registry / @leanandmean/coding-agent / 0.74.1-scramjet.49
@leanandmean/coding-agent@0.74.1-scramjet.49
Coding agent CLI with read, bash, edit, write tools and session management
AI Security Review
scanned 2mo ago · by lpm-firewall-aiDirect inspection found no lifecycle execution, self-dependency chain, credential theft, exfiltration, persistence, or destructive action. The scanner hits correspond to an explicit CLI capability, example extensions, an Emscripten Doom wrapper, and vendored Highlight.js.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Running the CLI or explicitly loading an example extension.
Impact
The CLI can run requested local commands and may download fd or ripgrep when absent; no install-time or covert behavior was found.
Mechanism
User-invoked command execution and optional helper-tool download.
AI rationale
Direct inspection found no lifecycle execution, self-dependency chain, credential theft, exfiltration, persistence, or destructive action. The scanner hits correspond to an explicit CLI capability, example extensions, an Emscripten Doom wrapper, and vendored Highlight.js.
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has development scripts only and no install lifecycle hook.
- Core command execution receives explicit command and argument values and defaults shell execution off.
- The flagged notification and GitHub issue code are opt-in extension examples with bounded commands.
- The Doom and highlighting findings are bundled third-party-style runtime/vendor artifacts, not an install payload.
Evidence against
- No preinstall, install, or postinstall script or self-dependency is declared.
- No source evidence of credential collection, exfiltration, persistence, or destructive behavior was found.
- Tool downloads occur only while the CLI is running and are limited to fd and ripgrep.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinified
Source & flagged code
13 flaggeddist/core/exec.jsView file
3*/
L4: import { spawn } from "node:child_process";
L5: import { StringDecoder } from "node:string_decoder";
High
dist/utils/tools-manager.jsView file
187const script = "& { param($archive, $destination) $ErrorActionPreference = 'Stop'; Expand-Archive -LiteralPath $archive -DestinationPath $destination -Force }";
L188: const powershellFailure = runExtractionCommand("powershell.exe", [
L189: "-NoLogo",
High
examples/extensions/doom-overlay/doom-engine.tsView file
Findings
1 Critical8 High6 Medium5 Low
CriticalPrevious Version Dangerous Deltaexamples/extensions/doom-overlay/doom/build/doom.js
HighChild Processdist/core/exec.js
HighShelldist/utils/tools-manager.js
HighCommand Output Exfiltrationexamples/extensions/doom-overlay/doom/build/doom.js
HighSemantic Analysis Limiteddist/utils/shell.js#virtual:normalized:round1
HighKnown Malware Source Similarityexamples/extensions/doom-overlay/doom/build/doom.js
HighKnown Malware Source Similarityexamples/extensions/notify.ts
HighKnown Malware Source Similaritydist/core/export-html/vendor/highlight.min.js
HighKnown Malware Source Similarityexamples/extensions/github-issue-autocomplete.ts
MediumDynamic Require
Affected versions and remediation
This report applies to @leanandmean/coding-agent@0.74.1-scramjet.49.
See all versions of @leanandmean/coding-agent for other recorded verdicts.
- Review the evidence and your use of @leanandmean/coding-agent@0.74.1-scramjet.49 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.