"./sql-BLtJtn59.js";import r from"./graphql-ChdNCCLP.js";import i from

dist/tools/redeploy-tools.jsView file

Lines 1-26javascript

1/**

2 * gateway.redeploy — Self-update tool for the Jait gateway.

3 *

4 * Detects the runtime environment and uses the appropriate strategy:

5 *

6 * **systemd** (detected when INVOCATION_ID is set):

7 * 1. npm install -g @jait/gateway@latest

8 * 2. Spawn canary on PORT+1, health-check it

9 * 3. If healthy → kill canary, exit process.

10 * systemd's Restart=always automatically brings up the new version.

dist/tools/browser-tools.jsView file

Lines 1-24javascript

1import { BrowserSurface } from "../surfaces/browser.js";

2import { SSRFGuard } from "../security/ssrf-guard.js";

3import { SandboxManager } from "../security/sandbox-manager.js";

4const DEFAULT_BROWSER_ID =

web-dist/noVNC/app/images/icons/MakefileView file

•path = web-[redacted] kind = build_helper sizeBytes = 1331 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

web-dist/noVNC/app/images/icons/MakefileView on unpkg

web-dist/noVNC/app/sounds/bell.ogaView file

•path = web-dist/noVNC/app/sounds/bell.oga kind = high_entropy_blob sizeBytes = 8495 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web-dist/noVNC/app/sounds/bell.ogaView on unpkg

web-dist/assets/index-BgaxmV4m.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

web-dist/assets/index-BgaxmV4m.jsView on unpkg

web-dist/assets/cytoscape.esm-BQaXIfA_.jsView file

•matchType = normalized_sha256 matchedPackage = @yancyyu/agentcli@1.9.62 matchedPath = dist-renderer/assets/cytoscape.esm-DsxaTqgk.js matchedIdentity = npm:QHlhbmN5eXUvYWdlbnRjbGk:1.9.62 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web-dist/assets/cytoscape.esm-BQaXIfA_.jsView on unpkg

web-dist/assets/diagram-E7M64L7V-9C15AtLM.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @jait/gateway@0.1.691 matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.691 similarity = 0.992 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

web-dist/assets/diagram-E7M64L7V-9C15AtLM.jsView on unpkg

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./bin/install-runtime.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

web-dist/assets/blade-BjGOyj-B.jsView file

1import e from"./html-derivative-DlHx6ybY.js";import t from"./html-pp8916En.js";import n from"./xml-sdJ4AIDG.js";import a from"./sql-BLtJtn59.js";import r from"./javascript-wDzz0qaB... L2: //# sourceMappingURL=blade-BjGOyj-B.js.map

High

Child Process

Package source references child process execution.

web-dist/assets/blade-BjGOyj-B.jsView on unpkg · L1

bin/jait.mjsView file

637L638: const execArgs = [nodePath, jaitBin]; L639: if (existsSync(envFlag)) execArgs.push("--env", envFlag);

@jait/gateway@0.1.693: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

13 flagged

package.jsonView file

Lines 4-44json

4 "description": "Jait AI gateway — local-first AI coding agent with terminal, filesystem, and browser control",

5 "author": "JakobWl",

6 "type": "module",

7 "main": "dist/index.js",

8 "types": "dist/index.d.ts",

9 "bin": {

10 "jait": "./bin/jait.mjs"

11 },

12 "files": [

13 "dist",

14 "bin",

15 "web-dist",

16 "skills"

17 ],

18 "scripts": {

19 "prebuild": "bun run --filter @jait/web build && bun run bundle-web",

20 "bundle-web": "node scripts/bundle-web.mjs",

21 "build": "tsc",

22 "dev": "bun run --filter @jait/web build && bun --watch src/index.ts",

23 "start": "node dist/index.js",

24 "postinstall": "node ./bin/install-runtime.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L24

25 "typecheck": "tsc --noEmit"

26 },

27 "keywords": [

28 "ai",

29 "agent",

30 "coding",

31 "gateway",

32 "terminal",

33 "local-first"

34 ],

35 "license": "MIT",

36 "repository": {

37 "type": "git",

38 "url": "https://github.com/Widev-e-U/Jait.git",

39 "directory": "packages/gateway"

40 },

41 "homepage": "https://jait.dev",

42 "engines": {

43 "node": ">=22.5.0"

44 },

web-dist/assets/blade-BjGOyj-B.jsView file

Lines 1-3javascript

1import e from"./html-derivative-DlHx6ybY.js";import t from"./html-pp8916En.js";import n from"./xml-sdJ4AIDG.js";import a from"./sql-BLtJtn59.js";import r from"./javascript-wDzz0qaB.js";import i from

bin/jait.mjsView file

Lines 617-657javascript

617 process.exit(1);

618 }

619}

620

621function resolveNodePath() {

622 try {

623 return runSilent("which node"

dist/tools/screenshot-tools.jsView file

Lines 37-77javascript

37 description: "Click these elements before capturing (in order).",

38 },

39 fill: {

40 type: "array",

41 items: { type: "string",

web-dist/assets/ruby-Wjq7vjNf.jsView file

Lines 1-3javascript

1import e from"./html-pp8916En.js";import n from"./haml-D5jkg6IW.js";import t from"./xml-sdJ4AIDG.js";import a from"./sql-BLtJtn59.js";import r from"./graphql-ChdNCCLP.js";import i from

dist/tools/redeploy-tools.jsView file

Lines 1-26javascript

1/**

2 * gateway.redeploy — Self-update tool for the Jait gateway.

3 *

4 * Detects the runtime environment and uses the appropriate strategy:

5 *

6 * **systemd** (detected when INVOCATION_ID is set):

7 * 1. npm install -g @jait/gateway@latest

8 * 2. Spawn canary on PORT+1, health-check it

9 * 3. If healthy → kill canary, exit process.

10 * systemd's Restart=always automatically brings up the new version.

dist/tools/browser-tools.jsView file

Lines 1-24javascript

1import { BrowserSurface } from "../surfaces/browser.js";

2import { SSRFGuard } from "../security/ssrf-guard.js";

3import { SandboxManager } from "../security/sandbox-manager.js";

4const DEFAULT_BROWSER_ID =

web-dist/noVNC/app/images/icons/MakefileView file

•path = web-[redacted] kind = build_helper sizeBytes = 1331 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

web-dist/noVNC/app/images/icons/MakefileView on unpkg

web-dist/noVNC/app/sounds/bell.ogaView file

•path = web-dist/noVNC/app/sounds/bell.oga kind = high_entropy_blob sizeBytes = 8495 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web-dist/noVNC/app/sounds/bell.ogaView on unpkg

web-dist/assets/index-BgaxmV4m.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

web-dist/assets/index-BgaxmV4m.jsView on unpkg

web-dist/assets/cytoscape.esm-BQaXIfA_.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web-dist/assets/cytoscape.esm-BQaXIfA_.jsView on unpkg

web-dist/assets/diagram-E7M64L7V-9C15AtLM.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

web-dist/assets/diagram-E7M64L7V-9C15AtLM.jsView on unpkg

Lines 81-121javascript

81 windowsHide: true,

82 });

83 }

84 catch (err) {

85 const msg = err instanceof Error ? err.message : String(err);

86 return { ok: false, message: `npm install failed: ${msg}` };

87 }

88 // ── 3. Read new version ───────────────────────────────────────────

89 let newVersion = "unknown";

90 try {

91 const raw = execSync("npm list -g @jait/gateway --depth=0 --json", { encoding: "utf8", timeout: 10_000, windowsHide: true, stdio: "pipe" });

92 newVersion = JSON.parse(raw).dependencies?.["@jait/gateway"]?.version ?? "unknown";

93 }

94 catch {

95 // non-critical

96 }

97 log(`✓ Installed @jait/gateway ${newVersion} (was ${oldVersion})\n`);

98 // ── 4. Canary health check ────────────────────────────────────────

99 if (!skipCanary) {

100 const canaryPort = deps.port + 1;

101 log(`🐤 Starting canary on port ${canaryPort}...\n`);

102 const canary = spawn("jait", ["--port", String(canaryPort)], {

103 stdio: "ignore",

104 detached: true,

105 env: { ...process.env, PORT: String(canaryPort), __JAIT_CLI: "1" },

106 windowsHide: true,

107 });

108 canary.unref();

109 const healthy = await waitForHealth(`http://127.0.0.1:${canaryPort}`, 30_000);

110 if (!healthy) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/tools/redeploy-tools.jsView on unpkg · L101

111 try {

112 process.kill(-canary.pid, "SIGTERM");

113 }

114 catch { /* ignore */ }

115 return {

116 ok: false,

117 message: `Canary failed health check on port ${canaryPort}. ` +

118 `Update installed but NOT activated. Current gateway is still running.`,

119 data: { oldVersion, newVersion, canaryPort },

120 };

121 }

@jait/gateway@0.1.693

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code