@lingjingai/scriptctl: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@lingjingai/scriptctl: Suspicious npm security report (Warn) | LPM Firewall

dist/infra/llm/gemini-video-model.jsView file

Lines 260-300javascript

260 });

261 }

262 return { text, finishReason, usage, raw: response };

263 });

264 return { text: value.text, finishReason: value.finishReason, attempts, usage: addTokenUsage(failedUsage, value.usage), raw: value.raw };

265 }

266 async release(media, signal) {

267 if (media.kind === "base64")

268 return;

269 try {

270 await this.client.files.delete({ name: media.file.name });

271 }

272 catch (error) {

273 // Cleanup is best-effort (§10.5); a failed delete must not fail the run.

274 void error;

275 void signal;

276 }

277 }

278}

279// Lazily import the SDK so the dependency is only loaded when a video route is

280// actually exercised (keeps text-only runs free of @google/genai).

281const require = createRequire(import.meta.url);

282function createGoogleClient(apiKey, timeoutMs, baseUrl) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/infra/llm/gemini-video-model.jsView on unpkg · L280

283 const { GoogleGenAI } = require("@google/genai");

284 const sdk = new GoogleGenAI({

285 apiKey,

286 ...(baseUrl ? { httpOptions: { baseUrl, timeout: timeoutMs } } : {}),

287 });

288 const proxyUrl = (process.env.https_proxy ?? process.env.HTTPS_PROXY ?? process.env.http_proxy ?? process.env.HTTP_PROXY ?? "").trim();

289 // A proxy is set but Node's built-in fetch (which the SDK's get/delete/generate

290 // use) ignores https_proxy unless NODE_USE_ENV_PROXY=1 — so upload (our proxied

291 // https) succeeds and the very next poll fails with "file poll failed". Warn

292 // once with the exact fix rather than let it look like a network error.

293 if (proxyUrl && !(process.env.NODE_USE_ENV_PROXY ?? "").trim()) {

294 process.stderr.write(`⚠️ 检测到代理 ${proxyUrl}，但未设 NODE_USE_ENV_PROXY=1。\n` +

295 ` Gemini 上传会成功、随后的文件轮询/生成会挂（Node 内置 fetch 默认不走代理）。\n` +

296 ` 请在命令前加 NODE_USE_ENV_PROXY=1 重跑。\n`);

297 }

298 // upload goes through Node https (undici rejects the resumable response's

299 // content-length behind a proxy); get/delete/generateContent use the SDK.

300 return {

•matchType = normalized_sha256 matchedPackage = @lingjingai/scriptctl@0.57.1 matchedPath = dist/infra/llm/gemini-video-model.js matchedIdentity = npm:QGxpbmdqaW5nYWkvc2NyaXB0Y3Rs:0.57.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/infra/llm/gemini-video-model.jsView on unpkg

scripts/install-skill.mjsView file

Lines 2-42javascript

2// postinstall: 把打包进 npm 包的 scriptctl skill 装到用户根目录下的三处 skill 目录

3// （Claude Code / agents / codex），并把「本次安装对应的 scriptctl 版本号」戳进每份

4// SKILL.md 的 frontmatter + 一个 .scriptctl-version 标记文件里。

5//

6// 设计要点：

7// - 永不让安装失败：全程 try/catch，任何异常只打印警告并以 0 退出（skill 装不上不该

8// 拖垮 `npm i -g scriptctl` 本身）。

9// - 开发态跳过：源码检出（存在 src/）不是「已发布的包」，跳过，免得 dev `pnpm install`

10// 覆盖你本地手改的 skill。

11// - 可关闭：SCRIPTCTL_SKIP_SKILL_INSTALL=1 或 SCRIPTCTL_SKILL_INSTALL=0。

12// - 幂等：每次把目标 <dir>/scriptctl 清空重写，只管这一个子目录，不碰旁边的其它 skill。

13// - 手动补装：node <pkg>/scripts/install-skill.mjs（同一逻辑，可随时重跑）。

14

15import * as fs from "node:fs";

16import * as os from "node:os";

17import * as path from "node:path";

18import { fileURLToPath } from "node:url";

19

20const SKILL_NAME = "scriptctl";

21// 三处目标 skill 根目录（相对用户家目录）。每处装成 <root>/scriptctl 子目录。

22const TARGET_SKILL_ROOTS = [

23 path.join(".claude", "skills"),

24 path.join(".agents", "skills"),

25 path.join(".codex", "skills"),

26];

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install-skill.mjsView on unpkg · L22

27

28function log(msg) {

29 process.stdout.write(`[scriptctl] ${msg}\n`);

30}

31

32function optedOut() {

33 const skip = process.env.SCRIPTCTL_SKIP_SKILL_INSTALL;

34 const flag = process.env.SCRIPTCTL_SKILL_INSTALL;

35 return skip === "1" || skip === "true" || flag === "0" || flag === "false";

36}

37

38// package root = 本脚本上一级的上一级（<root>/scripts/install-skill.mjs）。

39function packageRoot() {

40 return path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");

41}

42