@jait/gateway@0.1.748: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@jait/gateway@0.1.748: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./bin/install-runtime.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

web-dist/assets/index-B5-eLYYv.jsView file

141?|[ L142: \v\f\u2028\u2029])`),r));else if(p==="posix")if(!o&&(c==="graph"||c==="print")){if(i==="strict")throw new Error(`POSIX class "${c}" requires min target ES2024 or non-strict accura... L143: //# sourceMappingURL=index-B5-eLYYv.js.map

High

Child Process

Package source references child process execution.

web-dist/assets/index-B5-eLYYv.jsView on unpkg · L141

bin/jait.mjsView file

742L743: const execArgs = [nodePath, jaitBin]; L744: if (existsSync(envFlag)) execArgs.push("--env", envFlag);

High

Shell

Package source references shell execution.

bin/jait.mjsView on unpkg · L742

dist/tools/screenshot-tools.jsView file

59try { L60: const loadPlaywright = new Function("return import('playwright')"); L61: const mod = (await loadPlaywright());

High

Eval

Package source references dynamic code evaluation.

dist/tools/screenshot-tools.jsView on unpkg · L59

web-dist/assets/codeql-DsOJ9woJ.jsView file

1const e=Object.freeze(JSON.parse('{"displayName":"CodeQL","fileTypes":["ql","qll"],"name":"codeql","patterns":[{"include":"#module-member"}],"repository":{"abstract":{"match":"\\\\... L2: //# sourceMappingURL=codeql-DsOJ9woJ.js.map

Medium

Dynamic Require

Package source references dynamic require/import behavior.

web-dist/assets/codeql-DsOJ9woJ.jsView on unpkg · L1

dist/tools/redeploy-tools.jsView file

101log(`🐤 Starting canary on port ${canaryPort}...\n`); L102: const canary = spawn("jait", ["--port", String(canaryPort)], { L103: stdio: "ignore", L104: detached: true, L105: env: { ...process.env, PORT: String(canaryPort), __JAIT_CLI: "1" }, L106: windowsHide: true, ... L108: canary.unref(); L109: const healthy = await waitForHealth(`http://127.0.0.1:${canaryPort}`, 30_000); L110: if (!healthy) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/tools/redeploy-tools.jsView on unpkg · L101

6* **systemd** (detected when INVOCATION_ID is set): L7: * 1. npm install -g @jait/gateway@latest L8: * 2. Spawn canary on PORT+1, health-check it ... L19: */ L20: import { execSync, spawn } from "node:child_process"; L21: export function createRedeployTool(deps) {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/tools/redeploy-tools.jsView on unpkg · L6

dist/tools/browser-tools.jsView file

4const DEFAULT_BROWSER_ID = "browser-default"; L5: const DEFAULT_OPENAI_BASE_URL = "https://api.openai.com/v1"; L6: const DEFAULT_OPENAI_WEB_SEARCH_MODEL = "gpt-5"; ... L131: message: `Navigated to ${snapshot.url}`, L132: data: buildSnapshotPayload(surface.id, snapshot, session), L133: }; ... L362: const timeout = setTimeout(() => controller.abort(), timeoutMs); L363: const ignoreTlsErrors = input.ignoreTlsErrors === true || process.env["WEB_FETCH_IGNORE_TLS_ERRORS"] === "true"; L364: try { ... L370: }, ignoreTlsErrors); L371: const text = await response.text(); L372: return {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/tools/browser-tools.jsView on unpkg · L4

web-dist/noVNC/app/images/icons/MakefileView file

•path = web-[redacted] kind = build_helper sizeBytes = 1331 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

web-dist/noVNC/app/images/icons/MakefileView on unpkg

web-dist/noVNC/app/sounds/bell.ogaView file

•path = web-dist/noVNC/app/sounds/bell.oga kind = high_entropy_blob sizeBytes = 8495 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web-dist/noVNC/app/sounds/bell.ogaView on unpkg

web-dist/assets/index-Dj1dT_cH.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

web-dist/assets/index-Dj1dT_cH.jsView on unpkg

web-dist/assets/flowDiagram-UKHOOZJN-BDv6EjF2.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.81 matchedPath = web/dist/assets/flowDiagram-23GEKE2U-Di3U_AN7.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.81 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web-dist/assets/flowDiagram-UKHOOZJN-BDv6EjF2.jsView on unpkg

web-dist/assets/ganttDiagram-PKOTCBZU-h5PIyI7G.jsView file

•matchType = normalized_sha256 matchedPackage = @jait/gateway@0.1.693 matchedPath = web-dist/assets/ganttDiagram-A5KZAMGK-D2X9MWVw.js matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.693 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web-dist/assets/ganttDiagram-PKOTCBZU-h5PIyI7G.jsView on unpkg

Source & flagged code

13 flagged

package.jsonView file

Lines 4-44json

4 "description": "Jait AI gateway — local-first AI coding agent with terminal, filesystem, and browser control",

5 "author": "JakobWl",

6 "type": "module",

7 "main": "dist/index.js",

8 "types": "dist/index.d.ts",

9 "bin": {

10 "jait": "./bin/jait.mjs"

11 },

12 "files": [

13 "dist",

14 "bin",

15 "web-dist",

16 "skills"

17 ],

18 "scripts": {

19 "prebuild": "bun run --filter @jait/web build && bun run bundle-web",

20 "bundle-web": "node scripts/bundle-web.mjs",

21 "build": "tsc",

22 "dev": "bun run --filter @jait/web build && bun --watch src/index.ts",

23 "start": "node dist/index.js",

24 "postinstall": "node ./bin/install-runtime.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L24

25 "typecheck": "tsc --noEmit"

26 },

27 "keywords": [

28 "ai",

29 "agent",

30 "coding",

31 "gateway",

32 "terminal",

33 "local-first"

34 ],

35 "license": "MIT",

36 "repository": {

37 "type": "git",

38 "url": "https://github.com/Widev-e-U/Jait.git",

39 "directory": "packages/gateway"

40 },

41 "homepage": "https://jait.dev",

42 "engines": {

43 "node": ">=22.5.0"

44 },

web-dist/assets/index-B5-eLYYv.jsView file

Lines 121-144javascript

121Join_Control Join_C

122Logical_Order_Exception LOE

123Lowercase Lower

124Math

125Noncharacter_Code_Point NChar

126Pattern_Syntax Pat_Syn

127Pattern_White_Space Pat_WS

128Quotation_Mark QMark

129Radical

130Regional_Indicator RI

bin/jait.mjsView file

Lines 722-762javascript

722 process.exit(1);

723 }

724}

725

726function resolveNodePath() {

727 try {

728 return runSilent("which node"

dist/tools/screenshot-tools.jsView file

Lines 39-79javascript

39 description: "Click these elements before capturing (in order).",

40 },

41 fill: {

42 type: "array",

43 items: { type: "string",

web-dist/assets/codeql-DsOJ9woJ.jsView file

Lines 1-3javascript

1const e=Object.freeze(JSON.parse('{"displayName":"CodeQL","fileTypes":["ql","qll"],"name":"codeql","patterns":[{"include":"#module-member"}],"repository":{"abstract":{"match":"\\\\babstract(?![0-9A-Z_a-z])","name":"storage.modifier.abstract.ql"},"additional":{"match":"\\\\badditional(?![0-9A-Z_a-z])","name":"storage.modifier.additional.ql"},"and":{"match":"\\\\band(?![0-9A-Z_a-z])","name":"keyword.other.and.ql"},"annotation":{"patterns":[{"include":"#bindingset-annotation"},{"include":"#language-annotation"},{"include":"#pragma-annotation"},{"include":"#annotation-keyword"}]},"annotation-keywo ...

2//# sourceMappingURL=codeql-DsOJ9woJ.js.map

dist/tools/redeploy-tools.jsView file

Lines 1-26javascript

1/**

2 * gateway.redeploy — Self-update tool for the Jait gateway.

3 *

4 * Detects the runtime environment and uses the appropriate strategy:

5 *

6 * **systemd** (detected when INVOCATION_ID is set):

7 * 1. npm install -g @jait/gateway@latest

8 * 2. Spawn canary on PORT+1, health-check it

9 * 3. If healthy → kill canary, exit process.

10 * systemd's Restart=always automatically brings up the new version.

dist/tools/browser-tools.jsView file

Lines 1-24javascript

1import { BrowserSurface } from "../surfaces/browser.js";

2import { SSRFGuard } from "../security/ssrf-guard.js";

3import { SandboxManager } from "../security/sandbox-manager.js";

4const DEFAULT_BROWSER_ID =

web-dist/noVNC/app/images/icons/MakefileView file

•path = web-[redacted] kind = build_helper sizeBytes = 1331 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

web-dist/noVNC/app/images/icons/MakefileView on unpkg

web-dist/noVNC/app/sounds/bell.ogaView file

•path = web-dist/noVNC/app/sounds/bell.oga kind = high_entropy_blob sizeBytes = 8495 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web-dist/noVNC/app/sounds/bell.ogaView on unpkg

web-dist/assets/index-Dj1dT_cH.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

web-dist/assets/index-Dj1dT_cH.jsView on unpkg

web-dist/assets/flowDiagram-UKHOOZJN-BDv6EjF2.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.81 matchedPath = web/dist/assets/flowDiagram-23GEKE2U-Di3U_AN7.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.81 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web-dist/assets/flowDiagram-UKHOOZJN-BDv6EjF2.jsView on unpkg

web-dist/assets/ganttDiagram-PKOTCBZU-h5PIyI7G.jsView file

•matchType = normalized_sha256 matchedPackage = @jait/gateway@0.1.693 matchedPath = web-dist/assets/ganttDiagram-A5KZAMGK-D2X9MWVw.js matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.693 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web-dist/assets/ganttDiagram-PKOTCBZU-h5PIyI7G.jsView on unpkg

Lines 81-121javascript

81 windowsHide: true,

82 });

83 }

84 catch (err) {

85 const msg = err instanceof Error ? err.message : String(err);

86 return { ok: false, message: `npm install failed: ${msg}` };

87 }

88 // ── 3. Read new version ───────────────────────────────────────────

89 let newVersion = "unknown";

90 try {

91 const raw = execSync("npm list -g @jait/gateway --depth=0 --json", { encoding: "utf8", timeout: 10_000, windowsHide: true, stdio: "pipe" });

92 newVersion = JSON.parse(raw).dependencies?.["@jait/gateway"]?.version ?? "unknown";

93 }

94 catch {

95 // non-critical

96 }

97 log(`✓ Installed @jait/gateway ${newVersion} (was ${oldVersion})\n`);

98 // ── 4. Canary health check ────────────────────────────────────────

99 if (!skipCanary) {

100 const canaryPort = deps.port + 1;

101 log(`🐤 Starting canary on port ${canaryPort}...\n`);

102 const canary = spawn("jait", ["--port", String(canaryPort)], {

103 stdio: "ignore",

104 detached: true,

105 env: { ...process.env, PORT: String(canaryPort), __JAIT_CLI: "1" },

106 windowsHide: true,

107 });

108 canary.unref();

109 const healthy = await waitForHealth(`http://127.0.0.1:${canaryPort}`, 30_000);

110 if (!healthy) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/tools/redeploy-tools.jsView on unpkg · L101

111 try {

112 process.kill(-canary.pid, "SIGTERM");

113 }

114 catch { /* ignore */ }

115 return {

116 ok: false,

117 message: `Canary failed health check on port ${canaryPort}. ` +

118 `Update installed but NOT activated. Current gateway is still running.`,

119 data: { oldVersion, newVersion, canaryPort },

120 };

121 }