@leviyuan/lodestar@0.19.9: Suspicious npm security report (Warn)

Loading npm security reports…

@leviyuan/lodestar@0.19.9: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

23 flagged

package.jsonView file

Lines 26-66json

26 "chat",

27 "card-kit",

28 "streaming",

29 "lodestar"

30 ],

31 "scripts": {

32 "start": "bun daemon.ts",

33 "test": "bun test",

34 "test:randomized": "bun test --randomize --seed=17",

35 "typecheck": "tsc -p tsconfig.json",

36 "ci": "bun run audit:production && bun run typecheck && bun run test && bun run test:randomized && bun run build",

37 "audit:production": "bun audit --production",

38 "build:daemon": "bun build cli.ts --target=node --packages=external --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar.js",

39 "build:setup": "bun build src/setup-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-setup.js",

40 "build:stop": "bun build src/stop-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-stop.js",

41 "build:update": "bun build src/update-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-update.js",

42 "build:version": "bun build src/version-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-version.js",

43 "build:agent": "bun build src/agent-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-agent.js",

44 "build": "bun run build:daemon && bun run build:setup && bun run build:stop && bun run build:update && bun run build:version && bun run build:agent && bun run build:dsh",

45 "prepublishOnly": "bun run ci",

46 "postinstall": "node scripts/postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L46

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L46

47 "build:dsh": "bun build src/dsh-bridge.ts --target=node --packages=external --outfile=dist/dsh-bridge.js"

48 },

49 "bin": {

50 "lodestar-daemon": "./dist/lodestar.js",

51 "lodestar-setup": "./dist/lodestar-setup.js",

52 "lodestar-stop": "./dist/lodestar-stop.js",

53 "lodestar-update": "./dist/lodestar-update.js",

54 "lodestar-version": "./dist/lodestar-version.js",

55 "lodestar-agent": "./dist/lodestar-agent.js"

56 },

57 "files": [

58 "dist/",

59 "docs/",

60 "scripts/postinstall.cjs",

61 "src/data-dir.cjs",

62 "src/managed-skill-cleanup.cjs",

63 "README.md",

64 "LICENSE"

65 ],

66 "engines": {

dist/lodestar.jsView file

1Source sends the broad process environment to a literal external destination. L1: #!/usr/bin/env node L2: import{createRequire as n_}from"node:module";var I_=Object.create;var{getPrototypeOf:g_,defineProperty:r7,getOwnPropertyNames:m_}=Object;var p_=Object.prototype.hasOwnProperty;func... L3: `).find((Q)=>Q.startsWith("n"))?.slice(1);if(J)return J}throw Error(`无法确定 PID ${$} 的工作目录，不能核对相对 daemon 入口`)}function KP($,Z){if(!Number.isSafeInteger($)||$<=0||$>2147483647||!Z)ret... L4: `),Q=QP(J[0]??""),Y=(J[1]??"").trim();if(Q===null)throw Error(`PID 文件格式坏: ${$}`);if(!Y)return B5(Q)?{state:"exit",pid:Q}:{state:"continue"};return KP(Q,Y)?{state:"exit",pid:Q}:{sta... L5: ${JP()}`)}var VP,XP,zP,HP;var j5=N(()=>{VP=new Set(["-r","--require","--import","--loader","--experimental-loader","--conditions",

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/lodestar.jsView on unpkg · L1

•matchType = previous_version_dangerous_delta matchedPackage = @leviyuan/lodestar@0.19.6 matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.19.6 similarity = 0.983 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/lodestar.jsView on unpkg

node_modules/mathjax-full/es5/ui/menu.jsView file

Lines 1-1javascript

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default

src/managed-skill-cleanup.cjsView file

12Install-time code directly mutates a foreign AI-agent control surface: L12: const targetRoots = roots ?? [ L13: join(homedir(), '.codex', 'skills'), L14: join(homedir(), '.claude', 'skills'), L15: join(managedClaudePluginDir(), 'skills'), Write operation from scripts/postinstall.cjs: L22: } else { L23: fs.writeFileSync('/dev/tty', msg) L24: } Foreign user/project scope from src/managed-sk[redacted]: L12: const targetRoots = roots ?? [ L13: join(homedir(), '.codex', 'skills'), L14: join(homedir(), '.claude', 'skills'), L15: join(managedClaudePluginDir(), 'skills'),

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/managed-skill-cleanup.cjsView on unpkg · L12

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = src/managed-sk[redacted] matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/managed-skill-cleanup.cjsView on unpkg

node_modules/@xmldom/xmldom/lib/dom-parser.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 26

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

node_modules/@xmldom/xmldom/lib/dom-parser.jsView on unpkg

dist/lodestar-version.jsView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = dist/lodestar-version.js matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-version.jsView on unpkg

node_modules/mathjax-full/components/bin/makeAllView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = node_modules/mathjax-full/components/bin/makeAll matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/makeAllView on unpkg

node_modules/mathjax-full/components/bin/packView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = node_modules/mathjax-full/components/bin/pack matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/packView on unpkg

dist/lodestar-update.jsView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = dist/lodestar-update.js matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-update.jsView on unpkg

dist/lodestar-agent.jsView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = dist/lodestar-agent.js matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-agent.jsView on unpkg

dist/lodestar-setup.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-setup.jsView on unpkg

node_modules/mathjax-full/components/bin/versionView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = node_modules/mathjax-full/components/bin/version matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/versionView on unpkg

Source & flagged code

23 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/lodestar.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/lodestar.jsView on unpkg · L1

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/lodestar.jsView on unpkg

High

Child Process

Package source references child process execution.

dist/lodestar.jsView on unpkg · L1

High

Shell

Package source references shell execution.

dist/lodestar.jsView on unpkg · L1

1#!/usr/bin/env node L2: import{createRequire as n_}from"node:module";var I_=Object.create;var{getPrototypeOf:g_,defineProperty:r7,getOwnPropertyNames:m_}=Object;var p_=Object.prototype.hasOwnProperty;func... L3: `).find((Q)=>Q.startsWith("n"))?.slice(1);if(J)return J}throw Error(`无法确定 PID ${$} 的工作目录，不能核对相对 daemon 入口`)}function KP($,Z){if(!Number.isSafeInteger($)||$<=0||$>2147483647||!Z)ret... L4: `),Q=QP(J[0]??""),Y=(J[1]??"").trim();if(Q===null)throw Error(`PID 文件格式坏: ${$}`);if(!Y)return B5(Q)?{state:"exit",pid:Q}:{state:"continue"};return KP(Q,Y)?{state:"exit",pid:Q}:{sta... L5: ${JP()}`)}var VP,XP,zP,HP;var j5=N(()=>{VP=new Set(["-r","--require","--import","--loader","--experimental-loader","--conditions","-C","--inspect-port","--title","--icu-data-dir","... L6: `).filter(Boolean).m

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/lodestar.jsView on unpkg · L1

44} L45: `;SV=OP()});import{Agent as NP}from"node:http";import{Agent as RP}from"node:https";import{Readable as bV}from"node:stream";import TP from"node-fetch";import{HttpProxyAgent as EP}fr... L46: `;if(process.stderr.write(J),!q5())return;try{let Q=mV(Z);if(fV!==Q)fV=Q,cV(t,Z);hV(pV(Z),J)}catch{}}var IP=7,L5="daemon-",D5=".log",fV=null;var h=N(()=>{H0();if(q5())try{wP(t,{rec... L47: `)}var tP=384,rP=448,eP=448;var x0=()=>{};import{execFile as ZL}from"node:child_process";import{spawn as JL}from"cross-spawn";function YL($){if(!Number.isSafeInteger($)||$<=0)retur... L48: ${Y}${V}`));else Z()})})}async function A5($,Z,J={}){Z?.throwIfAborted();let Q=J.platform??process.platform,Y=J.timeoutMs??300000,V=J.terminationTimeoutMs??1e4;return await new Pro...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/lodestar.jsView on unpkg · L44

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/lodestar.jsView on unpkg · L1

44Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/lodestar.js L44: } L45: `;SV=OP()});import{Agent as NP}from"node:http";import{Agent as RP}from"node:https";import{Readable as bV}from"node:stream";import TP from"node-fetch";import{HttpProxyAgent as EP}fr... L46: `;if(process.stderr.write(J),!q5())return;try{let Q=mV(Z);if(fV!==Q)fV=Q,cV(t,Z);hV(pV(Z),J)}catch{}}var IP=7,L5="daemon-",D5=".log",fV=null;var h=N(()=>{H0();if(q5())try{wP(t,{rec... L47: `)}var tP=384,rP=448,eP=448;var x0=()=>{};import{execFile as ZL}from"node:child_process";import{spawn as JL}from"cross-spawn";function YL($){if(!Number.isSafeInteger($)||$<=0)retur... L48: ${Y}${V}`));else Z()})})}async function A5($,Z,J={}){Z?.throwIfAborted();let Q=J.platform??process.platform,Y=J.timeoutMs??300000,V=J.t

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/lodestar.jsView on unpkg · L44

18} L19: [DllImport("winhttp.dll", SetLastError = true)] L20: [return: MarshalAs(UnmanagedType.Bool)]

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/lodestar.jsView on unpkg · L18

node_modules/mathjax-full/es5/ui/menu.jsView file

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default=n},8905:function(e,t,n){var r=this&&thi...

Critical

Remote Response Code Execution

Source passes code obtained from a remote response into a dynamic execution sink.

node_modules/mathjax-full/es5/ui/menu.jsView on unpkg · L1

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default=n},8905:function(e,t,n){var r=this&&thi...

High

Eval

Package source references dynamic code evaluation.

node_modules/mathjax-full/es5/ui/menu.jsView on unpkg · L1

src/managed-skill-cleanup.cjsView file

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/managed-skill-cleanup.cjsView on unpkg · L12

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/managed-skill-cleanup.cjsView on unpkg

node_modules/@xmldom/xmldom/lib/dom-parser.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 26

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

node_modules/@xmldom/xmldom/lib/dom-parser.jsView on unpkg

dist/lodestar-version.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-version.jsView on unpkg

node_modules/mathjax-full/components/bin/makeAllView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/makeAllView on unpkg

node_modules/mathjax-full/components/bin/packView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/packView on unpkg

dist/lodestar-update.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-update.jsView on unpkg

dist/lodestar-agent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-agent.jsView on unpkg

dist/lodestar-setup.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-setup.jsView on unpkg

node_modules/mathjax-full/components/bin/versionView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/versionView on unpkg

Source & flagged code

23 flagged

package.jsonView file

Lines 26-66json

26 "chat",

27 "card-kit",

28 "streaming",

29 "lodestar"

30 ],

31 "scripts": {

32 "start": "bun daemon.ts",

33 "test": "bun test",

34 "test:randomized": "bun test --randomize --seed=17",

35 "typecheck": "tsc -p tsconfig.json",

36 "ci": "bun run audit:production && bun run typecheck && bun run test && bun run test:randomized && bun run build",

37 "audit:production": "bun audit --production",

38 "build:daemon": "bun build cli.ts --target=node --packages=external --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar.js",

39 "build:setup": "bun build src/setup-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-setup.js",

40 "build:stop": "bun build src/stop-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-stop.js",

41 "build:update": "bun build src/update-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-update.js",

42 "build:version": "bun build src/version-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-version.js",

43 "build:agent": "bun build src/agent-cli.ts --target=node --minify --banner='#!/usr/bin/env node' --outfile=dist/lodestar-agent.js",

44 "build": "bun run build:daemon && bun run build:setup && bun run build:stop && bun run build:update && bun run build:version && bun run build:agent && bun run build:dsh",

45 "prepublishOnly": "bun run ci",

46 "postinstall": "node scripts/postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L46

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L46

47 "build:dsh": "bun build src/dsh-bridge.ts --target=node --packages=external --outfile=dist/dsh-bridge.js"

48 },

49 "bin": {

50 "lodestar-daemon": "./dist/lodestar.js",

51 "lodestar-setup": "./dist/lodestar-setup.js",

52 "lodestar-stop": "./dist/lodestar-stop.js",

53 "lodestar-update": "./dist/lodestar-update.js",

54 "lodestar-version": "./dist/lodestar-version.js",

55 "lodestar-agent": "./dist/lodestar-agent.js"

56 },

57 "files": [

58 "dist/",

59 "docs/",

60 "scripts/postinstall.cjs",

61 "src/data-dir.cjs",

62 "src/managed-skill-cleanup.cjs",

63 "README.md",

64 "LICENSE"

65 ],

66 "engines": {

dist/lodestar.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/lodestar.jsView on unpkg · L1

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/lodestar.jsView on unpkg

node_modules/mathjax-full/es5/ui/menu.jsView file

Lines 1-1javascript

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default

src/managed-skill-cleanup.cjsView file

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/managed-skill-cleanup.cjsView on unpkg · L12

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/managed-skill-cleanup.cjsView on unpkg

node_modules/@xmldom/xmldom/lib/dom-parser.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 26

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

node_modules/@xmldom/xmldom/lib/dom-parser.jsView on unpkg

dist/lodestar-version.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-version.jsView on unpkg

node_modules/mathjax-full/components/bin/makeAllView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/makeAllView on unpkg

node_modules/mathjax-full/components/bin/packView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/packView on unpkg

dist/lodestar-update.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-update.jsView on unpkg

dist/lodestar-agent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-agent.jsView on unpkg

dist/lodestar-setup.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-setup.jsView on unpkg

node_modules/mathjax-full/components/bin/versionView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/versionView on unpkg

@leviyuan/lodestar@0.19.9

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code