@leviyuan/lodestar@0.18.24: Suspicious npm security report (Warn)

Loading npm security reports…

@leviyuan/lodestar@0.18.24: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

24 flagged

package.jsonView file

Lines 26-66json

26 "chat",

27 "card-kit",

28 "streaming",

29 "lodestar"

30 ],

31 "scripts": {

32 "start": "bun daemon.ts",

33 "test": "bun test",

34 "test:randomized": "bun test --randomize --seed=17",

35 "typecheck": "tsc -p tsconfig.json",

36 "ci": "bun run audit:production && bun run typecheck && bun run test && bun run test:randomized && bun run build",

37 "audit:production": "bun audit --production",

38 "build:daemon": "bun build cli.ts --target=node --packages=external --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar.js",

39 "build:setup": "bun build src/setup-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-setup.js",

40 "build:stop": "bun build src/stop-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-stop.js",

41 "build:update": "bun build src/update-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-update.js",

42 "build:version": "bun build src/version-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-version.js",

43 "build:agent": "bun build src/agent-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-agent.js",

44 "build": "bun run build:daemon && bun run build:setup && bun run build:stop && bun run build:update && bun run build:version && bun run build:agent && bun run build:dsh",

45 "prepublishOnly": "bun run ci",

46 "postinstall": "node scripts/postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L46

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L46

47 "build:dsh": "bun build src/dsh-bridge.ts --target=node --packages=external --outfile=dist/dsh-bridge.js"

48 },

49 "bin": {

50 "lodestar-daemon": "./dist/lodestar.js",

51 "lodestar-setup": "./dist/lodestar-setup.js",

52 "lodestar-stop": "./dist/lodestar-stop.js",

53 "lodestar-update": "./dist/lodestar-update.js",

54 "lodestar-version": "./dist/lodestar-version.js",

55 "lodestar-agent": "./dist/lodestar-agent.js"

56 },

57 "files": [

58 "dist/",

59 "docs/",

60 "scripts/postinstall.cjs",

61 "src/data-dir.cjs",

62 "src/managed-skill-cleanup.cjs",

63 "README.md",

64 "LICENSE"

65 ],

66 "engines": {

dist/lodestar.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @leviyuan/lodestar@0.18.7 matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.7 similarity = 0.950 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/lodestar.jsView on unpkg

High

Child Process

Package source references child process execution.

dist/lodestar.jsView on unpkg · L1

High

Shell

Package source references shell execution.

dist/lodestar.jsView on unpkg · L1

node_modules/mathjax-full/es5/ui/menu.jsView file

Lines 1-1javascript

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default

src/managed-skill-cleanup.cjsView file

12Install-time code directly mutates a foreign AI-agent control surface: L12: const targetRoots = roots ?? [ L13: join(homedir(), '.codex', 'skills'), L14: join(homedir(), '.claude', 'skills'), L15: join(managedClaudePluginDir(), 'skills'), Write operation from scripts/postinstall.cjs: L22: } else { L23: fs.writeFileSync('/dev/tty', msg) L24: } Foreign user/project scope from src/managed-sk[redacted]: L12: const targetRoots = roots ?? [ L13: join(homedir(), '.codex', 'skills'), L14: join(homedir(), '.claude', 'skills'), L15: join(managedClaudePluginDir(), 'skills'),

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/managed-skill-cleanup.cjsView on unpkg · L12

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = src/managed-sk[redacted] matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/managed-skill-cleanup.cjsView on unpkg

node_modules/@xmldom/xmldom/lib/dom-parser.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 26

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

node_modules/@xmldom/xmldom/lib/dom-parser.jsView on unpkg

dist/lodestar-stop.jsView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = dist/lodestar-stop.js matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-stop.jsView on unpkg

dist/lodestar-version.jsView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = dist/lodestar-version.js matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-version.jsView on unpkg

node_modules/mathjax-full/components/bin/makeAllView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = node_modules/mathjax-full/components/bin/makeAll matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/makeAllView on unpkg

node_modules/mathjax-full/components/bin/packView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = node_modules/mathjax-full/components/bin/pack matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/packView on unpkg

dist/lodestar-update.jsView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = dist/lodestar-update.js matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-update.jsView on unpkg

dist/lodestar-agent.jsView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = dist/lodestar-agent.js matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-agent.jsView on unpkg

dist/lodestar-setup.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-setup.jsView on unpkg

node_modules/mathjax-full/components/bin/versionView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = node_modules/mathjax-full/components/bin/version matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/versionView on unpkg

Source & flagged code

24 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/lodestar.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/lodestar.jsView on unpkg

High

Child Process

Package source references child process execution.

dist/lodestar.jsView on unpkg · L1

High

Shell

Package source references shell execution.

dist/lodestar.jsView on unpkg · L1

1#!/usr/bin/env node L2: import{createRequire as P_}from"node:module";var W_=Object.create;var{getPrototypeOf:G_,defineProperty:H7,getOwnPropertyNames:K_}=Object;var B_=Object.prototype.hasOwnProperty;func... L3: `),Q=parseInt((J[0]??"").trim(),10),Y=(J[1]??"").trim();if(!Number.isFinite(Q)||Q<=0)return{state:"continue"};if(!Y)try{return process.kill(Q,0),{state:"exit",pid:Q}}catch{return{s... L4: ${R_()}`)}var D7=()=>{};import{execFile as x_}from"node:child_process";import{readFile as S_}from"node:fs/promises";import{homedir as C_}from"node:os";import{join as xY}from"node:p... L5: `).filter(Boolean).map((Y)=>{let V=Y.match(/^org\.gnome\.system\.proxy(\.\w+)?\s+([\w-]+)\s+(.*)$/);if(!V)throw Error("network proxy: invalid GNOME proxy settings");return[`${V[1]?...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/lodestar.jsView on unpkg · L1

43} L44: `;bY=g_()});import{Agent as m_}from"node:http";import{Agent as p_}from"node:https";import{Readable as wY}from"node:stream";import c_ from"node-fetch";import{HttpProxyAgent as u_}fr... L45: `)}var Jj=384,Qj=448,Yj=448;var x0=()=>{};import{execFile as Xj}from"node:child_process";import{spawn as Hj}from"cross-spawn";function Wj($){if(!Number.isSafeInteger($)||$<=0)retur... L46: ${Y}${V}`));else Z()})})}async function O7($,Z,J={}){Z?.throwIfAborted();let Q=J.platform??process.platform,Y=J.timeoutMs??300000,V=J.terminationTimeoutMs??1e4;return await new Pro... L47: ${W}`),M=(T)=>{if(_||j||K)return;G??=Error(T),q=setTimeout(()=>P(O(`stdio did not close within ${V}ms`)),V),K=Promise.resolve().then(async()=>{if(j)throw Error("installer closed be...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/lodestar.jsView on unpkg · L43

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/lodestar.jsView on unpkg · L1

43Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/lodestar.js L43: } L44: `;bY=g_()});import{Agent as m_}from"node:http";import{Agent as p_}from"node:https";import{Readable as wY}from"node:stream";import c_ from"node-fetch";import{HttpProxyAgent as u_}fr... L45: `)}var Jj=384,Qj=448,Yj=448;var x0=()=>{};import{execFile as Xj}from"node:child_process";import{spawn as Hj}from"cross-spawn";function Wj($){if(!Number.isSafeInteger($)||$<=0)retur... L46: ${Y}${V}`));else Z()})})}async function O7($,Z,J={}){Z?.throwIfAborted();let Q=J.platform??process.platform,Y=J.timeoutMs??300000,V=J.terminationTimeoutMs??1e4;return await new Pro... L47: ${W}`),M=(T)=>{if(_||j||K)return;G??=Error(T),q=setTimeout(()=>P(O(`stdio did not close within ${V}ms`)),V),K=Promise.resolve().then(as

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/lodestar.jsView on unpkg · L43

•matchType = token_shingles matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = dist/lodestar.js matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 0.729 shingleOverlap = 35 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar.jsView on unpkg

17} L18: [DllImport("winhttp.dll", SetLastError = true)] L19: [return: MarshalAs(UnmanagedType.Bool)]

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/lodestar.jsView on unpkg · L17

node_modules/mathjax-full/es5/ui/menu.jsView file

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default=n},8905:function(e,t,n){var r=this&&thi...

Critical

Remote Response Code Execution

Source passes code obtained from a remote response into a dynamic execution sink.

node_modules/mathjax-full/es5/ui/menu.jsView on unpkg · L1

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default=n},8905:function(e,t,n){var r=this&&thi...

High

Eval

Package source references dynamic code evaluation.

node_modules/mathjax-full/es5/ui/menu.jsView on unpkg · L1

src/managed-skill-cleanup.cjsView file

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/managed-skill-cleanup.cjsView on unpkg · L12

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/managed-skill-cleanup.cjsView on unpkg

node_modules/@xmldom/xmldom/lib/dom-parser.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 26

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

node_modules/@xmldom/xmldom/lib/dom-parser.jsView on unpkg

dist/lodestar-stop.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-stop.jsView on unpkg

dist/lodestar-version.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-version.jsView on unpkg

node_modules/mathjax-full/components/bin/makeAllView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/makeAllView on unpkg

node_modules/mathjax-full/components/bin/packView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/packView on unpkg

dist/lodestar-update.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-update.jsView on unpkg

dist/lodestar-agent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-agent.jsView on unpkg

dist/lodestar-setup.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-setup.jsView on unpkg

node_modules/mathjax-full/components/bin/versionView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/versionView on unpkg

Source & flagged code

24 flagged

package.jsonView file

Lines 26-66json

26 "chat",

27 "card-kit",

28 "streaming",

29 "lodestar"

30 ],

31 "scripts": {

32 "start": "bun daemon.ts",

33 "test": "bun test",

34 "test:randomized": "bun test --randomize --seed=17",

35 "typecheck": "tsc -p tsconfig.json",

36 "ci": "bun run audit:production && bun run typecheck && bun run test && bun run test:randomized && bun run build",

37 "audit:production": "bun audit --production",

38 "build:daemon": "bun build cli.ts --target=node --packages=external --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar.js",

39 "build:setup": "bun build src/setup-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-setup.js",

40 "build:stop": "bun build src/stop-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-stop.js",

41 "build:update": "bun build src/update-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-update.js",

42 "build:version": "bun build src/version-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-version.js",

43 "build:agent": "bun build src/agent-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-agent.js",

44 "build": "bun run build:daemon && bun run build:setup && bun run build:stop && bun run build:update && bun run build:version && bun run build:agent && bun run build:dsh",

45 "prepublishOnly": "bun run ci",

46 "postinstall": "node scripts/postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L46

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L46

47 "build:dsh": "bun build src/dsh-bridge.ts --target=node --packages=external --outfile=dist/dsh-bridge.js"

48 },

49 "bin": {

50 "lodestar-daemon": "./dist/lodestar.js",

51 "lodestar-setup": "./dist/lodestar-setup.js",

52 "lodestar-stop": "./dist/lodestar-stop.js",

53 "lodestar-update": "./dist/lodestar-update.js",

54 "lodestar-version": "./dist/lodestar-version.js",

55 "lodestar-agent": "./dist/lodestar-agent.js"

56 },

57 "files": [

58 "dist/",

59 "docs/",

60 "scripts/postinstall.cjs",

61 "src/data-dir.cjs",

62 "src/managed-skill-cleanup.cjs",

63 "README.md",

64 "LICENSE"

65 ],

66 "engines": {

dist/lodestar.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/lodestar.jsView on unpkg

High

Child Process

Package source references child process execution.

dist/lodestar.jsView on unpkg · L1

High

Shell

Package source references shell execution.

dist/lodestar.jsView on unpkg · L1

node_modules/mathjax-full/es5/ui/menu.jsView file

Lines 1-1javascript

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default

src/managed-skill-cleanup.cjsView file

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/managed-skill-cleanup.cjsView on unpkg · L12

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/managed-skill-cleanup.cjsView on unpkg

node_modules/@xmldom/xmldom/lib/dom-parser.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 26

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

node_modules/@xmldom/xmldom/lib/dom-parser.jsView on unpkg

dist/lodestar-stop.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-stop.jsView on unpkg

dist/lodestar-version.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-version.jsView on unpkg

node_modules/mathjax-full/components/bin/makeAllView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/makeAllView on unpkg

node_modules/mathjax-full/components/bin/packView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/packView on unpkg

dist/lodestar-update.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-update.jsView on unpkg

dist/lodestar-agent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-agent.jsView on unpkg

dist/lodestar-setup.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-setup.jsView on unpkg

node_modules/mathjax-full/components/bin/versionView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/versionView on unpkg

@leviyuan/lodestar@0.18.24

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code