@leviyuan/lodestar@0.20.1: Manual Review npm security report

Loading npm security reports…

@leviyuan/lodestar@0.20.1: Manual Review npm security report | LPM Firewall

Source & flagged code

22 flagged

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/lodestar.jsView file

1Source sends the broad process environment to a literal external destination. L1: #!/usr/bin/env node L2: import{createRequire as $L}from"node:module";var d_=Object.create;var{getPrototypeOf:i_,defineProperty:t6,getOwnPropertyNames:n_}=Object;var a_=Object.prototype.hasOwnProperty;func... L3: `).find((Q)=>Q.startsWith("n"))?.slice(1);if(J)return J}throw Error(`无法确定 PID ${$} 的工作目录，不能核对相对 daemon 入口`)}function DL($,Z){if(!Number.isSafeInteger($)||$<=0||$>2147483647||!Z)ret... L4: `),Q=WL(J[0]??""),Y=(J[1]??"").trim();if(Q===null)throw Error(`PID 文件格式坏: ${$}`);if(!Y)return K5(Q)?{state:"exit",pid:Q}:{state:"continue"};return DL(Q,Y)?{state:"exit",pid:Q}:{sta... L5: ${GL()}`)}var BL,jL,_L,LL;var B5=R(()=>{BL=new Set(["-r","--require","--import","--loader","--experimental-loader","--conditions",

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/lodestar.jsView on unpkg · L1

High

Child Process

Package source references child process execution.

dist/lodestar.jsView on unpkg · L1

High

Shell

Package source references shell execution.

dist/lodestar.jsView on unpkg · L1

1#!/usr/bin/env node L2: import{createRequire as $L}from"node:module";var d_=Object.create;var{getPrototypeOf:i_,defineProperty:t6,getOwnPropertyNames:n_}=Object;var a_=Object.prototype.hasOwnProperty;func... L3: `).find((Q)=>Q.startsWith("n"))?.slice(1);if(J)return J}throw Error(`无法确定 PID ${$} 的工作目录，不能核对相对 daemon 入口`)}function DL($,Z){if(!Number.isSafeInteger($)||$<=0||$>2147483647||!Z)ret... L4: `),Q=WL(J[0]??""),Y=(J[1]??"").trim();if(Q===null)throw Error(`PID 文件格式坏: ${$}`);if(!Y)return K5(Q)?{state:"exit",pid:Q}:{state:"continue"};return DL(Q,Y)?{state:"exit",pid:Q}:{sta... L5: ${GL()}`)}var BL,jL,_L,LL;var B5=R(()=>{BL=new Set(["-r","--require","--import","--loader","--experimental-loader","--conditions","-C","--inspect-port","--title","--icu-data-dir","... L6: `).filter(Boolean).m

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/lodestar.jsView on unpkg · L1

44} L45: `;TV=CL()});import{Agent as bL}from"node:http";import{Agent as kL}from"node:https";import{Readable as xV}from"node:stream";import wL from"node-fetch";import{HttpProxyAgent as yL}fr... L46: `;if(process.stderr.write(J),!q5())return;try{let Q=hV(Z);if(wV!==Q)wV=Q,gV(t,Z);yV(IV(Z),J)}catch{}}var dL=7,L5="daemon-",P5=".log",wV=null;var I=R(()=>{H0();if(q5())try{mL(t,{rec... L47: `)}var QP=384,YP=448,VP=448;var x0=()=>{};import{execFile as zP}from"node:child_process";import{spawn as HP}from"cross-spawn";function WP($){if(!Number.isSafeInteger($)||$<=0)retur... L48: ${Y}${V}`));else Z()})})}async function M5($,Z,J={}){Z?.throwIfAborted();let Q=J.platform??process.platform,Y=J.timeoutMs??300000,V=J.terminationTimeoutMs??1e4;return await new Pro...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/lodestar.jsView on unpkg · L44

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/lodestar.jsView on unpkg · L1

44Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/lodestar.js L44: } L45: `;TV=CL()});import{Agent as bL}from"node:http";import{Agent as kL}from"node:https";import{Readable as xV}from"node:stream";import wL from"node-fetch";import{HttpProxyAgent as yL}fr... L46: `;if(process.stderr.write(J),!q5())return;try{let Q=hV(Z);if(wV!==Q)wV=Q,gV(t,Z);yV(IV(Z),J)}catch{}}var dL=7,L5="daemon-",P5=".log",wV=null;var I=R(()=>{H0();if(q5())try{mL(t,{rec... L47: `)}var QP=384,YP=448,VP=448;var x0=()=>{};import{execFile as zP}from"node:child_process";import{spawn as HP}from"cross-spawn";function WP($){if(!Number.isSafeInteger($)||$<=0)retur... L48: ${Y}${V}`));else Z()})})}async function M5($,Z,J={}){Z?.throwIfAborted();let Q=J.platform??process.platform,Y=J.timeoutMs??300000,V=J.t

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/lodestar.jsView on unpkg · L44

18} L19: [DllImport("winhttp.dll", SetLastError = true)] L20: [return: MarshalAs(UnmanagedType.Bool)]

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/lodestar.jsView on unpkg · L18

node_modules/mathjax-full/es5/ui/menu.jsView file

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default=n},8905:function(e,t,n){var r=this&&thi...

Critical

Remote Response Code Execution

Source passes code obtained from a remote response into a dynamic execution sink.

node_modules/mathjax-full/es5/ui/menu.jsView on unpkg · L1

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default=n},8905:function(e,t,n){var r=this&&thi...

High

Eval

Package source references dynamic code evaluation.

node_modules/mathjax-full/es5/ui/menu.jsView on unpkg · L1

src/managed-skill-cleanup.cjsView file

12Install-time code directly mutates a foreign AI-agent control surface: L12: const targetRoots = roots ?? [ L13: join(homedir(), '.codex', 'skills'), L14: join(homedir(), '.claude', 'skills'), L15: join(managedClaudePluginDir(), 'skills'), Write operation from scripts/postinstall.cjs: L22: } else { L23: fs.writeFileSync('/dev/tty', msg) L24: } Foreign user/project scope from src/managed-sk[redacted]: L12: const targetRoots = roots ?? [ L13: join(homedir(), '.codex', 'skills'), L14: join(homedir(), '.claude', 'skills'), L15: join(managedClaudePluginDir(), 'skills'),

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/managed-skill-cleanup.cjsView on unpkg · L12

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = src/managed-sk[redacted] matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/managed-skill-cleanup.cjsView on unpkg

node_modules/@xmldom/xmldom/lib/dom-parser.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 26

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

node_modules/@xmldom/xmldom/lib/dom-parser.jsView on unpkg

dist/lodestar-version.jsView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = dist/lodestar-version.js matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-version.jsView on unpkg

node_modules/mathjax-full/components/bin/makeAllView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = node_modules/mathjax-full/components/bin/makeAll matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/makeAllView on unpkg

node_modules/mathjax-full/components/bin/packView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = node_modules/mathjax-full/components/bin/pack matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/packView on unpkg

dist/lodestar-update.jsView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = dist/lodestar-update.js matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-update.jsView on unpkg

dist/lodestar-agent.jsView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = dist/lodestar-agent.js matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-agent.jsView on unpkg

dist/lodestar-setup.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-setup.jsView on unpkg

node_modules/mathjax-full/components/bin/versionView file

•matchType = normalized_sha256 matchedPackage = @leviyuan/lodestar@0.18.22 matchedPath = node_modules/mathjax-full/components/bin/version matchedIdentity = npm:QGxldml5dWFuL2xvZGVzdGFy:0.18.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/versionView on unpkg

Source & flagged code

22 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/lodestar.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/lodestar.jsView on unpkg · L1

High

Child Process

Package source references child process execution.

dist/lodestar.jsView on unpkg · L1

High

Shell

Package source references shell execution.

dist/lodestar.jsView on unpkg · L1

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/lodestar.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/lodestar.jsView on unpkg · L44

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/lodestar.jsView on unpkg · L1

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/lodestar.jsView on unpkg · L44

18} L19: [DllImport("winhttp.dll", SetLastError = true)] L20: [return: MarshalAs(UnmanagedType.Bool)]

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/lodestar.jsView on unpkg · L18

node_modules/mathjax-full/es5/ui/menu.jsView file

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default=n},8905:function(e,t,n){var r=this&&thi...

Critical

Remote Response Code Execution

Source passes code obtained from a remote response into a dynamic execution sink.

node_modules/mathjax-full/es5/ui/menu.jsView on unpkg · L1

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default=n},8905:function(e,t,n){var r=this&&thi...

High

Eval

Package source references dynamic code evaluation.

node_modules/mathjax-full/es5/ui/menu.jsView on unpkg · L1

src/managed-skill-cleanup.cjsView file

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/managed-skill-cleanup.cjsView on unpkg · L12

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/managed-skill-cleanup.cjsView on unpkg

node_modules/@xmldom/xmldom/lib/dom-parser.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 26

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

node_modules/@xmldom/xmldom/lib/dom-parser.jsView on unpkg

dist/lodestar-version.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-version.jsView on unpkg

node_modules/mathjax-full/components/bin/makeAllView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/makeAllView on unpkg

node_modules/mathjax-full/components/bin/packView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/packView on unpkg

dist/lodestar-update.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-update.jsView on unpkg

dist/lodestar-agent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-agent.jsView on unpkg

dist/lodestar-setup.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-setup.jsView on unpkg

node_modules/mathjax-full/components/bin/versionView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/versionView on unpkg

Source & flagged code

22 flagged

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/lodestar.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/lodestar.jsView on unpkg · L1

High

Child Process

Package source references child process execution.

dist/lodestar.jsView on unpkg · L1

High

Shell

Package source references shell execution.

dist/lodestar.jsView on unpkg · L1

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/lodestar.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/lodestar.jsView on unpkg · L44

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/lodestar.jsView on unpkg · L1

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/lodestar.jsView on unpkg · L44

18} L19: [DllImport("winhttp.dll", SetLastError = true)] L20: [return: MarshalAs(UnmanagedType.Bool)]

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/lodestar.jsView on unpkg · L18

node_modules/mathjax-full/es5/ui/menu.jsView file

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default=n},8905:function(e,t,n){var r=this&&thi...

Critical

Remote Response Code Execution

Source passes code obtained from a remote response into a dynamic execution sink.

node_modules/mathjax-full/es5/ui/menu.jsView on unpkg · L1

1(function(){"use strict";var __webpack_modules__={706:function(e,t){Object.defineProperty(t,"__esModule",{value:!0});var n=new Map;t.default=n},8905:function(e,t,n){var r=this&&thi...

High

Eval

Package source references dynamic code evaluation.

node_modules/mathjax-full/es5/ui/menu.jsView on unpkg · L1

src/managed-skill-cleanup.cjsView file

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/managed-skill-cleanup.cjsView on unpkg · L12

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/managed-skill-cleanup.cjsView on unpkg

node_modules/@xmldom/xmldom/lib/dom-parser.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 26

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

node_modules/@xmldom/xmldom/lib/dom-parser.jsView on unpkg

dist/lodestar-version.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-version.jsView on unpkg

node_modules/mathjax-full/components/bin/makeAllView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/makeAllView on unpkg

node_modules/mathjax-full/components/bin/packView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/packView on unpkg

dist/lodestar-update.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-update.jsView on unpkg

dist/lodestar-agent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-agent.jsView on unpkg

dist/lodestar-setup.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lodestar-setup.jsView on unpkg

node_modules/mathjax-full/components/bin/versionView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/mathjax-full/components/bin/versionView on unpkg

@leviyuan/lodestar@0.20.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code