@melandlabs/opencontext@0.1.2: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@melandlabs/opencontext@0.1.2: Suspicious npm security report | LPM Firewall

Source & flagged code

9 flagged · loading source

dist/cli/opencontext.jsView file

28import 'pg'; L29: import { spawn, execSync } from 'child_process'; L30: import { serve } from '@hono/node-server';

High

Child Process

Package source references child process execution.

dist/cli/opencontext.jsView on unpkg · L28

3import * as nf from 'node-fetch'; L4: import * as fd from 'formdata-node'; L5: import KeepAliveAgent from 'agentkeepalive'; ... L28: import 'pg'; L29: import { spawn, execSync } from 'child_process'; L30: import { serve } from '@hono/node-server'; ... L559: * Aspect Ratio L560: * @see https://tailwindcss.com/docs/aspect-ratio L561: */ ... L2558: // ../../node_modules/@tauri-apps/api/external/tslib/tslib.es6.js L2559: function __classPrivateFieldGet(receiver, state, kind2, f3) { L2560: if (typeof state === "function" ? receiver !== state || !f3 : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli/opencontext.jsView on unpkg · L3

3import * as nf from 'node-fetch'; L4: import * as fd from 'formdata-node'; L5: import KeepAliveAgent from 'agentkeepalive'; ... L28: import 'pg'; L29: import { spawn, execSync } from 'child_process'; L30: import { serve } from '@hono/node-server'; ... L559: * Aspect Ratio L560: * @see https://tailwindcss.com/docs/aspect-ratio L561: */ ... L2558: // ../../node_modules/@tauri-apps/api/external/tslib/tslib.es6.js L2559: function __classPrivateFieldGet(receiver, state, kind2, f3) { L2560: if (typeof state === "function" ? receiver !== state || !f3 : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli/opencontext.jsView on unpkg · L3

28import 'pg'; L29: import { spawn, execSync } from 'child_process'; L30: import { serve } from '@hono/node-server'; ... L5764: constructor({ L5765: baseURL, L5766: maxRetries = 2, ... L14976: function writeFileSync2(filePath, content) { L14977: nodeFs.writeFileSync(filePath, content); L14978: } ... L49016: availableTools = void 0, L49017: message = `Model tried to call unavailable tool '${toolName}'. ${availableTools === void 0 ? "No tools are available." : `Available tools: ${availableTools.join(", ")}.`}` L49018: }) {

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/cli/opencontext.jsView on unpkg · L28

3Cross-file remote execution chain: dist/cli/opencontext.js spawns dist/index.js; helper contains network access plus dynamic code execution. L3: import * as nf from 'node-fetch'; L4: import * as fd from 'formdata-node'; L5: import KeepAliveAgent from 'agentkeepalive'; ... L28: import 'pg'; L29: import { spawn, execSync } from 'child_process'; L30: import { serve } from '@hono/node-server'; ... L559: * Aspect Ratio L560: * @see https://tailwindcss.com/docs/aspect-ratio L561: */ ... L2558: // ../../node_modules/@tauri-apps/api/external/tslib/tslib.es6.js L2559: function __classPrivateFieldGet(receiver, state, kind2, f3) { L2560: if (typeof state === "function" ? receiver !== state || !f3 : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did no

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/opencontext.jsView on unpkg · L3

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/opencontext.jsView on unpkg

dist/index.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import nodeFs__default, { mkdirSync, existsSync, readFileSync, copyFileSync, writeFileSync, ReadStream, createWriteStream } from 'fs'; import { readFile as readFile$1, writeFile as writeFile$1, unlink, mkdir } from 'fs/promises'; async function writeFile(path5, data, options) { await writeFile(path5, data); // Marks visible continuation messages created after an authorization card is authorizationContinuation: z$1.boolean().optional(), baseURL, this.baseURL = baseURL;

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/index.js: import nodeFs__default, { mkdirSync, existsSync, readFileSync, copyFileSync, writeFileSync, ReadStream, createWriteStream } from 'fs'; import { readFile as readFile$1, writeFile as writeFile$1, unlink, mkdir } from 'fs/promises'; // ../../node_modules/clsx/dist/clsx.mjs "../../node_modules/clsx/dist/clsx.mjs"() { // ../../node_modules/tailwind-merge/dist/bundle-mjs.mjs "../../node_modules/tailwind-merge/dist/bundle-mjs.mjs"() { * @see https://tailwindcss.com/docs/aspect-ratio * @see https://tailwindcss.com/docs/container

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/index.jsView on unpkg

•path = dist/index.js kind = oversized_source_file sizeBytes = 5214546 magicHex = [redacted]

Source & flagged code

9 flagged

dist/cli/opencontext.jsView file

28import 'pg'; L29: import { spawn, execSync } from 'child_process'; L30: import { serve } from '@hono/node-server';

High

Child Process

Package source references child process execution.

dist/cli/opencontext.jsView on unpkg · L28

3import * as nf from 'node-fetch'; L4: import * as fd from 'formdata-node'; L5: import KeepAliveAgent from 'agentkeepalive'; ... L28: import 'pg'; L29: import { spawn, execSync } from 'child_process'; L30: import { serve } from '@hono/node-server'; ... L559: * Aspect Ratio L560: * @see https://tailwindcss.com/docs/aspect-ratio L561: */ ... L2558: // ../../node_modules/@tauri-apps/api/external/tslib/tslib.es6.js L2559: function __classPrivateFieldGet(receiver, state, kind2, f3) { L2560: if (typeof state === "function" ? receiver !== state || !f3 : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli/opencontext.jsView on unpkg · L3

3import * as nf from 'node-fetch'; L4: import * as fd from 'formdata-node'; L5: import KeepAliveAgent from 'agentkeepalive'; ... L28: import 'pg'; L29: import { spawn, execSync } from 'child_process'; L30: import { serve } from '@hono/node-server'; ... L559: * Aspect Ratio L560: * @see https://tailwindcss.com/docs/aspect-ratio L561: */ ... L2558: // ../../node_modules/@tauri-apps/api/external/tslib/tslib.es6.js L2559: function __classPrivateFieldGet(receiver, state, kind2, f3) { L2560: if (typeof state === "function" ? receiver !== state || !f3 : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli/opencontext.jsView on unpkg · L3

28import 'pg'; L29: import { spawn, execSync } from 'child_process'; L30: import { serve } from '@hono/node-server'; ... L5764: constructor({ L5765: baseURL, L5766: maxRetries = 2, ... L14976: function writeFileSync2(filePath, content) { L14977: nodeFs.writeFileSync(filePath, content); L14978: } ... L49016: availableTools = void 0, L49017: message = `Model tried to call unavailable tool '${toolName}'. ${availableTools === void 0 ? "No tools are available." : `Available tools: ${availableTools.join(", ")}.`}` L49018: }) {

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/cli/opencontext.jsView on unpkg · L28

3Cross-file remote execution chain: dist/cli/opencontext.js spawns dist/index.js; helper contains network access plus dynamic code execution. L3: import * as nf from 'node-fetch'; L4: import * as fd from 'formdata-node'; L5: import KeepAliveAgent from 'agentkeepalive'; ... L28: import 'pg'; L29: import { spawn, execSync } from 'child_process'; L30: import { serve } from '@hono/node-server'; ... L559: * Aspect Ratio L560: * @see https://tailwindcss.com/docs/aspect-ratio L561: */ ... L2558: // ../../node_modules/@tauri-apps/api/external/tslib/tslib.es6.js L2559: function __classPrivateFieldGet(receiver, state, kind2, f3) { L2560: if (typeof state === "function" ? receiver !== state || !f3 : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did no

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/opencontext.jsView on unpkg · L3

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/opencontext.jsView on unpkg

dist/index.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import nodeFs__default, { mkdirSync, existsSync, readFileSync, copyFileSync, writeFileSync, ReadStream, createWriteStream } from 'fs'; import { readFile as readFile$1, writeFile as writeFile$1, unlink, mkdir } from 'fs/promises'; async function writeFile(path5, data, options) { await writeFile(path5, data); // Marks visible continuation messages created after an authorization card is authorizationContinuation: z$1.boolean().optional(), baseURL, this.baseURL = baseURL;

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/index.js: import nodeFs__default, { mkdirSync, existsSync, readFileSync, copyFileSync, writeFileSync, ReadStream, createWriteStream } from 'fs'; import { readFile as readFile$1, writeFile as writeFile$1, unlink, mkdir } from 'fs/promises'; // ../../node_modules/clsx/dist/clsx.mjs "../../node_modules/clsx/dist/clsx.mjs"() { // ../../node_modules/tailwind-merge/dist/bundle-mjs.mjs "../../node_modules/tailwind-merge/dist/bundle-mjs.mjs"() { * @see https://tailwindcss.com/docs/aspect-ratio * @see https://tailwindcss.com/docs/container

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/index.jsView on unpkg

•path = dist/index.js kind = oversized_source_file sizeBytes = 5214546 magicHex = [redacted]