registry / @leanandmean/coding-agent / 0.74.1-scramjet.74
@leanandmean/coding-agent@0.74.1-scramjet.74
⚠ Under reviewCoding agent CLI with read, bash, edit, write tools and session management
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe inspected suspicious signals resolve to caller-configured proxy authentication, ordinary process handling, and a scoped WebAssembly file-read fallback. The broader runtime and selected dependency behavior remain unreviewed, so the package cannot be cleared from this inspection.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Use of the package runtime; no malicious trigger was confirmed.
Impact
No malicious impact was established from the inspected source.
Mechanism
The inspected proxy forwards caller-supplied authentication to a caller-supplied URL. The remaining runtime behavior has not been resolved.
AI rationale
The inspected suspicious signals resolve to caller-configured proxy authentication, ordinary process handling, and a scoped WebAssembly file-read fallback. The broader runtime and selected dependency behavior remain unreviewed, so the package cannot be cleared from this inspection.
Evidence
package.json.lpm-dependency-evidence-a5838be4-3e08-4a0a-acdb-4d6c4854130b/0/npm-linux/dist/proxy.jsdist/core/package-manager.jsdist/utils/photon.js
Decision evidence
public snapshotAI called this Manual Review at 58.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest points to dist/index.js and lists build and asset-copy scripts; the inspected excerpt does not establish install-time behavior.
- The agent proxy sends its supplied auth token to its supplied proxy URL, and its API describes both values as caller-provided proxy options.
- The package-manager runtime excerpt handles child-process completion and reports command failures.
- The image helper patches readFileSync only for the named WebAssembly file and preserves the original reader for other paths.
- The example autocomplete code filters GitHub issue suggestions locally.
Evidence against
- The inspected proxy source establishes no package-selected destination: the request uses options.proxyUrl and options.authToken.
- The inspected sources do not establish an attack, but they do not cover the full runtime and dependency set needed to clear this package.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
13 flaggeddist/core/exec.jsView file
3*/
L4: import { spawn } from "node:child_process";
L5: import { StringDecoder } from "node:string_decoder";
High
dist/utils/clipboard.jsView file
42[
L43: "powershell.exe",
L44: [
High
examples/extensions/doom-overlay/doom-engine.tsView file
64
Findings
1 Critical9 High5 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/modes/interactive/interactive-mode.js
HighChild Processdist/core/exec.js
HighShelldist/utils/clipboard.js
HighCommand Output Exfiltrationexamples/extensions/doom-overlay/doom/build/doom.js
HighSemantic Analysis Limiteddist/utils/shell.js#virtual:normalized:round1
HighKnown Malware Source Similarityexamples/extensions/doom-overlay/doom/build/doom.js
HighKnown Malware Source Similarityexamples/extensions/notify.ts
HighKnown Malware Source Similaritydist/core/export-html/vendor/highlight.min.js
HighKnown Malware Source Similaritydist/core/export-html/vendor/marked.min.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @leanandmean/coding-agent@0.74.1-scramjet.74.
See all versions of @leanandmean/coding-agent for other recorded verdicts.
- Review the evidence and your use of @leanandmean/coding-agent@0.74.1-scramjet.74 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.