registry / @kmugalkhod/lightcode / 0.11.0

@kmugalkhod/lightcode@0.11.0

Lightcode — a personal AI coding agent with a terminal UI and local session storage.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 1.05 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.search.brave.com, api.tavily.com, bun.sh, github.com, opencode.ai, openrouter.ai

Source & flagged code

8 flagged

lightcode.cjsView file

Lines 1-25javascript

1#!/usr/bin/env node

2/**

3 * Lightcode launcher - ensures Bun is installed before running the actual CLI.

4 */

6const { spawnSync } = require("child_process");

7const path = require("path");

High

Child Process

Package source references child process execution.

lightcode.cjsView on unpkg · L5

8const fs = require("fs");

9const os = require("os");

11// Resolve a usable Bun (>= 1.3.0). Prefer the Bun bundled as a dependency of

12// this package (so a plain `npm install -g` works with no separate Bun

13// install), then fall back to a Bun already on PATH.

14function isUsableBun(bunCmd) {

15 try {

16 const result = spawnSync(bunCmd, ["--version"], { encoding: "utf8" });

17 if (result.status !== 0 || !result.stdout) {

18 return false;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lightcode.cjsView on unpkg · L5

19 }

20 const [major, minor] = result.stdout.trim().split(".").map(Number);

21 return major > 1 || (major === 1 && minor >= 3);

22 } catch {

23 return false;

24 }

25}

server.jsView file

Lines 1-41javascript

1// @bun

2var __defProp = Object.defineProperty;

3var __returnValue = (v) => v;

4function __exportSetter(name, newValue) {

5 this[name] = __returnValue.bind(null, newValue);

assets/grammars/go/tree-sitter-go.wasmView file

•path = assets/grammars/go/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

assets/grammars/go/tree-sitter-go.wasmView on unpkg

package.jsonView file

•scripts registry_only=start

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @kmugalkhod/lightcode@0.9.0 matchedIdentity = npm:QGttdWdhbGtob2QvbGlnaHRjb2Rl:0.9.0 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

cli.jsView on unpkg

Source & flagged code

8 flagged · loading source

lightcode.cjsView file

5L6: const { spawnSync } = require("child_process"); L7: const path = require("path");

High

Child Process

Package source references child process execution.

lightcode.cjsView on unpkg · L5

5L6: const { spawnSync } = require("child_process"); L7: const path = require("path"); ... L16: const result = spawnSync(bunCmd, ["--version"], { encoding: "utf8" }); L17: if (result.status !== 0 || !result.stdout) { L18: return false; ... L27: function resolveBun() { L28: // __dirname is the realpath of this launcher even when invoked via npm's L29: // global bin symlink (process.argv[1] would be the symlink path on macOS/Linux). ... L37: try { L38: const bunPkgPath = require.resolve("bun/package.json", { L39: paths: [launcherDir],

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lightcode.cjsView on unpkg · L5

server.jsView file

2752try { L2753: const result = await execAsync(parsedInput.command, { L2754: cwd: workspaceContext.root,

High

Shell

Package source references shell execution.

server.jsView on unpkg · L2752

2733// packages/ai/src/bash/runtime.ts L2734: import { exec } from "child_process"; L2735: import { promisify } from "util"; ... L4035: for (const skillPath of findSkillFiles(root)) { L4036: const content = readFileSync(skillPath, "utf8"); L4037: const frontmatter = parseBasicFrontmatter(content); ... L5024: } L5025: function readEnvBaseUrl(env) { L5026: if (env.LIGHTCODE_BASE_URL) {

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

server.jsView on unpkg · L2733

21import path from "path"; L22: function getLightcodeDataDir(env = process.env) { L23: const configuredHome = env.LIGHTCODE_HOME?.trim(); ... L28: const appData = env.APPDATA || env.LOCALAPPDATA; L29: return appData ? path.join(appData, "lightcode") : path.join(homedir(), "AppData", "Roaming", "lightcode"); L30: } ... L116: }); L117: process.stderr.write(`${line} L118: `); ... L500: } L501: if (process.platform === "win32") { L502: return {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

server.jsView on unpkg · L21

assets/grammars/go/tree-sitter-go.wasmView file

•path = assets/grammars/go/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

assets/grammars/go/tree-sitter-go.wasmView on unpkg

package.jsonView file

•scripts registry_only=start

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

cli.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

cli.jsView on unpkg

Findings

1 Critical5 High4 Medium4 Low

CriticalManifest Confusionpackage.json

HighChild Processlightcode.cjs

HighShellserver.js

HighSandbox Evasion Gated Capabilitylightcode.cjs

HighRemote Agent Bridgeserver.js

HighPrevious Version Dangerous Deltacli.js

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Moduleassets/grammars/go/tree-sitter-go.wasm

MediumStructural Risk Force Deep Review

LowWeak Cryptoserver.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

8 flagged

lightcode.cjsView file

Lines 1-25javascript

1#!/usr/bin/env node

2/**

3 * Lightcode launcher - ensures Bun is installed before running the actual CLI.

4 */

6const { spawnSync } = require("child_process");

7const path = require("path");

High

Child Process

Package source references child process execution.

lightcode.cjsView on unpkg · L5

8const fs = require("fs");

9const os = require("os");

11// Resolve a usable Bun (>= 1.3.0). Prefer the Bun bundled as a dependency of

12// this package (so a plain `npm install -g` works with no separate Bun

13// install), then fall back to a Bun already on PATH.

14function isUsableBun(bunCmd) {

15 try {

16 const result = spawnSync(bunCmd, ["--version"], { encoding: "utf8" });

17 if (result.status !== 0 || !result.stdout) {

18 return false;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lightcode.cjsView on unpkg · L5

19 }

20 const [major, minor] = result.stdout.trim().split(".").map(Number);

21 return major > 1 || (major === 1 && minor >= 3);

22 } catch {

23 return false;

24 }

25}

server.jsView file

Lines 1-41javascript

1// @bun

2var __defProp = Object.defineProperty;

3var __returnValue = (v) => v;

4function __exportSetter(name, newValue) {

5 this[name] = __returnValue.bind(null, newValue);

assets/grammars/go/tree-sitter-go.wasmView file

•path = assets/grammars/go/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

assets/grammars/go/tree-sitter-go.wasmView on unpkg

package.jsonView file

•scripts registry_only=start

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

cli.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

cli.jsView on unpkg

Lines 2713-2772javascript

2713 if (text.length <= maxChars) {

2714 return {

2715 text,

2716 truncated: false

2717 };

2718 }

2719 const markerReserve = omissionMarker(text.length).length;

2720 const usable = Math.max(0, maxChars - markerReserve);

2721 const headChars = Math.floor(usable * 0.7);

2722 const tailChars = usable - headChars;

2723 const head = text.slice(0, headChars);

2724 const tail = tailChars > 0 ? text.slice(text.length - tailChars) : "";

2725 const omitted = text.length - head.length - tail.length;

2726 return {

2727 text: `${head}${omissionMarker(omitted)}${tail}`,

2728 truncated: true

2729 };

2730}

2731var init_output_utils = () => {};

2732

2733// packages/ai/src/bash/runtime.ts

2734import { exec } from "child_process";

2735import { promisify } from "util";

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

server.jsView on unpkg · L2733

2736function isRecord5(value) {

2737 return typeof value === "object" && value !== null;

2738}

2739function toRecord(value) {

2740 return isRecord5(value) ? value : {};

2741}

2742function getStringProperty(record, key) {

2743 const value = record[key];

2744 return typeof value === "string" ? value : undefined;

2745}

2746function getNumericExitCode(record) {

2747 const value = record.code;

2748 return typeof value === "number" ? value : 1;

2749}

2750async function executeBash(input, workspaceContext = getDefaultWorkspaceContext()) {

2751 const parsedInput = bashInputSchema.parse(input);

2752 try {

2753 const result = await execAsync(parsedInput.command, {

2754 cwd: workspaceContext.root,

High

Shell

Package source references shell execution.

server.jsView on unpkg · L2752

2755 timeout: parsedInput.timeoutMs,

2756 maxBuffer: 10 * 1024 * 1024,

2757 windowsHide: true

2758 });

2759 const stdoutTruncated = truncateText(result.stdout, parsedInput.maxOutputChars);

2760 const stderrTruncated = truncateText(result.stderr, Math.max(2000, Math.floor(parsedInput.maxOutputChars / 4)));

2761 return bashOutputSchema.parse({

2762 command: parsedInput.command,

2763 cwd: workspaceContext.root,

2764 stdout: stdoutTruncated.text,

2765 stderr: stderrTruncated.text,

2766 exitCode: 0,

2767 truncated: stdoutTruncated.truncated || stderrTruncated.truncated

2768 });

2769 } catch (error) {

2770 const errorRecord = toRecord(error);

2771 const stdout = getStringProperty(errorRecord, "stdout") ?? "";

2772 const stderr = getStringProperty(errorRecord, "stderr") ?? getStringProperty(errorRecord, "message") ?? "Command failed.";