@myrialabs/clopen@0.4.6: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@myrialabs/clopen@0.4.6: Suspicious npm security report (Warn) | LPM Firewall

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

`backend/skills/sync.ts` copies enabled skills into real `~/.qwen/skills` and `~/.copilot/skills` directories.
`backend/skills/sync.ts` writes a managed skills block to agent `AGENTS.md` files for Codex and OpenCode.
`backend/ws/skills/catalog.ts` exposes a `skills:install` route; `backend/skills/marketplace.ts` downloads community `SKILL.md` content from GitHub.
`backend/mcp/external/probe.ts` can start configured stdio MCP commands and contact configured MCP URLs.

Evidence against

`package.json` has only `prepublishOnly`; no `preinstall`, `install`, or `postinstall` hook.
The CLI update fetch and global reinstall occur only through explicit `clopen update`.
Skill synchronization limits deletions to managed slugs and preserves other user skill folders.
No source evidence of stealthy credential harvesting, hidden exfiltration, obfuscation, or remote payload execution.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 399 file(s), 2.95 MB of source, external domains: api.fireworks.ai, api.github.com, api.githubcopilot.com, b.example, brew.sh, bun.sh, calculator.net, code.claude.com, dash.cloudflare.com, dashscope-intl.aliyuncs.com, dashscope.aliyuncs.com, developers.openai.com, dl.google.com, docs.github.com, example-company.com, example.com, fireworks.ai, formulae.brew.sh, git-scm.com, github.com, google.com, googlechromelabs.github.io, help.aliyun.com, majiayu000.github.io, mcp.linear.app, models.dev, opencode.ai, openrouter.ai, pptr.dev, qwen.ai, raw.githubusercontent.com, registry.modelcontextprotocol.io, registry.npmjs.org, svelte.dev, ws.example, www.alibabacloud.com, www.google.com, www.loom.com, www.w3.org

Oversized source lightweight scan

dist/assets/main-TYNK6Orl.js3.16 MB file, sampled 256 KB

NetworkWebSocketHighEntropyStringsMinifiedUrlStringsdash.cloudflare.comsvelte.devwww.w3.org

Source & flagged code

5 flagged · loading source

backend/preview/browser/browser-console-manager.tsView file

215// Use Function constructor for safer evaluation than eval L216: const func = new Function('return ' + cmd); L217: return func();

Low

Eval

Package source references a known benign dynamic code generation pattern.

backend/preview/browser/browser-console-manager.tsView on unpkg · L215

backend/chat/stream-manager.tsView file

1398try { L1399: const { isCheckpointMessage, buildCheckpointTree, getCheckpointPathToRoot } = await import('../snapshot/helpers'); L1400: const { checkpointQueries } = await import('../database/queries');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

backend/chat/stream-manager.tsView on unpkg · L1398

bin/clopen.tsView file

7Manifest entrypoint (manifest.main) carries capability families absent from dist/build output: environment+network, sensitive-file+network, execution+network L7: console.error(''); L8: console.error('Install Bun: https://bun.sh'); L9: console.error('Then run: bun clopen'); ... L40: L41: // Get version from package.json L42: function getVersion(): string { L43: try { L44: const packagePath = join(__dirname, 'package.json'); L45: const packageJson = JSON.parse(readFileSync(packagePath, 'utf-8')); L46: return packageJson.version || '0.0.0'; ... L64: spinnerInterval = setInterval(() => { L65: process.stdout.write(`\r\x1b[K${frames[i]} ${spinnerMessage}`);

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/clopen.tsView on unpkg · L7

dist/audio/tap.oggView file

•path = dist/audio/tap.ogg kind = high_entropy_blob sizeBytes = 25545 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/audio/tap.oggView on unpkg

dist/assets/main-TYNK6Orl.jsView file

•path = dist/assets/main-TYNK6Orl.js kind = oversized_source_file sizeBytes = 3315548 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/main-TYNK6Orl.jsView on unpkg

Source & flagged code

5 flagged

backend/preview/browser/browser-console-manager.tsView file

Lines 195-235typescript

195 }

196

197 toggleConsoleLogging(session: BrowserTab, enabled: boolean): boolean {

198 if (!session) return false;

199

200 session.consoleEnabled = enabled;

201

202 return true;

203 }

204

205 async executeConsoleCommand(session: BrowserTab, command: string): Promise<any> {

206 if (!session) throw new Error('Session not found');

207

208 try {

209

210

211 // Execute the command in the browser context

212 const result = await session.page.evaluate((cmd: string) => {

213 // Create a safe evaluation context

214 try {

215 // Use Function constructor for safer evaluation than eval

216 const func = new Function('return ' + cmd);

217 return func();

Low

Eval

Package source references a known benign dynamic code generation pattern.

backend/preview/browser/browser-console-manager.tsView on unpkg · L215

218 } catch (error) {

219 return { error: error instanceof Error ? error.message : String(error) };

220 }

221 }, command);

222

223 // Log the command execution as a console message

224 const commandMessage: BrowserConsoleMessage = {

225 id: `command-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,

226 type: 'log',

227 text: `> ${command}`,

228 args: [result],

229 timestamp: Date.now()

230 };

231

232 session.consoleLogs.push(commandMessage);

233

234 // Emit the command result

235 this.emit('console-message', {

backend/chat/stream-manager.tsView file

Lines 1378-1418typescript

1378 updateOpts.headTitle = text.slice(0, 80) + (text.length > 80 ? '...' : '');

1379

bin/clopen.tsView file

Lines 1-27typescript

1#!/usr/bin/env bun

2

3// Runtime guard — Bun only, reject Node.js and Deno

4if (typeof globalThis.Bun === 'undefined') {

5 console.error('\x1b[31mError: Clopen requires Bun runtime.\x1b[0m');

6 console.error

dist/audio/tap.oggView file

•path = dist/audio/tap.ogg kind = high_entropy_blob sizeBytes = 25545 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/audio/tap.oggView on unpkg

dist/assets/main-TYNK6Orl.jsView file

•path = dist/assets/main-TYNK6Orl.js kind = oversized_source_file sizeBytes = 3315548 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/main-TYNK6Orl.jsView on unpkg