Loading npm security reports…

@linghun/tui@0.1.28: Suspicious npm security report (Warn) | LPM Firewall

registry / @linghun/tui / 0.1.28

@linghun/tui@0.1.28

AI Security Review

scanned 1d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time attack behavior is present. The package exposes explicit runtime workflows that can clone third-party extension metadata and run user-selected project validation commands.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User invokes extension/headless workflows and, for network extension installs, supplies `--confirm-network`.

Impact

A user-approved workflow can write package-managed extension metadata or execute a project test command; no autonomous compromise chain was found.

Mechanism

Guarded extension manifest installation and headless shell-command execution.

Rationale

The package is not malicious by the inspected source, but its first-party agent extension lifecycle and project-shell capability warrant a warning classification under the firewall policy. No evidence supports a publish block.

Evidence

package.jsondist/index.jsdist/chunk-KB5JYAQ3.jsdist/chunk-KTAMV6P2.js

Network endpoints1

github.com

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`dist/chunk-KB5JYAQ3.js` can clone a user-specified Git/GitHub source and write skill/plugin manifest JSON.
`dist/chunk-KB5JYAQ3.js` requires explicit `--confirm-network` before network extension installation.
`dist/chunk-KTAMV6P2.js` runs shell test commands when headless verification is enabled by options/env/task context.

Evidence against

`package.json` has no preinstall, install, postinstall, prepare, or executable bin hook.
`dist/index.js` imports runtime functions; inspected risky paths are invoked through headless or slash-command flows, not import-time calls.
Extension installs use a temporary clone, disable Git hooks, and state they do not execute repository scripts or postinstall hooks.
No credential harvesting, covert endpoint, payload download-and-execute chain, or destructive broad filesystem behavior was confirmed.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Source & flagged code

2 flagged

dist/chunk-6PZJEDSA.jsView file

Lines 246-286javascript

246 if (!reason) return void 0;

247 const parts = reason.split(";").filter(

248 (part) => part.startsWith("generatedEvidence=") || part === "generatedVerification=partial" || part === "index=unknown_nonblocking"

249 );

250 return parts.length > 0 ? parts.join(";") : void 0;

251}

252function deriveAgentDisplayName(type, task) {

253 const stopWords = /* @__PURE__ */ new Set([

254 "a",

255 "an",

256 "and",

257 "for",

258 "help",

259 "job",

260 "please",

261 "run",

262 "task",

263 "the",

264 "to",

265 "with"

266 ]);

267 const asciiTask = Array.from(task.normalize("NFKD").toLowerCase()).map((char) => char.charCodeAt(0) <= 127 ? char : " ").

268 const tokens = asciiTask.replace(/[^a-z0-9]+/gu, " ").trim().split(/\s+/u).filter((token) => token &&

269 const base = tokens.length > 0 ? tokens.join("-") : `task-${createHash("sha1").update(task).digest("hex").slice(

270 const label = base.endsWith(`-${type}`) ? base : `${base}-${type}`;

271 return truncateAsciiLabel(label, 36);

272}

273function truncateAsciiLabel(value, maxLength) {

274 const cleaned = value.replace(/[^a-z0-9-]/gu, "-").replace(/-{2,}/gu, "-").replace(/^-|-$/gu, "");

275 if (cleaned.length <= maxLength) {

276 return cleaned || "agent";

277 }

278 return cleaned.slice(0, maxLength).replace(/-+$/u, "") || "agent";

279}

280function createDurableJobAgents(options, status, runningCap) {

281 const total = Math.max(1, options.requestedAgents);

282 const tasks = createDurableJobAgentTasks(options.goal, total);

283 return Array.from({ length: total }, (_, index) => {

284 const active = false;

285 const agentStatus = status === "running" ? index < runningCap ? "queued" : "sleeping" : status === "created" ? "created" : status;

286 const type = index === 0 ? "planner" : index === 1 ? "worker" : index === 2 ? "verifier" :

dist/chunk-KTAMV6P2.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @linghun/tui@0.1.26 matchedIdentity = npm:QGxpbmdodW4vdHVp:0.1.26 similarity = 0.958 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-KTAMV6P2.jsView on unpkg

Source & flagged code

2 flagged · loading source

dist/chunk-6PZJEDSA.jsView file

266]); L267: const asciiTask = Array.from(task.normalize("NFKD").toLowerCase()).map((char) => char.charCodeAt(0) <= 127 ? char : " ").join(""); L268: const tokens = asciiTask.replace(/[^a-z0-9]+/gu, " ").trim().split(/\s+/u).filter((token) => token && !stopWords.has(token)).slice(0, 3);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-6PZJEDSA.jsView on unpkg · L266

dist/chunk-KTAMV6P2.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-KTAMV6P2.jsView on unpkg

Findings

1 High3 Medium6 Low

HighPrevious Version Dangerous Deltadist/chunk-KTAMV6P2.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/chunk-6PZJEDSA.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/chunk-6PZJEDSA.jsView file

Lines 246-286javascript

246 if (!reason) return void 0;

247 const parts = reason.split(";").filter(

248 (part) => part.startsWith("generatedEvidence=") || part === "generatedVerification=partial" || part === "index=unknown_nonblocking"

249 );

250 return parts.length > 0 ? parts.join(";") : void 0;

251}

252function deriveAgentDisplayName(type, task) {

253 const stopWords = /* @__PURE__ */ new Set([

254 "a",

255 "an",

256 "and",

257 "for",

258 "help",

259 "job",

260 "please",

261 "run",

262 "task",

263 "the",

264 "to",

265 "with"

266 ]);

267 const asciiTask = Array.from(task.normalize("NFKD").toLowerCase()).map((char) => char.charCodeAt(0) <= 127 ? char : " ").

268 const tokens = asciiTask.replace(/[^a-z0-9]+/gu, " ").trim().split(/\s+/u).filter((token) => token &&

269 const base = tokens.length > 0 ? tokens.join("-") : `task-${createHash("sha1").update(task).digest("hex").slice(

270 const label = base.endsWith(`-${type}`) ? base : `${base}-${type}`;

271 return truncateAsciiLabel(label, 36);

272}

273function truncateAsciiLabel(value, maxLength) {

274 const cleaned = value.replace(/[^a-z0-9-]/gu, "-").replace(/-{2,}/gu, "-").replace(/^-|-$/gu, "");

275 if (cleaned.length <= maxLength) {

276 return cleaned || "agent";

277 }

278 return cleaned.slice(0, maxLength).replace(/-+$/u, "") || "agent";

279}

280function createDurableJobAgents(options, status, runningCap) {

281 const total = Math.max(1, options.requestedAgents);

282 const tasks = createDurableJobAgentTasks(options.goal, total);

283 return Array.from({ length: total }, (_, index) => {

284 const active = false;

285 const agentStatus = status === "running" ? index < runningCap ? "queued" : "sleeping" : status === "created" ? "created" : status;

286 const type = index === 0 ? "planner" : index === 1 ? "worker" : index === 2 ? "verifier" :

dist/chunk-KTAMV6P2.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-KTAMV6P2.jsView on unpkg