@kaitranntt/ccs@8.8.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@kaitranntt/ccs@8.8.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.preinstall = node scripts/preinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node scripts/preinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/ui/assets/index-EnTQAKOi.jsView file

10patternName = generic_password severity = medium line = 10 matchedText = `).repla...it(`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/ui/assets/index-EnTQAKOi.jsView on unpkg · L10

dist/utils/ui/init.jsView file

17*/ L18: const dynamicImport = new Function('specifier', 'return import(specifier)'); L19: /**

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/utils/ui/init.jsView on unpkg · L17

dist/ui/assets/proxy-C4-M_9kB.jsView file

8} L9: `),()=>{a.current?.removeAttribute("data-motion-pop-id"),b.contains(T)&&b.removeChild(T)}},[e]),nt.jsx(Tu,{isPresent:e,childRef:a,sizeRef:u,pop:r,children:r===!1?t:w.cloneElement(t...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/ui/assets/proxy-C4-M_9kB.jsView on unpkg · L8

dist/utils/shell-completion.jsView file

32* Shell Completion Installer L33: * Auto-configures shell completion for bash, zsh, fish, PowerShell L34: */ ... L36: constructor() { L37: this.homeDir = os.homedir(); L38: this.ccsDir = (0, config_manager_1.getCcsDir)(); ... L45: detectShell() { L46: const shell = process.env.SHELL || ''; L47: if (shell.includes('bash')) ... L52: return 'fish'; L53: if (process.platform === 'win32') L54: return 'powershell';

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/utils/shell-completion.jsView on unpkg · L32

scripts/postinstall.jsView file

1Install-time AI-agent control hijack evidence: L79: L80: // Check ~/.claude/settings.json (warning only, not critical) L81: const claudeSettings = path.join(homedir, '.claude', 'settings.json'); L82: if (!fs.existsSync(claudeSettings)) { L83: warnings.push('~/.claude/settings.json not found - run "claude /login"'); L84: } ... L104: } else { L105: fs.mkdirSync(ccsDir, { recursive: true, mode: 0o755 }); L106: console.log('[OK] Created directory: ~/.ccs/'); ... L113: if (!fs.existsSync(sharedDir)) { L114: fs.mkdirSync(sharedDir, { recursive: true, mode: 0o755 }); L115: console.log('[OK] Created directory: ~/.ccs/shared/'); Payload evidence from .claude/commands/ccs.md: L1: --- L2: description: Delegate task with intelligent profile selection [AUTO ENHANCE]

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/postinstall.jsView on unpkg · L1

scripts/get-version.shView file

•path = scripts/get-version.sh kind = build_helper sizeBytes = 323 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/get-version.shView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 38-114json

38 "lib/",

39 "scripts/",

40 "config/",

41 ".claude/",

42 "VERSION",

43 "README.md",

44 "LICENSE"

45 ],

46 "engines": {

47 "node": ">=18.0.0",

48 "bun": ">=1.0.0"

49 },

50 "packageManager": "bun@1.3.9",

51 "os": [

52 "darwin",

53 "linux",

54 "win32"

55 ],

56 "preferGlobal": true,

57 "scripts": {

58 "preinstall": "node scripts/preinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L58

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L58

59 "postuninstall": "node scripts/postuninstall.js",

60 "build": "tsc && node scripts/add-shebang.js",

61 "build:watch": "tsc --watch",

62 "build:server": "tsc && node scripts/add-shebang.js",

63 "build:all": "bun run ui:build && bun run build:server",

64 "prebuild": "node scripts/clean-dist.js",

65 "prebuild:server": "node scripts/clean-dist.js",

66 "prebuild:all": "rm -rf dist tsconfig.tsbuildinfo",

67 "postbuild:all": "node scripts/verify-bundle.js",

68 "typecheck": "tsc --noEmit",

69 "lint": "eslint src/",

70 "lint:fix": "eslint src/ --fix",

71 "format": "prettier --write src/",

72 "format:check": "prettier --check src/",

73 "validate": "bun run typecheck && bun run lint && bun run format:check && bun run test:fast",

74 "validate:ci-parity": "bash scripts/ci-parity-gate.sh",

75 "verify:bundle": "node scripts/verify-bundle.js",

76 "test": "bun run build && bun run test:all",

77 "test:ci": "bun run test:all",

78 "test:fast": "node scripts/run-test-bucket.js fast",

79 "test:slow": "node scripts/run-test-bucket.js slow",

80 "test:all": "node scripts/run-test-bucket.js all",

81 "test:unit": "bun test tests/unit",

82 "test:npm": "bun test tests/npm/",

83 "test:native": "bash tests/native/unix/edge-cases.sh",

84 "test:e2e": "bun test tests/e2e/ --bail --timeout 60000",

85 "report:hardening": "node scripts/hardening-inventory.js",

86 "dev": "bun run build:server && node dist/ccs.js config --dev",

87 "dev:symlink": "bash scripts/dev-symlink.sh",

88 "dev:unlink": "bash scripts/dev-symlink.sh --restore",

89 "ui:build": "cd ui && bun run build",

90 "ui:preview": "cd ui && bun run preview",

91 "ui:validate": "cd ui && bun run validate",

92 "prepack": "bun run build:all",

93 "prepare": "husky",

94 "postinstall": "node scripts/postinstall.js"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L94

95 },

96 "dependencies": {

97 "bcrypt": "^6.0.0",

98 "boxen": "^5.1.2",

99 "chalk": "^4.1.2",

100 "chokidar": "^3.6.0",

101 "cli-table3": "^0.6.5",

102 "express": "^4.18.2",

103 "express-rate-limit": "^8.2.1",

104 "express-session": "^1.18.2",

105 "get-port": "^5.1.1",

106 "gradient-string": "^2.0.2",

107 "http-proxy-agent": "^7.0.2",

108 "https-proxy-agent": "^7.0.6",

109 "js-yaml": "^4.1.1",

110 "listr2": "^3.14.0",

111 "open": "^8.4.2",

112 "ora": "^5.4.1",

113 "proper-lockfile": "^4.1.2",

114 "smol-toml": "^1.6.1",

dist/ui/assets/index-EnTQAKOi.jsView file

10patternName = generic_password severity = medium line = 10 matchedText = `).repla...it(`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/ui/assets/index-EnTQAKOi.jsView on unpkg · L10

dist/utils/ui/init.jsView file

Lines 1-37javascript

1"use strict";

2/**

3 * UI Initialization

4 *

5 * Handles lazy loading of ESM dependencies

6 * @module utils/ui/init

7 */

8Object.defineProperty(exports, "__esModule", { value:

dist/ui/assets/proxy-C4-M_9kB.jsView file

Lines 1-10javascript

1import{j as nt}from"./radix-ui-nu4wz29m.js";import{r as w}from"./react-vendor-Bjx91N7w.js";const Qe=w.createContext({});function tn(t){const

dist/utils/shell-completion.jsView file

Lines 12-52javascript

12}));

13var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {

14 Object.defineProperty(o, "default"

scripts/postinstall.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2'use strict';

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/postinstall.jsView on unpkg · L1

3

4const fs = require('fs');

5const path

scripts/get-version.shView file

•path = scripts/get-version.sh kind = build_helper sizeBytes = 323 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/get-version.shView on unpkg