registry  /  @linzumi/cli  /  1.0.25

@linzumi/cli@1.0.25

⚠ Under review

Linzumi CLI — point a Codex agent at the real code on your laptop, with your team watching and steering from shared threads.

Static Scan Results

scanned 12h ago · by rust-scanner

Static analysis flagged 20 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 21 file(s), 2.49 MB of source, external domains: 0.0.0.0, 127.0.0.1, api.groq.com, api.smolmachines.com, app.linzumi.com, brew.sh, fonts.googleapis.com, fonts.gstatic.com, github.com, json-schema.org, linzumi.com, nodejs.org, openrouter.ai, raw.githubusercontent.com, registry.npmjs.org, serve.linzumi.com

Source & flagged code

10 flagged · loading source
dist/index.jsView file
19if (parentPort) parentPort.postMessage(result); L20: `});var cR={};Bs(cR,{discoverCurrentGitProject:()=>VJ});import{spawnSync as FJ}from"node:child_process";import{homedir as qJ}from"node:os";import{existsSync as oR,readdirSync as iR... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function cV(e){let n=["README.md","README.markdown","readme.md"].map(t=>_d(e,t)).find(t=>oR(t));if(n!==void 0)try{let r=NJ(... ... L30: `," ")}function Vf(e){if(!Z(e))return;let n=E(e.payload)??{},t=E(e.actor),r=G(e.seq),o=h(e.type);if(!(r===void 0||o===void 0))return{seq:r,type:o,actorKind:h(t?.kind),actorSlug:h(t... L31: `)}function WR(e){return e.flatMap(n=>n.isImage?[{type:"localImage",path:n.path}]:[])}async function Bx(e,n){let t=await Nx(e,n),r=Ux(n.body,t,{uploadInstructionMode:"footer"}),o=t... L32: `)}function aW(e,n){let t=sW(e);switch(t.trim()===""&&n.length>0){case!0:return"Attached file.";case!1:return t}}function dW(e,n){return h(e.kind)==="codex_assistant_message"?{...e...
Critical
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/index.jsView on unpkg · L19
2const require = createRequire(import.meta.url); L3: var SJ=Object.create;var vx=Object.defineProperty;var kJ=Object.getOwnPropertyDescriptor;var CJ=Object.getOwnPropertyNames;var PJ=Object.getPrototypeOf,TJ=Object.prototype.hasOwnPr... L4: const { workerData, parentPort } = require('node:worker_threads'); ... L19: if (parentPort) parentPort.postMessage(result); L20: `});var cR={};Bs(cR,{discoverCurrentGitProject:()=>VJ});import{spawnSync as FJ}from"node:child_process";import{homedir as qJ}from"node:os";import{existsSync as oR,readdirSync as iR... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function cV(e){let n=["README.md","README.markdown","readme.md"].map(t=>_d(e,t)).find(t=>oR(t));if(n!==void 0)try{let r=NJ(... L22: `).map(o=>o.trim()).find(o=>o.startsWith("# "))?.replace(/^#+\s+/u,"").trim();return r===void 0||r===""?void 0:r}catch{return}}function lV(e){return Object.fromEntries(Object.entri... L23: `).filter(n=>n.trim()!=="").flatMap(n=>{try{let t=JSON.parse(n);return Z(t)?[t]:[]}catch{return[]}})}catch{return[]}}function kV(e){return e.flatMap((n,t)=>{if(n.type!=="response_i... ... L27: ${u}`.split(` L28: `).filter(c=>c.trim()!=="")}catch{return[]}final
Critical
Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/index.jsView on unpkg · L2
19Trigger-reachable chain: manifest.bin -> bin/linzumi.js -> dist/index.js L19: if (parentPort) parentPort.postMessage(result); L20: `});var cR={};Bs(cR,{discoverCurrentGitProject:()=>VJ});import{spawnSync as FJ}from"node:child_process";import{homedir as qJ}from"node:os";import{existsSync as oR,readdirSync as iR... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function cV(e){let n=["README.md","README.markdown","readme.md"].map(t=>_d(e,t)).find(t=>oR(t));if(n!==void 0)try{let r=NJ(... ... L30: `," ")}function Vf(e){if(!Z(e))return;let n=E(e.payload)??{},t=E(e.actor),r=G(e.seq),o=h(e.type);if(!(r===void 0||o===void 0))return{seq:r,type:o,actorKind:h(t?.kind),actorSlug:h(t... L31: `)}function WR(e){return e.flatMap(n=>n.isImage?[{type:"localImage",path:n.path}]:[])}async function Bx(e,n){let t=await Nx(e,n),r=Ux(n.body,t,{uploadInstructionMode:"footer"}),o=t... L32: `)}function aW(e,n){let t=sW(e);switch(t.trim()===""&&n.length>0){case!0:return"Attached file.";case!1:return t}}function dW(e,n){return h(e.kind)==="codex_assistant_message"?{...e...
Critical
Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L19
19if (parentPort) parentPort.postMessage(result); L20: `});var cR={};Bs(cR,{discoverCurrentGitProject:()=>VJ});import{spawnSync as FJ}from"node:child_process";import{homedir as qJ}from"node:os";import{existsSync as oR,readdirSync as iR... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function cV(e){let n=["README.md","README.markdown","readme.md"].map(t=>_d(e,t)).find(t=>oR(t));if(n!==void 0)try{let r=NJ(...
High
Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L19
1093|| (${s} === "string" && ${o} && ${o} == +${o} && !(${o} % 1))`).assign(a,(0,He._)`+${o}`);return;case"boolean":r.elseIf((0,He._)`${o} === "false" || ${o} === 0 || ${o} === null`).... L1094: || ${s} === "boolean" || ${o} === null`).assign(a,(0,He._)`[${o}]`)}}}function swe({gen:e,parentData:n,parentDataProperty:t},r){e.if((0,He._)`${n} !== undefined`,()=>e.assign((0,He... L1095: missingProperty: ${r},
High
Eval

Package source references dynamic code evaluation.

dist/index.jsView on unpkg · L1093
19if (parentPort) parentPort.postMessage(result); L20: `});var cR={};Bs(cR,{discoverCurrentGitProject:()=>VJ});import{spawnSync as FJ}from"node:child_process";import{homedir as qJ}from"node:os";import{existsSync as oR,readdirSync as iR... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function cV(e){let n=["README.md","README.markdown","readme.md"].map(t=>_d(e,t)).find(t=>oR(t));if(n!==void 0)try{let r=NJ(... ... L30: `," ")}function Vf(e){if(!Z(e))return;let n=E(e.payload)??{},t=E(e.actor),r=G(e.seq),o=h(e.type);if(!(r===void 0||o===void 0))return{seq:r,type:o,actorKind:h(t?.kind),actorSlug:h(t... L31: `)}function WR(e){return e.flatMap(n=>n.isImage?[{type:"localImage",path:n.path}]:[])}async function Bx(e,n){let t=await Nx(e,n),r=Ux(n.body,t,{uploadInstructionMode:"footer"}),o=t... L32: `)}function aW(e,n){let t=sW(e);switch(t.trim()===""&&n.length>0){case!0:return"Attached file.";case!1:return t}}function dW(e,n){return h(e.kind)==="codex_assistant_message"?{...e...
High
Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L19
2const require = createRequire(import.meta.url); L3: var SJ=Object.create;var vx=Object.defineProperty;var kJ=Object.getOwnPropertyDescriptor;var CJ=Object.getOwnPropertyNames;var PJ=Object.getPrototypeOf,TJ=Object.prototype.hasOwnPr... L4: const { workerData, parentPort } = require('node:worker_threads'); ... L19: if (parentPort) parentPort.postMessage(result); L20: `});var cR={};Bs(cR,{discoverCurrentGitProject:()=>VJ});import{spawnSync as FJ}from"node:child_process";import{homedir as qJ}from"node:os";import{existsSync as oR,readdirSync as iR... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function cV(e){let n=["README.md","README.markdown","readme.md"].map(t=>_d(e,t)).find(t=>oR(t));if(n!==void 0)try{let r=NJ(... L22: `).map(o=>o.trim()).find(o=>o.startsWith("# "))?.replace(/^#+\s+/u,"").trim();return r===void 0||r===""?void 0:r}catch{return}}function lV(e){return Object.fromEntries(Object.entri... L23: `).filter(n=>n.trim()!=="").flatMap(n=>{try{let t=JSON.parse(n);return Z(t)?[t]:[]}catch{return[]}})}catch{return[]}}function kV(e){return e.flatMap((n,t)=>{if(n.type!=="response_i... ... L27: ${u}`.split(` L28: `).filter(c=>c.trim()!=="")}catch{return[]}final
High
Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L2
2Cross-file remote execution chain: dist/index.js spawns dist/mcp-server.mjs; helper contains network access plus dynamic code execution. L2: const require = createRequire(import.meta.url); L3: var SJ=Object.create;var vx=Object.defineProperty;var kJ=Object.getOwnPropertyDescriptor;var CJ=Object.getOwnPropertyNames;var PJ=Object.getPrototypeOf,TJ=Object.prototype.hasOwnPr... L4: const { workerData, parentPort } = require('node:worker_threads'); ... L19: if (parentPort) parentPort.postMessage(result); L20: `});var cR={};Bs(cR,{discoverCurrentGitProject:()=>VJ});import{spawnSync as FJ}from"node:child_process";import{homedir as qJ}from"node:os";import{existsSync as oR,readdirSync as iR... L21: `).flatMap(t=>t.startsWith("worktree ")?[t.slice(9)]:[])}function cV(e){let n=["README.md","README.markdown","readme.md"].map(t=>_d(e,t)).find(t=>oR(t));if(n!==void 0)try{let r=NJ(... L22: `).map(o=>o.trim()).find(o=>o.startsWith("# "))?.replace(/^#+\s+/u,"").trim();return r===void 0||r===""?void 0:r}catch{return}}function lV(e){return Object.fromEntries(Object.entri... L23: `).filter(n=>n.trim()!=="").flatMap(n=>{try{let t=JSON.parse(n);return Z(t)?[t]:[]}catch{return[]}})}catch{return[]}}funct…
High
Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L2
scripts/qa/codex-keychain-partition-repro.shView file
•path = scripts/qa/codex-keychain-partition-repro.sh kind = build_helper sizeBytes = 5989 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/qa/codex-keychain-partition-repro.shView on unpkg
scripts/replay-agent-backend-browser.tsView file
•matchType = previous_version_dangerous_delta matchedPackage = @linzumi/cli@1.0.8 matchedIdentity = npm:QGxpbnp1bWkvY2xp:1.0.8 similarity = 0.917 summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/replay-agent-backend-browser.tsView on unpkg

Findings

4 Critical6 High5 Medium5 Low
CriticalSame File Env Network Executiondist/index.js
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltascripts/replay-agent-backend-browser.ts
HighChild Processdist/index.js
HighShell
HighEvaldist/index.js
HighCommand Output Exfiltrationdist/index.js
HighSandbox Evasion Gated Capabilitydist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/qa/codex-keychain-partition-repro.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings