registry / @kmugalkhod/lightcode / 0.9.0

@kmugalkhod/lightcode@0.9.0

Lightcode — a personal AI coding agent with a terminal UI and local session storage.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 1.04 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.search.brave.com, api.tavily.com, bun.sh, github.com, opencode.ai, openrouter.ai

Source & flagged code

7 flagged

lightcode.cjsView file

Lines 1-25javascript

1#!/usr/bin/env node

2/**

3 * Lightcode launcher - ensures Bun is installed before running the actual CLI.

4 */

6const { spawnSync } = require("child_process");

7const path = require("path");

High

Child Process

Package source references child process execution.

lightcode.cjsView on unpkg · L5

8const fs = require("fs");

9const os = require("os");

11// Resolve a usable Bun (>= 1.3.0). Prefer the Bun bundled as a dependency of

12// this package (so a plain `npm install -g` works with no separate Bun

13// install), then fall back to a Bun already on PATH.

14function isUsableBun(bunCmd) {

15 try {

16 const result = spawnSync(bunCmd, ["--version"], { encoding: "utf8" });

17 if (result.status !== 0 || !result.stdout) {

18 return false;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lightcode.cjsView on unpkg · L5

19 }

20 const [major, minor] = result.stdout.trim().split(".").map(Number);

21 return major > 1 || (major === 1 && minor >= 3);

22 } catch {

23 return false;

24 }

25}

server.jsView file

Lines 1-41javascript

1// @bun

2var __defProp = Object.defineProperty;

3var __returnValue = (v) => v;

4function __exportSetter(name, newValue) {

5 this[name] = __returnValue.bind(null, newValue);

assets/grammars/go/tree-sitter-go.wasmView file

•path = assets/grammars/go/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

assets/grammars/go/tree-sitter-go.wasmView on unpkg

package.jsonView file

•scripts registry_only=start

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

Source & flagged code

7 flagged · loading source

lightcode.cjsView file

5L6: const { spawnSync } = require("child_process"); L7: const path = require("path");

High

Child Process

Package source references child process execution.

lightcode.cjsView on unpkg · L5

5L6: const { spawnSync } = require("child_process"); L7: const path = require("path"); ... L16: const result = spawnSync(bunCmd, ["--version"], { encoding: "utf8" }); L17: if (result.status !== 0 || !result.stdout) { L18: return false; ... L27: function resolveBun() { L28: // __dirname is the realpath of this launcher even when invoked via npm's L29: // global bin symlink (process.argv[1] would be the symlink path on macOS/Linux). ... L37: try { L38: const bunPkgPath = require.resolve("bun/package.json", { L39: paths: [launcherDir],

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lightcode.cjsView on unpkg · L5

server.jsView file

6775try { L6776: const result = await execAsync(parsedInput.command, { L6777: cwd: workspaceContext.root,

High

Shell

Package source references shell execution.

server.jsView on unpkg · L6775

2766try { L2767: const parsed = storedCredentialsSchema.safeParse(JSON.parse(readFileSync(credentialsPath, "utf8"))); L2768: return parsed.success ? parsed.data : {}; ... L3730: } L3731: function readEnvBaseUrl(env) { L3732: if (env.LIGHTCODE_BASE_URL) { ... L6756: // packages/ai/src/bash/runtime.ts L6757: import { exec } from "child_process"; L6758: import { promisify } from "util";

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

server.jsView on unpkg · L2766

21import path from "path"; L22: function getLightcodeDataDir(env = process.env) { L23: const configuredHome = env.LIGHTCODE_HOME?.trim(); ... L28: const appData = env.APPDATA || env.LOCALAPPDATA; L29: return appData ? path.join(appData, "lightcode") : path.join(homedir(), "AppData", "Roaming", "lightcode"); L30: } ... L116: }); L117: process.stderr.write(`${line} L118: `); ... L500: } L501: if (process.platform === "win32") { L502: return {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

server.jsView on unpkg · L21

assets/grammars/go/tree-sitter-go.wasmView file

•path = assets/grammars/go/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

assets/grammars/go/tree-sitter-go.wasmView on unpkg

package.jsonView file

•scripts registry_only=start

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

Findings

1 Critical4 High4 Medium4 Low

CriticalManifest Confusionpackage.json

HighChild Processlightcode.cjs

HighShellserver.js

HighSandbox Evasion Gated Capabilitylightcode.cjs

HighRemote Agent Bridgeserver.js

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Moduleassets/grammars/go/tree-sitter-go.wasm

MediumStructural Risk Force Deep Review

LowWeak Cryptoserver.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

lightcode.cjsView file

Lines 1-25javascript

1#!/usr/bin/env node

2/**

3 * Lightcode launcher - ensures Bun is installed before running the actual CLI.

4 */

6const { spawnSync } = require("child_process");

7const path = require("path");

High

Child Process

Package source references child process execution.

lightcode.cjsView on unpkg · L5

8const fs = require("fs");

9const os = require("os");

11// Resolve a usable Bun (>= 1.3.0). Prefer the Bun bundled as a dependency of

12// this package (so a plain `npm install -g` works with no separate Bun

13// install), then fall back to a Bun already on PATH.

14function isUsableBun(bunCmd) {

15 try {

16 const result = spawnSync(bunCmd, ["--version"], { encoding: "utf8" });

17 if (result.status !== 0 || !result.stdout) {

18 return false;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lightcode.cjsView on unpkg · L5

19 }

20 const [major, minor] = result.stdout.trim().split(".").map(Number);

21 return major > 1 || (major === 1 && minor >= 3);

22 } catch {

23 return false;

24 }

25}

server.jsView file

Lines 1-41javascript

1// @bun

2var __defProp = Object.defineProperty;

3var __returnValue = (v) => v;

4function __exportSetter(name, newValue) {

5 this[name] = __returnValue.bind(null, newValue);

assets/grammars/go/tree-sitter-go.wasmView file

•path = assets/grammars/go/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

assets/grammars/go/tree-sitter-go.wasmView on unpkg

package.jsonView file

•scripts registry_only=start

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

Lines 2746-2786javascript

2746 codingAgentLogger = createLogger("coding-agent");

2747});

2748

2749// packages/ai/src/config/credentials.ts

2750import { chmodSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync, writeFileSync } from "fs";

2751import os from "os";

2752import path3 from "path";

2753import { z as z27 } from "zod";

2754function getCredentialsPath(env = process.env) {

2755 const configuredPath = env.LIGHTCODE_CREDENTIALS?.trim();

2756 if (configuredPath) {

2757 return path3.resolve(configuredPath);

2758 }

2759 return path3.join(os.homedir(), ".lightcode", "credentials.json");

2760}

2761function readStoredCredentials(env = process.env) {

2762 const credentialsPath = getCredentialsPath(env);

2763 if (!existsSync2(credentialsPath)) {

2764 return {};

2765 }

2766 try {

2767 const parsed = storedCredentialsSchema.safeParse(JSON.parse(readFileSync(credentialsPath, "utf8")));

2768 return parsed.success ? parsed.data : {};

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

server.jsView on unpkg · L2766

2769 } catch {

2770 return {};

2771 }

2772}

2773var storedCredentialsSchema;

2774var init_credentials = __esm(() => {

2775 storedCredentialsSchema = z27.object({

2776 anthropicApiKey: z27.string().min(1).optional(),

2777 openaiCompatibleApiKey: z27.string().min(1).optional(),

2778 opencodeApiKey: z27.string().min(1).optional(),

2779 openrouterApiKey: z27.string().min(1).optional()

2780 }).strict();

2781});

2782

2783// packages/ai/src/context/config.ts

2784import { z as z28 } from "zod";

2785function normalizeContextOptimizerConfig(config) {

2786 const candidate = {

Lines 6755-6795javascript

6755

6756// packages/ai/src/bash/runtime.ts

6757import { exec } from "child_process";

6758import { promisify } from "util";

6759function isRecord7(value) {

6760 return typeof value === "object" && value !== null;

6761}

6762function toRecord(value) {

6763 return isRecord7(value) ? value : {};

6764}

6765function getStringProperty(record, key) {

6766 const value = record[key];

6767 return typeof value === "string" ? value : undefined;

6768}

6769function getNumericExitCode(record) {

6770 const value = record.code;

6771 return typeof value === "number" ? value : 1;

6772}

6773async function executeBash(input, workspaceContext = getDefaultWorkspaceContext()) {

6774 const parsedInput = bashInputSchema.parse(input);

6775 try {

6776 const result = await execAsync(parsedInput.command, {

6777 cwd: workspaceContext.root,

High

Shell

Package source references shell execution.

server.jsView on unpkg · L6775

6778 timeout: parsedInput.timeoutMs,

6779 maxBuffer: 10 * 1024 * 1024,

6780 windowsHide: true

6781 });

6782 const stdoutTruncated = truncateText(result.stdout, parsedInput.maxOutputChars);

6783 const stderrTruncated = truncateText(result.stderr, Math.max(2000, Math.floor(parsedInput.maxOutputChars / 4)));

6784 return bashOutputSchema.parse({

6785 command: parsedInput.command,

6786 cwd: workspaceContext.root,

6787 stdout: stdoutTruncated.text,

6788 stderr: stderrTruncated.text,

6789 exitCode: 0,

6790 truncated: stdoutTruncated.truncated || stderrTruncated.truncated

6791 });

6792 } catch (error) {

6793 const errorRecord = toRecord(error);

6794 const stdout = getStringProperty(errorRecord, "stdout") ?? "";

6795 const stderr = getStringProperty(errorRecord, "stderr") ?? getStringProperty(errorRecord, "message") ?? "Command failed.";