27${u}`.split(`
L28: `).filter(c=>c.trim()!=="")}catch{return[]}finally{n!==void 0&&Fue(n)}}function ice(e){return e.filter(n=>n.type==="response_item").map(n=>D(n.payload)).filter(n=>n!==void 0).filte...
L29: `,"utf8");let r=new Map,o=0,i={runDir:t,contentMode:e.contentMode,record:(s,a,d={})=>{let u=Sce(r,t,s);o+=1,u.write(`${JSON.stringify({ts:new Date().toISOString(),mono_ms:Pce(),seq...
...
L41: `),d)},notices:()=>Array.from(n.values()),reset:()=>n.clear()}}function xle(e){switch(e){case"warning":return"WARNING: ";case"error":return"ERROR: ";case"info":return""}}function V...
L42: `)}function YL(e){return e.flatMap(n=>n.isImage?[{type:"localImage",path:n.path}]:[])}async function pC(e,n){let t=await cC(e,n),r=lC(n.body,t,{uploadInstructionMode:"footer"}),o=t...
L43: `)}function qle(
CriticalSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/impl-ts/index.jsView on unpkg · L27 27Trigger-reachable chain: manifest.bin -> bin/linzumi.js -> dist/index.js -> dist/impl-ts/index.js
L27: ${u}`.split(`
L28: `).filter(c=>c.trim()!=="")}catch{return[]}finally{n!==void 0&&Fue(n)}}function ice(e){return e.filter(n=>n.type==="response_item").map(n=>D(n.payload)).filter(n=>n!==void 0).filte...
L29: `,"utf8");let r=new Map,o=0,i={runDir:t,contentMode:e.contentMode,record:(s,a,d={})=>{let u=Sce(r,t,s);o+=1,u.write(`${JSON.stringify({ts:new Date().toISOString(),mono_ms:Pce(),seq...
...
L41: `),d)},notices:()=>Array.from(n.values()),reset:()=>n.clear()}}function xle(e){switch(e){case"warning":return"WARNING: ";case"error":return"ERROR: ";case"info":return""}}function V...
L42: `)}function YL(e){return e.flatMap(n=>n.isImage?[{type:"localImage",path:n.path}]:[])}async function pC(e,n
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/impl-ts/index.jsView on unpkg · L27 •matchType = previous_version_dangerous_delta
matchedPackage = @linzumi/cli@1.0.113
matchedIdentity = npm:QGxpbnp1bWkvY2xp:1.0.113
similarity = 0.981
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/impl-ts/index.jsView on unpkg 2const require = __linzumiBundleCreateRequire(import.meta.url);
L3: var Kde=Object.create;var Tk=Object.defineProperty;var Vde=Object.getOwnPropertyDescriptor;var Wde=Object.getOwnPropertyNames;var Hde=Object.getPrototypeOf,Gde=Object.prototype.has...
L4: const { workerData, parentPort } = require('node:worker_threads');
...
L19: if (parentPort) parentPort.postMessage(result);
L20: `});var $j={};Hr($j,{[redacted]:()=>bue,discoverCurrentGitProject:()=>xue});import{spawnSync as pue}from"node:child_process";import{homedir as fue}from"n...
L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function jue(e){let n=["README.md","README.markdown","readme.md"].map(t=>Dc(e,t)).find(t=>Ij(t));if(n!==void 0)try{let r=mu...
L22: `).map(o=>o.trim()).find(o=>o.startsWith("# "))?.replace(/^#+
HighSandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/impl-ts/index.jsView on unpkg · L2 2Cross-file remote execution chain: dist/impl-ts/index.js spawns dist/impl-res/cloud-supervisor.mjs; helper contains network access plus dynamic code execution.
L2: const require = __linzumiBundleCreateRequire(import.meta.url);
L3: var Kde=Object.create;var Tk=Object.defineProperty;var Vde=Object.getOwnPropertyDescriptor;var Wde=Object.getOwnPropertyNames;var Hde=Object.getPrototypeOf,Gde=Object.prototype.has...
L4: const { workerData, parentPort } = require('node:worker_threads');
...
L19: if (parentPort) parentPort.postMessage(result);
L20: `});var $j={};Hr($j,{[redacted]:()=>bue,discoverCurrentGitProject:()=>xue});import{spawnSync as pue}from"node:child_process";import{homedir as fue}from"n...
L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function jue(e){let n=["README.md
HighCross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/impl-ts/index.jsView on unpkg · L2 27Trigger-reachable command-output exfiltration chain: manifest.bin -> bin/linzumi.js -> dist/index.js -> dist/impl-ts/index.js
L27: ${u}`.split(`
L28: `).filter(c=>c.trim()!=="")}catch{return[]}finally{n!==void 0&&Fue(n)}}function ice(e){return e.filter(n=>n.type==="response_item").map(n=>D(n.payload)).filter(n=>n!==void 0).filte...
L29: `,"utf8");let r=new Map,o=0,i={runDir:t,contentMode:e.contentMode,record:(s,a,d={})=>{let u=Sce(r,t,s);o+=1,u.write(`${JSON.stringify({ts:new Date().toISOString(),mono_ms:Pce(),seq...
...
L41: `),d)},notices:()=>Array.from(n.values()),reset:()=>n.clear()}}function xle(e){switch(e){case"warning":return"WARNING: ";case"error":return"ERROR: ";case"info":return""}}function V...
L42: `)}function YL(e){return e.flatMap(n=>n.isImage?[{type:"localImage",path:n.path
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/impl-ts/index.jsView on unpkg · L27 2Trigger-reachable persistence chain: manifest.bin -> bin/linzumi.js -> dist/index.js -> dist/impl-ts/index.js
L2: const require = __linzumiBundleCreateRequire(import.meta.url);
L3: var Kde=Object.create;var Tk=Object.defineProperty;var Vde=Object.getOwnPropertyDescriptor;var Wde=Object.getOwnPropertyNames;var Hde=Object.getPrototypeOf,Gde=Object.prototype.has...
L4: const { workerData, parentPort } = require('node:worker_threads');
...
L19: if (parentPort) parentPort.postMessage(result);
L20: `});var $j={};Hr($j,{[redacted]:()=>bue,discoverCurrentGitProject:()=>xue});import{spawnSync as pue}from"node:child_process";import{homedir as fue}from"n...
L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function jue(e){let n=["README.md","README.markdown","readme.md"].map(t=>Dc(e,t)).f
HighTrigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/impl-ts/index.jsView on unpkg · L2 2const require = __linzumiBundleCreateRequire(import.meta.url);
L3: var Kde=Object.create;var Tk=Object.defineProperty;var Vde=Object.getOwnPropertyDescriptor;var Wde=Object.getOwnPropertyNames;var Hde=Object.getPrototypeOf,Gde=Object.prototype.has...
L4: const { workerData, parentPort } = require('node:worker_threads');
...
L19: if (parentPort) parentPort.postMessage(result);
L20: `});var $j={};Hr($j,{[redacted]:()=>bue,discoverCurrentGitProject:()=>xue});import{spawnSync as pue}from"node:child_process";import{homedir as fue}from"n...
L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function jue(e){let n=["README.md","README.markdown","readme.md"].map(t=>Dc(e,t)).find(t=>Ij(t));if(n!==void 0)try{let r=mu...
L22: `).map(o=>o.trim()).find(o=>o.startsWith("# "))?.replace(/^#+
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/impl-ts/index.jsView on unpkg · L2