registry  /  @linzumi/cli  /  1.0.24

@linzumi/cli@1.0.24

⚠ Under review

Linzumi CLI — point a Codex agent at the real code on your laptop, with your team watching and steering from shared threads.

Static Scan Results

scanned 11h ago · by rust-scanner

Static analysis flagged 19 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 20 file(s), 2.42 MB of source, external domains: 0.0.0.0, 127.0.0.1, api.groq.com, api.smolmachines.com, app.linzumi.com, brew.sh, fonts.googleapis.com, fonts.gstatic.com, github.com, json-schema.org, linzumi.com, nodejs.org, openrouter.ai, registry.npmjs.org, serve.linzumi.com, www.w3.org

Source & flagged code

9 flagged · loading source
dist/index.jsView file
19if (parentPort) parentPort.postMessage(result); L20: `});var Kk={};rd(Kk,{discoverCurrentGitProject:()=>U$});import{spawnSync as O$}from"node:child_process";import{homedir as L$}from"node:os";import{existsSync as qk,readdirSync as $k... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function a9(e){let n=["README.md","README.markdown","readme.md"].map(t=>od(e,t)).find(t=>qk(t));if(n!==void 0)try{let r=j$(... ... L30: `," ")}function gf(e){if(!re(e))return;let n=q(e.payload)??{},t=q(e.actor),r=oe(e.seq),o=h(e.type);if(!(r===void 0||o===void 0))return{seq:r,type:o,actorKind:h(t?.kind),actorSlug:h... L31: `)}function PC(e){return e.flatMap(n=>n.isImage?[{type:"localImage",path:n.path}]:[])}async function vy(e,n){let t=await yy(e,n),r=xy(n.body,t,{uploadInstructionMode:"footer"}),o=t... L32: `)}function tN(e,n){let t=nN(e);switch(t.trim()===""&&n.length>0){case!0:return"Attached file.";case!1:return t}}function rN(e,n){return h(e.kind)==="codex_assistant_message"?{...e...
Critical
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/index.jsView on unpkg · L19
2const require = createRequire(import.meta.url); L3: var x$=Object.create;var Xg=Object.defineProperty;var v$=Object.getOwnPropertyDescriptor;var b$=Object.getOwnPropertyNames;var w$=Object.getPrototypeOf,_$=Object.prototype.hasOwnPr... L4: const { workerData, parentPort } = require('node:worker_threads'); ... L19: if (parentPort) parentPort.postMessage(result); L20: `});var Kk={};rd(Kk,{discoverCurrentGitProject:()=>U$});import{spawnSync as O$}from"node:child_process";import{homedir as L$}from"node:os";import{existsSync as qk,readdirSync as $k... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function a9(e){let n=["README.md","README.markdown","readme.md"].map(t=>od(e,t)).find(t=>qk(t));if(n!==void 0)try{let r=j$(... L22: `).map(o=>o.trim()).find(o=>o.startsWith("# "))?.replace(/^#+\s+/u,"").trim();return r===void 0||r===""?void 0:r}catch{return}}function i9(e){return Object.fromEntries(Object.entri... L23: `).filter(n=>n.trim()!=="").flatMap(n=>{try{let t=JSON.parse(n);return re(t)?[t]:[]}catch{return[]}})}catch{return[]}}function v9(e){return e.flatMap((n,t)=>{if(n.type!=="response_... ... L27: ${u}`.split(` L28: `).filter(c=>c.trim()!=="")}catch{return[]}final
Critical
Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/index.jsView on unpkg · L2
19Trigger-reachable chain: manifest.bin -> bin/linzumi.js -> dist/index.js L19: if (parentPort) parentPort.postMessage(result); L20: `});var Kk={};rd(Kk,{discoverCurrentGitProject:()=>U$});import{spawnSync as O$}from"node:child_process";import{homedir as L$}from"node:os";import{existsSync as qk,readdirSync as $k... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function a9(e){let n=["README.md","README.markdown","readme.md"].map(t=>od(e,t)).find(t=>qk(t));if(n!==void 0)try{let r=j$(... ... L30: `," ")}function gf(e){if(!re(e))return;let n=q(e.payload)??{},t=q(e.actor),r=oe(e.seq),o=h(e.type);if(!(r===void 0||o===void 0))return{seq:r,type:o,actorKind:h(t?.kind),actorSlug:h... L31: `)}function PC(e){return e.flatMap(n=>n.isImage?[{type:"localImage",path:n.path}]:[])}async function vy(e,n){let t=await yy(e,n),r=xy(n.body,t,{uploadInstructionMode:"footer"}),o=t... L32: `)}function tN(e,n){let t=nN(e);switch(t.trim()===""&&n.length>0){case!0:return"Attached file.";case!1:return t}}function rN(e,n){return h(e.kind)==="codex_assistant_message"?{...e...
Critical
Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L19
19if (parentPort) parentPort.postMessage(result); L20: `});var Kk={};rd(Kk,{discoverCurrentGitProject:()=>U$});import{spawnSync as O$}from"node:child_process";import{homedir as L$}from"node:os";import{existsSync as qk,readdirSync as $k... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function a9(e){let n=["README.md","README.markdown","readme.md"].map(t=>od(e,t)).find(t=>qk(t));if(n!==void 0)try{let r=j$(...
High
Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L19
19if (parentPort) parentPort.postMessage(result); L20: `});var Kk={};rd(Kk,{discoverCurrentGitProject:()=>U$});import{spawnSync as O$}from"node:child_process";import{homedir as L$}from"node:os";import{existsSync as qk,readdirSync as $k... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function a9(e){let n=["README.md","README.markdown","readme.md"].map(t=>od(e,t)).find(t=>qk(t));if(n!==void 0)try{let r=j$(... ... L30: `," ")}function gf(e){if(!re(e))return;let n=q(e.payload)??{},t=q(e.actor),r=oe(e.seq),o=h(e.type);if(!(r===void 0||o===void 0))return{seq:r,type:o,actorKind:h(t?.kind),actorSlug:h... L31: `)}function PC(e){return e.flatMap(n=>n.isImage?[{type:"localImage",path:n.path}]:[])}async function vy(e,n){let t=await yy(e,n),r=xy(n.body,t,{uploadInstructionMode:"footer"}),o=t... L32: `)}function tN(e,n){let t=nN(e);switch(t.trim()===""&&n.length>0){case!0:return"Attached file.";case!1:return t}}function rN(e,n){return h(e.kind)==="codex_assistant_message"?{...e...
High
Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L19
2const require = createRequire(import.meta.url); L3: var x$=Object.create;var Xg=Object.defineProperty;var v$=Object.getOwnPropertyDescriptor;var b$=Object.getOwnPropertyNames;var w$=Object.getPrototypeOf,_$=Object.prototype.hasOwnPr... L4: const { workerData, parentPort } = require('node:worker_threads'); ... L19: if (parentPort) parentPort.postMessage(result); L20: `});var Kk={};rd(Kk,{discoverCurrentGitProject:()=>U$});import{spawnSync as O$}from"node:child_process";import{homedir as L$}from"node:os";import{existsSync as qk,readdirSync as $k... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function a9(e){let n=["README.md","README.markdown","readme.md"].map(t=>od(e,t)).find(t=>qk(t));if(n!==void 0)try{let r=j$(... L22: `).map(o=>o.trim()).find(o=>o.startsWith("# "))?.replace(/^#+\s+/u,"").trim();return r===void 0||r===""?void 0:r}catch{return}}function i9(e){return Object.fromEntries(Object.entri... L23: `).filter(n=>n.trim()!=="").flatMap(n=>{try{let t=JSON.parse(n);return re(t)?[t]:[]}catch{return[]}})}catch{return[]}}function v9(e){return e.flatMap((n,t)=>{if(n.type!=="response_... ... L27: ${u}`.split(` L28: `).filter(c=>c.trim()!=="")}catch{return[]}final
High
Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L2
2Cross-file remote execution chain: dist/index.js spawns dist/mcp-server.mjs; helper contains network access plus dynamic code execution. L2: const require = createRequire(import.meta.url); L3: var x$=Object.create;var Xg=Object.defineProperty;var v$=Object.getOwnPropertyDescriptor;var b$=Object.getOwnPropertyNames;var w$=Object.getPrototypeOf,_$=Object.prototype.hasOwnPr... L4: const { workerData, parentPort } = require('node:worker_threads'); ... L19: if (parentPort) parentPort.postMessage(result); L20: `});var Kk={};rd(Kk,{discoverCurrentGitProject:()=>U$});import{spawnSync as O$}from"node:child_process";import{homedir as L$}from"node:os";import{existsSync as qk,readdirSync as $k... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function a9(e){let n=["README.md","README.markdown","readme.md"].map(t=>od(e,t)).find(t=>qk(t));if(n!==void 0)try{let r=j$(... L22: `).map(o=>o.trim()).find(o=>o.startsWith("# "))?.replace(/^#+\s+/u,"").trim();return r===void 0||r===""?void 0:r}catch{return}}function i9(e){return Object.fromEntries(Object.entri... L23: `).filter(n=>n.trim()!=="").flatMap(n=>{try{let t=JSON.parse(n);return re(t)?[t]:[]}catch{return[]}})}catch{return[]}}func…
High
Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L2
scripts/qa/codex-keychain-partition-repro.shView file
•path = scripts/qa/codex-keychain-partition-repro.sh kind = build_helper sizeBytes = 5989 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/qa/codex-keychain-partition-repro.shView on unpkg
scripts/replay-agent-backend-browser.tsView file
•matchType = previous_version_dangerous_delta matchedPackage = @linzumi/cli@1.0.8 matchedIdentity = npm:QGxpbnp1bWkvY2xp:1.0.8 similarity = 1.000 summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/replay-agent-backend-browser.tsView on unpkg

Findings

4 Critical5 High5 Medium5 Low
CriticalSame File Env Network Executiondist/index.js
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltascripts/replay-agent-backend-browser.ts
HighChild Processdist/index.js
HighShell
HighCommand Output Exfiltrationdist/index.js
HighSandbox Evasion Gated Capabilitydist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/qa/codex-keychain-partition-repro.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings