Loading npm security reports…

@kenkaiiii/ggcoder@5.19.2: Suspicious npm security report (Warn) | LPM Firewall

registry / @kenkaiiii/ggcoder / 5.19.2

@kenkaiiii/ggcoder@5.19.2

CLI coding agent with OAuth authentication for Anthropic, OpenAI, and Gemini

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 452 file(s), 3.18 MB of source, external domains: 0.0.0.0, 127.0.0.1, 192.168.1.5, a.example, ads.linkedin.com, api.example, api.telegram.org, api.xiaomimimo.com, api.z.ai, app.com, awin1.com, b.example, chatgpt.com, coupon.example.com, developer.mozilla.org, docs.a.com, docs.b.com, docs.example.com, docs.python.org, duckduckgo.com, example-ad.com, example.com, github.com, global.example, googleadservices.com, html.duckduckgo.com, ice1.somafm.com, ice5.somafm.com, lite.duckduckgo.com, mcp.asana.com, mcp.canva.com, mcp.notion.com, mediaworks.streamguys1.com, mpv.io, nodejs.org, platform.example.com, project.example, search.brave.com, skills.sh, stream.radioparadise.com, t.me, token-plan-sgp.xiaomimimo.com, www.bing.com, www.google.com, www.malaysia.gov.my, www.typescriptlang.org, x.example

Source & flagged code

5 flagged

dist/tools/html-extract.jsView file

Lines 10-50javascript

10 super(message);

11 this.name = "ExtractorUnavailable";

12 }

13}

14let cached = null;

15/**

16 * Lazily resolve the HTML→Markdown extraction stack (linkedom, Readability,

17 * Turndown + GFM plugin). Mirrors `loadChromium()` in screenshot.ts: dynamic

18 * imports behind a non-literal specifier so `tsc` does not statically require

19 * the optional dependencies, with results cached. Throws `ExtractorUnavailable`

20 * if any are missing so callers can degrade to the regex path.

21 */

22export async function loadExtractor() {

23 if (cached)

24 return cached;

25 const linkedomName = "linkedom";

26 const readabilityName = "@mozilla/readability";

27 const turndownName = "turndown";

28 const gfmName = "turndown-plugin-gfm";

29 try {

30 const [linkedom, readability, turndown, gfmMod] = (await Promise.all([

31 import(linkedomName),

32 import(readabilityName),

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/tools/html-extract.jsView on unpkg · L30

33 import(turndownName),

34 import(gfmName),

35 ]));

36 if (!linkedom.parseHTML || !readability.Readability || !turndown.default || !gfmMod.gfm) {

37 throw new ExtractorUnavailable("extraction modules loaded but expected exports are missing");

38 }

39 cached = {

40 parseHTML: linkedom.parseHTML,

41 Readability: readability.Readability,

42 TurndownService: turndown.default,

43 gfm: gfmMod.gfm,

44 };

45 return cached;

46 }

47 catch (err) {

48 if (err instanceof ExtractorUnavailable)

49 throw err;

50 throw new ExtractorUnavailable(err instanceof Error ? err.message : "failed to load extraction modules");

dist/core/hashline.jsView file

Lines 1-21javascript

1/**

2 * Hash-anchored line addressing — the pure, UI-free core shared by the hashline

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/hashline.jsView on unpkg · L1

3 * benchmark and the opt-in anchor guard in the read/edit tools.

4 *

5 * Every line gets a short content+position hash. Anchors are UNIQUE by

6 * construction (the line's index is folded into the hash, so blank/repeated

7 * lines never collide), which is what lets an edit either resolve to exactly one

8 * location or be rejected — never silently corrupt a file that drifted since the

dist/core/radio.jsView file

Lines 1-21javascript

1import { spawn } from "node:child_process";

2import { existsSync } from "node:fs";

3import { createConnection } from "node:net";

4import os from "node:os";

dist/tools/web-fetch.jsView file

Lines 1-24javascript

1import { z } from "zod";

2import { extractToMarkdown } from "./html-extract.js";

3import { extractPdfText, PdfExtractorUnavailable } from "./pdf-extract.js";

4/**

5 * Block requests to private/internal network addresses to prevent SSRF.

assets/end-notification.mp3View file

•path = assets/end-notification.mp3 kind = high_entropy_blob sizeBytes = 50991 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/end-notification.mp3View on unpkg

Source & flagged code

5 flagged · loading source

dist/tools/html-extract.jsView file

30const [linkedom, readability, turndown, gfmMod] = (await Promise.all([ L31: import(linkedomName), L32: import(readabilityName),

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/tools/html-extract.jsView on unpkg · L30

dist/core/hashline.jsView file

1/** L2: * Hash-anchored line addressing — the pure, UI-free core shared by the hashline

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/hashline.jsView on unpkg · L1

dist/core/radio.jsView file

1import { spawn } from "node:child_process"; L2: import { existsSync } from "node:fs"; L3: import { createConnection } from "node:net"; L4: import os from "node:os"; ... L47: function extraPlayerDirs() { L48: switch (process.platform) { L49: case "darwin": ... L75: // 1) PATH (covers terminal launches + any inherited shell environment). L76: const pathDirs = (process.env.PATH ?? "").split(path.delimiter).filter(Boolean); L77: // 2) Well-known dirs a GUI PATH typically omits. ... L86: * Streaming-capable players in priority order. Each gets its quietest flag L87: * combination — radio runs in the background, we don't want stdout/stderr

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/core/radio.jsView on unpkg · L1

dist/tools/web-fetch.jsView file

4/** L5: * Block requests to private/internal network addresses to prevent SSRF. L6: * Checks the hostname against known private IP ranges and reserved domains. ... L153: const BROWSER_USER_AGENT = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"; L154: const HONEST_USER_AGENT = "ggcoder/1.0 (+https://github.com/KenKaiii/gg-coder)"; L155: const DOC_PATH_PATTERNS = [/\/docs?\b/i, /\/reference\b/i, /\/api\b/i, /\/guide/i, /\/learn\b/i]; ... L229: contentLength: contentLength !== null && Number.isFinite(contentLength) ? contentLength : null, L230: body: response, L231: finalUrl: currentUrl, ... L294: } L295: const buffer = await response.body.arrayBuffer(); L296: if (buffer.byteLength > MAX_PDF_BYTES) {

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/tools/web-fetch.jsView on unpkg · L4

assets/end-notification.mp3View file

•path = assets/end-notification.mp3 kind = high_entropy_blob sizeBytes = 50991 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/end-notification.mp3View on unpkg

Source & flagged code

5 flagged

dist/tools/html-extract.jsView file

Lines 10-50javascript

10 super(message);

11 this.name = "ExtractorUnavailable";

12 }

13}

14let cached = null;

15/**

16 * Lazily resolve the HTML→Markdown extraction stack (linkedom, Readability,

17 * Turndown + GFM plugin). Mirrors `loadChromium()` in screenshot.ts: dynamic

18 * imports behind a non-literal specifier so `tsc` does not statically require

19 * the optional dependencies, with results cached. Throws `ExtractorUnavailable`

20 * if any are missing so callers can degrade to the regex path.

21 */

22export async function loadExtractor() {

23 if (cached)

24 return cached;

25 const linkedomName = "linkedom";

26 const readabilityName = "@mozilla/readability";

27 const turndownName = "turndown";

28 const gfmName = "turndown-plugin-gfm";

29 try {

30 const [linkedom, readability, turndown, gfmMod] = (await Promise.all([

31 import(linkedomName),

32 import(readabilityName),

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/tools/html-extract.jsView on unpkg · L30

33 import(turndownName),

34 import(gfmName),

35 ]));

36 if (!linkedom.parseHTML || !readability.Readability || !turndown.default || !gfmMod.gfm) {

37 throw new ExtractorUnavailable("extraction modules loaded but expected exports are missing");

38 }

39 cached = {

40 parseHTML: linkedom.parseHTML,

41 Readability: readability.Readability,

42 TurndownService: turndown.default,

43 gfm: gfmMod.gfm,

44 };

45 return cached;

46 }

47 catch (err) {

48 if (err instanceof ExtractorUnavailable)

49 throw err;

50 throw new ExtractorUnavailable(err instanceof Error ? err.message : "failed to load extraction modules");

dist/core/hashline.jsView file

Lines 1-21javascript

1/**

2 * Hash-anchored line addressing — the pure, UI-free core shared by the hashline

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/hashline.jsView on unpkg · L1

3 * benchmark and the opt-in anchor guard in the read/edit tools.

4 *

5 * Every line gets a short content+position hash. Anchors are UNIQUE by

6 * construction (the line's index is folded into the hash, so blank/repeated

7 * lines never collide), which is what lets an edit either resolve to exactly one

8 * location or be rejected — never silently corrupt a file that drifted since the

dist/core/radio.jsView file

Lines 1-21javascript

1import { spawn } from "node:child_process";

2import { existsSync } from "node:fs";

3import { createConnection } from "node:net";

4import os from "node:os";

dist/tools/web-fetch.jsView file

Lines 1-24javascript

1import { z } from "zod";

2import { extractToMarkdown } from "./html-extract.js";

3import { extractPdfText, PdfExtractorUnavailable } from "./pdf-extract.js";

4/**

5 * Block requests to private/internal network addresses to prevent SSRF.

assets/end-notification.mp3View file

•path = assets/end-notification.mp3 kind = high_entropy_blob sizeBytes = 50991 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/end-notification.mp3View on unpkg

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code