registry / @leanandmean/coding-agent / 0.74.1-scramjet.73
@leanandmean/coding-agent@0.74.1-scramjet.73
Coding agent CLI with read, bash, edit, write tools and session management
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the flagged runtime excerpts are ordinary manual compaction and command-result handling. The similarity matches resolve to product examples and bundled libraries, while the reviewed provider attribution is conditional and sent to the selected provider.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Normal package import or user-invoked agent, extension, or CLI functionality.
Impact
No malicious impact was established from the inspected source.
Mechanism
The package exports its agent runtime and uses ordinary command execution and provider APIs; no install-time attack behavior or unrelated credential transfer was found.
AI rationale
The manifest has no install lifecycle hook, and the flagged runtime excerpts are ordinary manual compaction and command-result handling. The similarity matches resolve to product examples and bundled libraries, while the reviewed provider attribution is conditional and sent to the selected provider.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json points to dist/index.js and declares no install lifecycle hook; its scripts are development, build, asset-copy, and test commands.
- The agent-session excerpt handles manual compaction; the package-manager excerpts handle command results and errors.
- The SDK adds attribution headers only when install telemetry is enabled and only for OpenRouter or Cloudflare; the telemetry helper reads the setting or environment flag.
- The inspected runtime, dependency, example, and vendor paths are consistent with agent CLI, provider, terminal UI, and extension functions; no unrelated credential recipient or hidden payload execution was identified.
Evidence against
- Scanner similarity and structural-risk labels are leads, not source evidence; the flagged examples and bundled vendor files have ordinary product contexts.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
13 flaggeddist/core/exec.jsView file
3*/
L4: import { spawn } from "node:child_process";
L5: import { StringDecoder } from "node:string_decoder";
High
dist/utils/clipboard.jsView file
42[
L43: "powershell.exe",
L44: [
High
examples/extensions/doom-overlay/doom-engine.tsView file
64
Findings
1 Critical9 High5 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/cli/args.js
HighChild Processdist/core/exec.js
HighShelldist/utils/clipboard.js
HighCommand Output Exfiltrationexamples/extensions/doom-overlay/doom/build/doom.js
HighSemantic Analysis Limiteddist/utils/shell.js#virtual:normalized:round1
HighKnown Malware Source Similarityexamples/extensions/doom-overlay/doom/build/doom.js
HighKnown Malware Source Similarityexamples/extensions/notify.ts
HighKnown Malware Source Similaritydist/core/export-html/vendor/highlight.min.js
HighKnown Malware Source Similaritydist/core/export-html/vendor/marked.min.js
HighKnown Malware Source Similarityexamples/extensions/github-issue-autocomplete.ts
Affected versions and remediation
This report applies to @leanandmean/coding-agent@0.74.1-scramjet.73.
See all versions of @leanandmean/coding-agent for other recorded verdicts.
- Review the evidence and your use of @leanandmean/coding-agent@0.74.1-scramjet.73 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.