registry / @leanandmean/coding-agent / 0.74.1-scramjet.86
@leanandmean/coding-agent@0.74.1-scramjet.86
Coding agent CLI with read, bash, edit, write tools and session management
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe inspected behavior fits a coding-agent CLI: command execution is part of its tools, and the reviewed proxy flow sends model context and its own token to a configured proxy. No install hook or concrete unrelated data transfer was found.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The CLI runs when a user invokes it; no install-time execution hook was found in package.json.
Impact
No unauthorized credential transfer, account action, persistence, destructive behavior, or unrelated code execution was identified.
Mechanism
The flagged process execution supports command-line agent tools, and the inspected outbound proxy path uses a configured proxy URL and its own auth token.
AI rationale
The inspected behavior fits a coding-agent CLI: command execution is part of its tools, and the reviewed proxy flow sends model context and its own token to a configured proxy. No install hook or concrete unrelated data transfer was found.
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exports its SDK from dist/index.js; the CLI is a separate entry point.
- The CLI starts the agent when invoked with command-line arguments; package metadata shows no install lifecycle hook.
- The inspected proxy request sends the configured proxy token and model context to options.proxyUrl as part of the proxy feature.
- The Doom example fetches its WebAssembly binary with same-origin credentials; this does not show command-output exfiltration.
Evidence against
- The package has shell and child-process capabilities, consistent with its coding-agent CLI and tools.
- The dependency code checks for provider credentials, but the inspected proxy path uses its own authToken and a configured proxy URL.
- The scanner’s flagged Doom bundle is an example asset; its inspected fetch is for same-origin WebAssembly loading.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
19 flaggeddist/core/exec.jsView file
3*/
L4: import { spawn } from "node:child_process";
L5: import { StringDecoder } from "node:string_decoder";
High
dist/utils/clipboard.jsView file
42[
L43: "powershell.exe",
L44: [
High
•matchType = normalized_sha256
matchedPackage = @leanandmean/coding-agent@0.74.1-scramjet.81
matchedPath = dist/utils/clipboard.js
matchedIdentity = npm:[redacted]:0.74.1-scramjet.81
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Findings
16 High5 Medium5 Low
HighChild Processdist/core/exec.js
HighShelldist/utils/clipboard.js
HighCommand Output Exfiltrationexamples/extensions/doom-overlay/doom/build/doom.js
HighSemantic Analysis Limiteddist/utils/shell.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/utils/shell.js
HighKnown Malware Source Similarityexamples/extensions/doom-overlay/doom/build/doom.js
HighKnown Malware Source Similaritydist/config.js
HighKnown Malware Source Similaritydist/core/package-manager.js
HighKnown Malware Source Similaritydist/core/tools/bash.js
HighKnown Malware Source Similaritydist/core/resolve-config-value.js
High
Affected versions and remediation
This report applies to @leanandmean/coding-agent@0.74.1-scramjet.86.
See all versions of @leanandmean/coding-agent for other recorded verdicts.
- Review the evidence and your use of @leanandmean/coding-agent@0.74.1-scramjet.86 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.