registry / @leanandmean/coding-agent / 0.74.1-scramjet.75
@leanandmean/coding-agent@0.74.1-scramjet.75
⚠ Under reviewCoding agent CLI with read, bash, edit, write tools and session management
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe inspected proxy code shows credential forwarding to a configured endpoint, while its visible example makes the caller supply both endpoint and token. I could not resolve all runtime callers and required source paths, so the remaining credential-flow question is unresolved.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Use of the proxy streaming helper.
Impact
The inspected code does not establish whether package runtime paths supply saved credentials or a package-selected recipient.
Mechanism
The helper posts a bearer token and model request to the URL supplied in its options.
AI rationale
The inspected proxy code shows credential forwarding to a configured endpoint, while its visible example makes the caller supply both endpoint and token. I could not resolve all runtime callers and required source paths, so the remaining credential-flow question is unresolved.
Decision evidence
public snapshotAI called this Manual Review at 54.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest points to dist/index.js and the inspected scripts show build and development tasks; the excerpt does not include the full scripts object.
- The proxy helper sends a bearer token to options.proxyUrl and takes the token from options.authToken; its documented example has the caller provide both values.
- The inspected package-manager excerpts show command completion, timeout, and error handling.
Evidence against
- The proxy behavior has a credential transfer, but this inspection did not resolve all callers and configuration paths needed to determine whether any package-selected credential or destination reaches it.
- The full required runtime citation set and package behavior were not resolved in this inspection.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinified
Source & flagged code
13 flaggeddist/core/exec.jsView file
3*/
L4: import { spawn } from "node:child_process";
L5: import { StringDecoder } from "node:string_decoder";
High
dist/utils/clipboard.jsView file
42[
L43: "powershell.exe",
L44: [
High
examples/extensions/doom-overlay/doom-engine.tsView file
64
Findings
1 Critical9 High5 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/modes/interactive/interactive-mode.js
HighChild Processdist/core/exec.js
HighShelldist/utils/clipboard.js
HighCommand Output Exfiltrationexamples/extensions/doom-overlay/doom/build/doom.js
HighSemantic Analysis Limiteddist/utils/shell.js#virtual:normalized:round1
HighKnown Malware Source Similarityexamples/extensions/doom-overlay/doom/build/doom.js
HighKnown Malware Source Similarityexamples/extensions/notify.ts
HighKnown Malware Source Similaritydist/core/export-html/vendor/highlight.min.js
HighKnown Malware Source Similaritydist/core/export-html/vendor/marked.min.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @leanandmean/coding-agent@0.74.1-scramjet.75.
See all versions of @leanandmean/coding-agent for other recorded verdicts.
- Review the evidence and your use of @leanandmean/coding-agent@0.74.1-scramjet.75 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.