registry / @leanandmean/coding-agent / 0.74.1-scramjet.76
@leanandmean/coding-agent@0.74.1-scramjet.76
Coding agent CLI with read, bash, edit, write tools and session management
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe manifest has no install hook, and the flagged runtime and example behaviors are consistent with the package’s declared features. The scanner similarity and dynamic-code hints did not establish a concrete attack path in the inspected source.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Normal package use or explicit loading of an example extension.
Impact
No confirmed malicious effect or unrelated credential transfer was established.
Mechanism
The reviewed network helper sends agent requests and its supplied bearer token to the configured proxy URL; the flagged code-loading example reads and loads a local bundled DOOM script.
AI rationale
The manifest has no install hook, and the flagged runtime and example behaviors are consistent with the package’s declared features. The scanner similarity and dynamic-code hints did not establish a concrete attack path in the inspected source.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package and its three inspected same-vendor runtime dependencies have no preinstall, install, or postinstall hook; their code serves the declared coding-agent, provider, and terminal-interface functions.
- The flagged proxy helper is documented for routing agent requests through a proxy and sends its supplied token to the supplied proxy URL.
- The flagged dynamic code loading is in the optional DOOM example and loads a local bundled JavaScript file; the notification example sends a fixed local notification on an agent completion event.
Evidence against
- No inspected source establishes hidden credential collection, an unrelated default recipient, unconsented agent-control changes, or destructive behavior.
- The static similarity and dynamic-code labels identify areas to inspect but do not establish malicious behavior in the source reviewed.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
13 flaggeddist/core/exec.jsView file
3*/
L4: import { spawn } from "node:child_process";
L5: import { StringDecoder } from "node:string_decoder";
High
dist/utils/clipboard.jsView file
42[
L43: "powershell.exe",
L44: [
High
examples/extensions/doom-overlay/doom-engine.tsView file
64
Findings
1 Critical9 High5 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/modes/interactive/interactive-mode.js
HighChild Processdist/core/exec.js
HighShelldist/utils/clipboard.js
HighCommand Output Exfiltrationexamples/extensions/doom-overlay/doom/build/doom.js
HighSemantic Analysis Limiteddist/utils/shell.js#virtual:normalized:round1
HighKnown Malware Source Similarityexamples/extensions/doom-overlay/doom/build/doom.js
HighKnown Malware Source Similarityexamples/extensions/notify.ts
HighKnown Malware Source Similaritydist/core/export-html/vendor/highlight.min.js
HighKnown Malware Source Similaritydist/core/export-html/vendor/marked.min.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @leanandmean/coding-agent@0.74.1-scramjet.76.
See all versions of @leanandmean/coding-agent for other recorded verdicts.
- Review the evidence and your use of @leanandmean/coding-agent@0.74.1-scramjet.76 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.