Loading npm security reports…

@linghun/tui@0.1.34: Suspicious npm security report (Warn) | LPM Firewall

registry / @linghun/tui / 0.1.34

@linghun/tui@0.1.34

AI Security Review

scanned 5h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The runtime can explicitly install Linghun skills/plugins from local or Git/GitHub sources. Network installs clone a repository and write an untrusted extension manifest; no npm lifecycle trigger or foreign AI-agent configuration mutation was found.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User invokes the skills/plugins install or update command with network confirmation.

Impact

Third-party extension metadata can be added to Linghun-managed extension storage for later trust/enable workflows.

Mechanism

Gated git clone and first-party extension-manifest registration.

Rationale

No concrete malicious behavior or npm install-time persistence was found. The package nevertheless exposes a guarded agent-extension installation surface, which warrants a warning under the firewall policy.

Evidence

package.jsondist/index.jsdist/chunk-VAQEIQEQ.jsdist/chunk-7VUE6O4U.jsdist/chunk-7ZHCP6N7.js

Network endpoints1

github.com

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`dist/chunk-VAQEIQEQ.js` implements `/skills` and `/plugins` installation from local or Git/GitHub sources.
Git installation runs `git clone` after an explicit `--confirm-network` gate.
Installed extension metadata is written into package-owned target directories and marked `trustLevel: "untrusted"`.
`dist/chunk-7VUE6O4U.js` provides a general `spawn(..., { shell: false })` command runner used by runtime features.

Evidence against

`package.json` has no `preinstall`, `install`, `postinstall`, or `prepare` lifecycle hook.
Extension install code states it does not execute cloned repository scripts, hooks, postinstall, or dependency installation.
No native/binary payload files were present in the inspected package.
`dist/index.js` only configures runtime command handling at import time; no install-time or import-time network/file mutation was found.
Remote inbound handling validates trusted source, binding, expiry, replay, and signature before routing messages.

Behavioral surface

Source

ChildProcessCrypto

Source & flagged code

2 flagged

dist/chunk-6PZJEDSA.jsView file

Lines 246-286javascript

246 if (!reason) return void 0;

247 const parts = reason.split(";").filter(

248 (part) => part.startsWith("generatedEvidence=") || part === "generatedVerification=partial" || part === "index=unknown_nonblocking"

249 );

250 return parts.length > 0 ? parts.join(";") : void 0;

251}

252function deriveAgentDisplayName(type, task) {

253 const stopWords = /* @__PURE__ */ new Set([

254 "a",

255 "an",

256 "and",

257 "for",

258 "help",

259 "job",

260 "please",

261 "run",

262 "task",

263 "the",

264 "to",

265 "with"

266 ]);

267 const asciiTask = Array.from(task.normalize("NFKD").toLowerCase()).map((char) => char.charCodeAt(0) <= 127 ? char : " ").

268 const tokens = asciiTask.replace(/[^a-z0-9]+/gu, " ").trim().split(/\s+/u).filter((token) => token &&

269 const base = tokens.length > 0 ? tokens.join("-") : `task-${createHash("sha1").update(task).digest("hex").slice(

270 const label = base.endsWith(`-${type}`) ? base : `${base}-${type}`;

271 return truncateAsciiLabel(label, 36);

272}

273function truncateAsciiLabel(value, maxLength) {

274 const cleaned = value.replace(/[^a-z0-9-]/gu, "-").replace(/-{2,}/gu, "-").replace(/^-|-$/gu, "");

275 if (cleaned.length <= maxLength) {

276 return cleaned || "agent";

277 }

278 return cleaned.slice(0, maxLength).replace(/-+$/u, "") || "agent";

279}

280function createDurableJobAgents(options, status, runningCap) {

281 const total = Math.max(1, options.requestedAgents);

282 const tasks = createDurableJobAgentTasks(options.goal, total);

283 return Array.from({ length: total }, (_, index) => {

284 const active = false;

285 const agentStatus = status === "running" ? index < runningCap ? "queued" : "sleeping" : status === "created" ? "created" : status;

286 const type = index === 0 ? "planner" : index === 1 ? "worker" : index === 2 ? "verifier" :

dist/chunk-QA62UE5Z.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @linghun/tui@0.1.28 matchedIdentity = npm:QGxpbmdodW4vdHVp:0.1.28 similarity = 0.950 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-QA62UE5Z.jsView on unpkg

Source & flagged code

2 flagged · loading source

dist/chunk-6PZJEDSA.jsView file

266]); L267: const asciiTask = Array.from(task.normalize("NFKD").toLowerCase()).map((char) => char.charCodeAt(0) <= 127 ? char : " ").join(""); L268: const tokens = asciiTask.replace(/[^a-z0-9]+/gu, " ").trim().split(/\s+/u).filter((token) => token && !stopWords.has(token)).slice(0, 3);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-6PZJEDSA.jsView on unpkg · L266

dist/chunk-QA62UE5Z.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-QA62UE5Z.jsView on unpkg

Findings

1 High3 Medium6 Low

HighPrevious Version Dangerous Deltadist/chunk-QA62UE5Z.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/chunk-6PZJEDSA.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/chunk-6PZJEDSA.jsView file

Lines 246-286javascript

246 if (!reason) return void 0;

247 const parts = reason.split(";").filter(

248 (part) => part.startsWith("generatedEvidence=") || part === "generatedVerification=partial" || part === "index=unknown_nonblocking"

249 );

250 return parts.length > 0 ? parts.join(";") : void 0;

251}

252function deriveAgentDisplayName(type, task) {

253 const stopWords = /* @__PURE__ */ new Set([

254 "a",

255 "an",

256 "and",

257 "for",

258 "help",

259 "job",

260 "please",

261 "run",

262 "task",

263 "the",

264 "to",

265 "with"

266 ]);

267 const asciiTask = Array.from(task.normalize("NFKD").toLowerCase()).map((char) => char.charCodeAt(0) <= 127 ? char : " ").

268 const tokens = asciiTask.replace(/[^a-z0-9]+/gu, " ").trim().split(/\s+/u).filter((token) => token &&

269 const base = tokens.length > 0 ? tokens.join("-") : `task-${createHash("sha1").update(task).digest("hex").slice(

270 const label = base.endsWith(`-${type}`) ? base : `${base}-${type}`;

271 return truncateAsciiLabel(label, 36);

272}

273function truncateAsciiLabel(value, maxLength) {

274 const cleaned = value.replace(/[^a-z0-9-]/gu, "-").replace(/-{2,}/gu, "-").replace(/^-|-$/gu, "");

275 if (cleaned.length <= maxLength) {

276 return cleaned || "agent";

277 }

278 return cleaned.slice(0, maxLength).replace(/-+$/u, "") || "agent";

279}

280function createDurableJobAgents(options, status, runningCap) {

281 const total = Math.max(1, options.requestedAgents);

282 const tasks = createDurableJobAgentTasks(options.goal, total);

283 return Array.from({ length: total }, (_, index) => {

284 const active = false;

285 const agentStatus = status === "running" ? index < runningCap ? "queued" : "sleeping" : status === "created" ? "created" : status;

286 const type = index === 0 ? "planner" : index === 1 ? "worker" : index === 2 ? "verifier" :

dist/chunk-QA62UE5Z.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-QA62UE5Z.jsView on unpkg