@nopeek/agent-bridge@0.5.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@nopeek/agent-bridge@0.5.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged · loading source

dist/bridge.jsView file

8import { hostname } from "node:os"; L9: import { spawn } from "node:child_process"; L10: import { saveSettings } from "./config.js";

High

Child Process

Package source references child process execution.

dist/bridge.jsView on unpkg · L8

dist/brain.jsView file

20/** L21: * Shell brain: spawn `bash -c "<cmd>"`, write the user's message to stdin, L22: * take trimmed (ANSI-stripped) stdout as the reply. Context rides in env vars:

High

Shell

Package source references shell execution.

dist/brain.jsView on unpkg · L20

dist/backends.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @nopeek/agent-bridge@0.4.1 matchedIdentity = npm:QG5vcGVlay9hZ2VudC1icmlkZ2U:0.4.1 similarity = 0.455 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/backends.jsView on unpkg

8// $HERMES_HOME/profiles/bot-<handle>, one persistent chat session L9: // per channel (--continue), streaming stdout lines to onChunk. L10: // ... L13: // display-only. Selected per bot via BRAIN_MAP entries like {"backend":"claude"}. L14: import { spawn, spawnSync } from "node:child_process"; L15: import { createHash } from "node:crypto"; ... L65: export function resolveBin(name, envVar) { L66: const fromEnv = process.env[envVar]; L67: if (fromEnv) ... L72: return found; L73: for (const dir of [join(homedir(), ".local", "bin"), "/usr/local/bin", "/opt/homebrew/bin"]) { L74: const p = join(dir, name);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/backends.jsView on unpkg · L8

dist/service.jsView file

4// connect it. Everything after this happens in the app. L5: import { execFileSync, spawnSync } from "node:child_process"; L6: import { mkdirSync, realpathSync, writeFileSync, rmSync, existsSync } from "node:fs"; ... L15: * Resolve the entrypoint the service should run. If we're executing out of the L16: * npx cache (wiped on `npm cache clean` / eviction), install a private copy L17: * under <home>/app first so the service survives.

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/service.jsView on unpkg · L4

4// connect it. Everything after this happens in the app. L5: import { execFileSync, spawnSync } from "node:child_process"; L6: import { mkdirSync, realpathSync, writeFileSync, rmSync, existsSync } from "node:fs"; ... L15: * Resolve the entrypoint the service should run. If we're executing out of the L16: * npx cache (wiped on `npm cache clean` / eviction), install a private copy L17: * under <home>/app first so the service survives. ... L34: } L35: function launchctl(args, ignoreFailure = false) { L36: try { ... L44: export async function installService(cfg, noOpen = false) { L45: if (process.platform !== "darwin" && process.platform !== "linux") { L46: throw new Error(`automatic service install supports macOS and Linux. On this platform, run the bridge with any process manager:\n nop

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/service.jsView on unpkg · L4

Source & flagged code

6 flagged

dist/bridge.jsView file

Lines 1-28javascript

1// Orchestrator. A bridge has two states:

2// unpaired — local control API up, waiting for the NoPeek app to POST /pair

3// paired — runs every bot the runtime owns (GET /runtime/bots), keeps the

4// fleet current via the control WebSocket (adopt_bot arrives live),

5// and still serves the local API for status + live brain changes.

6// Pairing, unpairing and brain config all happen at runtime (from the app) and

7// persist to <home>/settings.json — no restart, no terminal.

8import { hostname } from "node:os";

9import { spawn } from "node:child_process";

10import { saveSettings } from "./config.js";

High

Child Process

Package source references child process execution.

dist/bridge.jsView on unpkg · L8

11import { BotRunner } from "./bot.js";

12import { ControlSocket } from "./control.js";

13import { resolveBrain } from "./brain.js";

14import { provisionSoul } from "./backends.js";

15import { reportCapabilities } from "./capabilities.js";

16import { isBrainBackend } from "./config.js";

17export const VERSION = "0.5.0";

18/** How often to re-probe + report brain availability to the server. */

19const CAPABILITIES_INTERVAL_MS = 5 * 60_000;

20export class PairError extends Error {

21 code;

22 constructor(code, message) {

23 super(message);

24 this.code = code;

25 }

26}

27export class BridgeApp {

28 cfg;

dist/brain.jsView file

Lines 1-40javascript

1// Generic brain contract: (text, ctx) -> reply string. Resolved PER BOT:

2// 1. BRAIN_MAP["<handle>"] -> {"cmd": "…"} or {"url": "…"}

3// 2. global BRAIN_CMD (shell, stdin -> stdout)

4// 3. global BRAIN_URL (webhook, JSON in -> JSON out)

5// 4. echo ("You said: …") — zero-config smoke test

6// This is how ANY agentic runtime plugs in (Hermes, OpenClaw, a curl to your

7// own service): the bridge never knows or cares what's on the other side.

8import { spawn } from "node:child_process";

dist/backends.jsView file

Lines 1-28javascript

1// Native brain backends — no external shell scripts required. Two batteries-

2// included agent runtimes the bridge can drive directly:

3//

4// claude — Claude Code headless (`claude -p`), one continuous session per

5// (bot, channel) via a deterministic session UUID, streaming

6// assistant text deltas (stream-json) to onChunk.

7// hermes — a per-bot Hermes profile (own soul + memories) under

8// $HERMES_HOME/profiles/bot-<handle>, one persistent chat session

9// per channel (--continue), streaming stdout lines to onChunk.

10//

dist/service.jsView file

Lines 1-24javascript

1// `nopeek-agent-bridge install` — the ONE terminal command. Installs the bridge

2// as an always-on background service (launchd on macOS, systemd --user on

3// Linux) that starts at login and waits, unpaired, for the NoPeek app to

4// connect it. Everything after this happens in the app.

5import { execFileSync, spawnSync } from "node:child_process";

6import { mkdirSync, realpathSync, writeFileSync, rmSync, existsSync } from "node:fs";

7