registry / @leanandmean/coding-agent / 0.74.1-scramjet.63
@leanandmean/coding-agent@0.74.1-scramjet.63
Coding agent CLI with read, bash, edit, write tools and session management
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe manifest has no package-install lifecycle hook, and the inspected potentially sensitive primitives are consistent with an interactive coding-agent CLI and opt-in examples. No concrete malicious behavior was found.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
No malicious trigger was identified; the inspected examples run only when loaded by the agent or their registered event fires.
Impact
No confirmed exfiltration, persistence, destructive action, or install-time mutation was established.
Mechanism
The inspected code provides local command, clipboard, shell-resolution, notification, completion, and rendering functionality.
AI rationale
The manifest has no package-install lifecycle hook, and the inspected potentially sensitive primitives are consistent with an interactive coding-agent CLI and opt-in examples. No concrete malicious behavior was found.
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes JavaScript entrypoints and its listed scripts are clean, development, build, asset-copy, and test commands; it has no install lifecycle hook.
- The command helper spawns a caller-provided command and arguments with shell execution disabled by default.
- Clipboard reading rejects remote sessions before trying local platform clipboard backends.
- The shell helper only accepts a custom shell path after checking that it exists.
- The two example extensions are event-driven: one emits a ready notification, and the other queries the local Git remote before requesting issue data through gh.
- The required bundled Doom and syntax-highlighting files contain local module initialization and HTML escaping behavior, respectively; no attack behavior was identified in the inspected excerpts.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
11 flaggeddist/core/exec.jsView file
3*/
L4: import { spawn } from "node:child_process";
L5: import { StringDecoder } from "node:string_decoder";
High
dist/utils/clipboard.jsView file
42[
L43: "powershell.exe",
L44: [
High
examples/extensions/doom-overlay/doom-engine.tsView file
64
Findings
8 High5 Medium5 Low
HighChild Processdist/core/exec.js
HighShelldist/utils/clipboard.js
HighCommand Output Exfiltrationexamples/extensions/doom-overlay/doom/build/doom.js
HighSemantic Analysis Limiteddist/utils/shell.js#virtual:normalized:round1
HighKnown Malware Source Similarityexamples/extensions/doom-overlay/doom/build/doom.js
HighKnown Malware Source Similarityexamples/extensions/notify.ts
HighKnown Malware Source Similaritydist/core/export-html/vendor/highlight.min.js
HighKnown Malware Source Similarityexamples/extensions/github-issue-autocomplete.ts
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduleexamples/extensions/doom-overlay/doom/build/doom.wasm
Affected versions and remediation
This report applies to @leanandmean/coding-agent@0.74.1-scramjet.63.
See all versions of @leanandmean/coding-agent for other recorded verdicts.
- Review the evidence and your use of @leanandmean/coding-agent@0.74.1-scramjet.63 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.