@m8t-stack/cli@0.2.82: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

@m8t-stack/cli@0.2.82: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

5 flagged · loading source

dist/cli.jsView file

135Source sends the broad process environment to a literal external destination. L135: try { L136: const obj = JSON.parse(raw); L137: if (!obj || typeof obj.repo !== "string" || obj.repo.length === 0) ... L337: // ../../packages/github-app-auth/dist/esm/jwt.js L338: import { createSign, createPrivateKey } from "crypto"; L339: function signAppJwt(args) { ... L350: sign.update(unsigned); L351: sign.end(); L352: const signature = sign.sign(createPrivateKey(args.privateKeyPem)).toString("base64url"); ... L446: const appJwt = signAppJwt({ appId, privateKeyPem }); L447: const url = `https://api.github.com/app/installations/${args.installationId}/access_tokens`; L448: const repoName = args.repository.includes("/") ? args.repository.split("/", 2)[1] : args.repository;

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/cli.jsView on unpkg · L135

12930init_errors(); L12931: import { spawn } from "child_process"; L12932: var SECRET_VALUE_FLAGS = /* @__PURE__ */ new Set(["--secure-environment-variables"]);

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L12930

26607); L26608: this.context.stdout.write( L26609: colors.dim("next: run 'm8t doctor' to verify gateway + data-plane access.\n") ... L26615: // src/commands/open.ts L26616: import { spawn as spawn5 } from "child_process"; L26617: import { Command as Command51, Option as Option48 } from "clipanion"; ... L26621: var OPEN_TARGETS = ["webapp", "foundry", "portal"]; L26622: var FOUNDRY_PORTAL_URL = "https://ai.azure.com"; L26623: function azurePortalRgUrl(tenantId, subscriptionId, resourceGroup) {

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L26607

135try { L136: const obj = JSON.parse(raw); L137: if (!obj || typeof obj.repo !== "string" || obj.repo.length === 0) ... L337: // ../../packages/github-app-auth/dist/esm/jwt.js L338: import { createSign, createPrivateKey } from "crypto"; L339: function signAppJwt(args) { ... L350: sign.update(unsigned); L351: sign.end(); L352: const signature = sign.sign(createPrivateKey(args.privateKeyPem)).toString("base64url"); ... L446: const appJwt = signAppJwt({ appId, privateKeyPem }); L447: const url = `https://api.github.com/app/installations/${args.installationId}/access_tokens`; L448: const repoName = args.repository.includes("/") ? args.repository.split("/", 2)[1] : args.repository;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L135

26607Trigger-reachable command-output exfiltration chain: manifest.main -> dist/cli.js L26607: ); L26608: this.context.stdout.write( L26609: colors.dim("next: run 'm8t doctor' to verify gateway + data-plane access.\n") ... L26615: // src/commands/open.ts L26616: import { spawn as spawn5 } from "child_process"; L26617: import { Command as Command51, Option as Option48 } from "clipanion"; ... L26621: var OPEN_TARGETS = ["webapp", "foundry", "portal"]; L26622: var FOUNDRY_PORTAL_URL = "https://ai.azure.com"; L26623: function azurePortalRgUrl(tenantId, subscriptionId, resourceGroup) {

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/cli.jsView on unpkg · L26607

Source & flagged code

5 flagged

dist/cli.jsView file

135Source sends the broad process environment to a literal external destination. L135: try { L136: const obj = JSON.parse(raw); L137: if (!obj || typeof obj.repo !== "string" || obj.repo.length === 0) ... L337: // ../../packages/github-app-auth/dist/esm/jwt.js L338: import { createSign, createPrivateKey } from "crypto"; L339: function signAppJwt(args) { ... L350: sign.update(unsigned); L351: sign.end(); L352: const signature = sign.sign(createPrivateKey(args.privateKeyPem)).toString("base64url"); ... L446: const appJwt = signAppJwt({ appId, privateKeyPem }); L447: const url = `https://api.github.com/app/installations/${args.installationId}/access_tokens`; L448: const repoName = args.repository.includes("/") ? args.repository.split("/", 2)[1] : args.repository;

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/cli.jsView on unpkg · L135

12930init_errors(); L12931: import { spawn } from "child_process"; L12932: var SECRET_VALUE_FLAGS = /* @__PURE__ */ new Set(["--secure-environment-variables"]);

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L12930

26607); L26608: this.context.stdout.write( L26609: colors.dim("next: run 'm8t doctor' to verify gateway + data-plane access.\n") ... L26615: // src/commands/open.ts L26616: import { spawn as spawn5 } from "child_process"; L26617: import { Command as Command51, Option as Option48 } from "clipanion"; ... L26621: var OPEN_TARGETS = ["webapp", "foundry", "portal"]; L26622: var FOUNDRY_PORTAL_URL = "https://ai.azure.com"; L26623: function azurePortalRgUrl(tenantId, subscriptionId, resourceGroup) {

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L26607

135try { L136: const obj = JSON.parse(raw); L137: if (!obj || typeof obj.repo !== "string" || obj.repo.length === 0) ... L337: // ../../packages/github-app-auth/dist/esm/jwt.js L338: import { createSign, createPrivateKey } from "crypto"; L339: function signAppJwt(args) { ... L350: sign.update(unsigned); L351: sign.end(); L352: const signature = sign.sign(createPrivateKey(args.privateKeyPem)).toString("base64url"); ... L446: const appJwt = signAppJwt({ appId, privateKeyPem }); L447: const url = `https://api.github.com/app/installations/${args.installationId}/access_tokens`; L448: const repoName = args.repository.includes("/") ? args.repository.split("/", 2)[1] : args.repository;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L135

26607Trigger-reachable command-output exfiltration chain: manifest.main -> dist/cli.js L26607: ); L26608: this.context.stdout.write( L26609: colors.dim("next: run 'm8t doctor' to verify gateway + data-plane access.\n") ... L26615: // src/commands/open.ts L26616: import { spawn as spawn5 } from "child_process"; L26617: import { Command as Command51, Option as Option48 } from "clipanion"; ... L26621: var OPEN_TARGETS = ["webapp", "foundry", "portal"]; L26622: var FOUNDRY_PORTAL_URL = "https://ai.azure.com"; L26623: function azurePortalRgUrl(tenantId, subscriptionId, resourceGroup) {

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/cli.jsView on unpkg · L26607