@markjaquith/agency@3.2.14: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@markjaquith/agency@3.2.14: AI-agent control-surface risk | LPM Firewall

Source & flagged code

16 flagged · loading source

package.jsonView file

•scripts.postinstall = bun scripts/install-pi-extension.ts install

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = bun scripts/install-pi-extension.ts install

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/utils/interactive-loader.tsView file

3const preload = ["@opentui", "solid", "preload"].join("/") L4: await import(preload) L5: return import("./interactive")

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/utils/interactive-loader.tsView on unpkg · L3

fixtures/protocol/error.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

fixtures/protocol/error.jsonView on unpkg

src/services/ReviewService.tsView file

•matchType = normalized_sha256 matchedPackage = @markjaquith/agency@3.2.12 matchedPath = src/services/ReviewService.ts matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:3.2.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/services/ReviewService.tsView on unpkg

pi-extensions/agency.tsView file

•matchType = normalized_sha256 matchedPackage = @markjaquith/agency@3.2.12 matchedPath = pi-extensions/agency.ts matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:3.2.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

pi-extensions/agency.tsView on unpkg

src/cli.test.tsView file

•matchType = normalized_sha256 matchedPackage = @markjaquith/agency@3.2.12 matchedPath = src/cli.test.ts matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:3.2.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli.test.tsView on unpkg

src/services/IntegrationService.test.tsView file

•matchType = normalized_sha256 matchedPackage = @markjaquith/agency@3.2.12 matchedPath = src/services/IntegrationService.test.ts matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:3.2.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/services/IntegrationService.test.tsView on unpkg

src/services/PullRequestService.test.tsView file

•matchType = normalized_sha256 matchedPackage = @markjaquith/agency@3.2.12 matchedPath = src/services/PullRequestService.test.ts matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:3.2.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/services/PullRequestService.test.tsView on unpkg

src/services/SyncService.test.tsView file

•matchType = normalized_sha256 matchedPackage = @markjaquith/agency@3.2.12 matchedPath = src/services/SyncService.test.ts matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:3.2.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/services/SyncService.test.tsView on unpkg

src/services/TaskService.tsView file

•matchType = normalized_sha256 matchedPackage = @markjaquith/agency@3.2.12 matchedPath = src/services/TaskService.ts matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:3.2.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/services/TaskService.tsView on unpkg

src/services/VersionControlService.tsView file

•matchType = normalized_sha256 matchedPackage = @markjaquith/agency@3.2.12 matchedPath = [redacted].ts matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:3.2.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/services/VersionControlService.tsView on unpkg

src/commands/repo.test.tsView file

•matchType = normalized_sha256 matchedPackage = @markjaquith/agency@3.2.12 matchedPath = src/commands/repo.test.ts matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:3.2.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/commands/repo.test.tsView on unpkg

src/commands/sync.test.tsView file

•matchType = normalized_sha256 matchedPackage = @markjaquith/agency@3.2.12 matchedPath = src/commands/sync.test.ts matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:3.2.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/commands/sync.test.tsView on unpkg

src/services/ArchiveService.test.tsView file

•matchType = normalized_sha256 matchedPackage = @markjaquith/agency@3.2.12 matchedPath = src/services/ArchiveService.test.ts matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:3.2.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/services/ArchiveService.test.tsView on unpkg

src/services/RepositoryService.test.tsView file

•matchType = normalized_sha256 matchedPackage = @markjaquith/agency@3.2.12 matchedPath = src/services/RepositoryService.test.ts matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:3.2.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/services/RepositoryService.test.tsView on unpkg