@myrialabs/clopen@0.4.7: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@myrialabs/clopen@0.4.7: Suspicious npm security report (Warn) | LPM Firewall

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`backend/skills/sync.ts` copies enabled skills into `~/.qwen/skills` and `~/.copilot/skills`.
`backend/skills/sync.ts` writes a managed skills block into engine `AGENTS.md` files for Codex/OpenCode.
Skill sync runs at AI-engine stream start (`backend/skills/sync.ts`, engine adapter imports).
`backend/preview/browser/browser-console-manager.ts` executes user-supplied console expressions in the selected browser page.

Evidence against

`package.json` has only `prepublishOnly`; no install-time lifecycle hook executes for consumers.
`bin/clopen.ts` starts only when the user invokes the CLI; update and data deletion are explicit commands.
Skill mutations are exposed as create/import/toggle/delete operations in `backend/ws/skills/crud.ts`, not package-install behavior.
Skill sync preserves unmanaged directories and replaces only its marker-delimited block.
Observed npm/GitHub requests are product update/release checks; no credential-harvesting or covert exfiltration path was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 394 file(s), 2.93 MB of source, external domains: api.fireworks.ai, api.github.com, api.githubcopilot.com, b.example, brew.sh, bun.sh, calculator.net, code.claude.com, dash.cloudflare.com, dashscope-intl.aliyuncs.com, dashscope.aliyuncs.com, developers.openai.com, dl.google.com, docs.github.com, example-company.com, example.com, fireworks.ai, formulae.brew.sh, git-scm.com, github.com, google.com, googlechromelabs.github.io, help.aliyun.com, majiayu000.github.io, mcp.linear.app, models.dev, opencode.ai, openrouter.ai, pptr.dev, qwen.ai, raw.githubusercontent.com, registry.modelcontextprotocol.io, registry.npmjs.org, svelte.dev, ws.example, www.alibabacloud.com, www.google.com, www.loom.com, www.w3.org

Oversized source lightweight scan

dist/assets/main-LBI3a0n5.js3.17 MB file, sampled 256 KB

NetworkWebSocketHighEntropyStringsMinifiedUrlStringsdash.cloudflare.comsvelte.devwww.w3.org

Source & flagged code

6 flagged · loading source

backend/preview/browser/browser-console-manager.tsView file

215// Use Function constructor for safer evaluation than eval L216: const func = new Function('return ' + cmd); L217: return func();

Low

Eval

Package source references a known benign dynamic code generation pattern.

backend/preview/browser/browser-console-manager.tsView on unpkg · L215

backend/chat/stream-manager.tsView file

1398try { L1399: const { isCheckpointMessage, buildCheckpointTree, getCheckpointPathToRoot } = await import('../snapshot/helpers'); L1400: const { checkpointQueries } = await import('../database/queries');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

backend/chat/stream-manager.tsView on unpkg · L1398

bin/clopen.tsView file

7Manifest entrypoint (manifest.main) carries capability families absent from dist/build output: environment+network, sensitive-file+network, execution+network L7: console.error(''); L8: console.error('Install Bun: https://bun.sh'); L9: console.error('Then run: bun clopen'); ... L40: L41: // Get version from package.json L42: function getVersion(): string { L43: try { L44: const packagePath = join(__dirname, 'package.json'); L45: const packageJson = JSON.parse(readFileSync(packagePath, 'utf-8')); L46: return packageJson.version || '0.0.0'; ... L64: spinnerInterval = setInterval(() => { L65: process.stdout.write(`\r\x1b[K${frames[i]} ${spinnerMessage}`);

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/clopen.tsView on unpkg · L7

dist/audio/tap.oggView file

•path = dist/audio/tap.ogg kind = high_entropy_blob sizeBytes = 25545 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/audio/tap.oggView on unpkg

dist/assets/main-LBI3a0n5.jsView file

•path = dist/assets/main-LBI3a0n5.js kind = oversized_source_file sizeBytes = 3328573 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/main-LBI3a0n5.jsView on unpkg

backend/ws/system/operations.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @myrialabs/clopen@0.4.6 matchedIdentity = npm:QG15cmlhbGFicy9jbG9wZW4:0.4.6 similarity = 0.967 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

backend/ws/system/operations.tsView on unpkg

Source & flagged code

6 flagged

backend/preview/browser/browser-console-manager.tsView file

Lines 195-235typescript

195 }

196

197 toggleConsoleLogging(session: BrowserTab, enabled: boolean): boolean {

198 if (!session) return false;

199

200 session.consoleEnabled = enabled;

201

202 return true;

203 }

204

205 async executeConsoleCommand(session: BrowserTab, command: string): Promise<any> {

206 if (!session) throw new Error('Session not found');

207

208 try {

209

210

211 // Execute the command in the browser context

212 const result = await session.page.evaluate((cmd: string) => {

213 // Create a safe evaluation context

214 try {

215 // Use Function constructor for safer evaluation than eval

216 const func = new Function('return ' + cmd);

217 return func();

Low

Eval

Package source references a known benign dynamic code generation pattern.

backend/preview/browser/browser-console-manager.tsView on unpkg · L215

218 } catch (error) {

219 return { error: error instanceof Error ? error.message : String(error) };

220 }

221 }, command);

222

223 // Log the command execution as a console message

224 const commandMessage: BrowserConsoleMessage = {

225 id: `command-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,

226 type: 'log',

227 text: `> ${command}`,

228 args: [result],

229 timestamp: Date.now()

230 };

231

232 session.consoleLogs.push(commandMessage);

233

234 // Emit the command result

235 this.emit('console-message', {

backend/chat/stream-manager.tsView file

Lines 1378-1418typescript

1378 updateOpts.headTitle = text.slice(0, 80) + (text.length > 80 ? '...' : '');

1379

bin/clopen.tsView file

Lines 1-27typescript

1#!/usr/bin/env bun

2

3// Runtime guard — Bun only, reject Node.js and Deno

4if (typeof globalThis.Bun === 'undefined') {

5 console.error('\x1b[31mError: Clopen requires Bun runtime.\x1b[0m');

6 console.error

dist/audio/tap.oggView file

•path = dist/audio/tap.ogg kind = high_entropy_blob sizeBytes = 25545 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/audio/tap.oggView on unpkg

dist/assets/main-LBI3a0n5.jsView file

•path = dist/assets/main-LBI3a0n5.js kind = oversized_source_file sizeBytes = 3328573 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/main-LBI3a0n5.jsView on unpkg

backend/ws/system/operations.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @myrialabs/clopen@0.4.6 matchedIdentity = npm:QG15cmlhbGFicy9jbG9wZW4:0.4.6 similarity = 0.967 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

backend/ws/system/operations.tsView on unpkg