@overdeck/desktop@0.45.22: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@overdeck/desktop@0.45.22: Suspicious npm security report (Warn) | LPM Firewall

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`server/server.js` provisions Claude hooks automatically in desktop mode.
`server/claude-hooks-provision-D7p5WcKZ.js` copies hooks into `~/.overdeck/bin` and atomically updates `~/.claude/settings.json`.
`sync-sources/hooks/auto-approve-hook` globally allows tool actions for scoped Overdeck agent IDs.
Hook registrations cover Claude lifecycle events including `PreToolUse`, `SessionStart`, and `PermissionRequest`.

Evidence against

`package.json` postinstall only runs `electron-rebuild`; it does not alter AI-agent settings.
Provisioning occurs after explicit desktop runtime startup, not npm install.
Hook provisioner requires shipped scripts and `jq`, backs up settings, and refuses malformed JSON.
Inspected hooks send dashboard events to localhost by default; no hard-coded external exfiltration endpoint found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

Manifest

NoLicense

scanned 802 file(s), 25.4 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.cloudflare.com, api.github.com, api.hume.ai, api.kimi.com, api.linear.app, api.machines.dev, api.minimax.io, api.moonshot.ai, api.openai.com, api.vercel.com, api.voyageai.com, api.x.ai, api.z.ai, app.excalidraw.com, bun.sh, chevrotain.io, claude.ai, dashscope-intl.aliyuncs.com, developer.mozilla.org, discord.gg, docker.com, docs.anthropic.com, docs.docker.com, docs.excalidraw.com, docs.expo.dev, docs.github.com, embed.reddit.com, en.wikipedia.org, encoding.spec.whatwg.org, esm.sh, example.com, excalidraw-room-persistence.firebaseio.com, fetch.spec.whatwg.org, giphy.com, gist.github.com, github.com, inference-api.nousresearch.com, infra.spec.whatwg.org, jimmy.warting.se, json.excalidraw.com, jsonplaceholder.typicode.com, langium.org, libraries.excalidraw.com, mermaid.js.org, mimesniff.spec.whatwg.org, nodejs.org, ollama.com, openrouter.ai

Oversized source lightweight scan

server/public/assets/index-Bwejq-5s.js3.99 MB file, sampled 256 KB

NetworkChildProcessHighEntropyStringsMinifiedUrlStringsgithub.comus.i.posthog.comyandex.com

server/server.js2.16 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsCryptoShellHighEntropyStringsUrlStringsapi.github.comapi.openai.comgithub.comopenrouter.ai

server/src-BMMoA_ba.js5.71 MB file, sampled 256 KB

NetworkChildProcessEnvironmentVarsCryptoHighEntropyStrings

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = electron-rebuild -f -w node-pty 2>/dev/null; exit 0

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = electron-rebuild -f -w node-pty 2>/dev/null; exit 0

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView file

22patternName = aws_access_key severity = critical line = 22 matchedText = `,m.push... t};

Critical

Critical Secret

Package contains a critical-looking secret pattern.

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView on unpkg · L22

22patternName = aws_access_key severity = critical line = 22 matchedText = `,m.push... t};

Critical

Secret Pattern

AWS access key ID in server/public/assets/chunk-EIO257PC-DnXo63uH.js

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView on unpkg · L22

dist-electron/preload.jsView file

1let electron = require("electron"); L2: //#region src/preload.ts

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-electron/preload.jsView on unpkg · L1

server/queries-ZABd5aXP.jsView file

51import { platform as platform$2 } from "process"; L52: import { exec, execFile } from "node:child_process"; L53: import { promisify } from "node:util"; ... L57: import { fileURLToPath } from "node:url"; L58: import { request } from "node:http"; L59: import { ChildProcessSpawner as ChildProcessSpawner$1 } from "[redacted]"; ... L157: try { L158: parsed = JSON.parse(line); L159: } catch { ... L364: function getNativeCodexAuthPath() { L365: return join$1(homedir(), ".codex", "auth.json"); L366: }

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

server/queries-ZABd5aXP.jsView on unpkg · L51

bin/overdeck.mjsView file

58package = @overdeck/desktop; repositoryIdentity = overdeck; dependency = electron L58: // The `electron` package exports its binary path as its module value. L59: return require("electron"); L60: } catch {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

bin/overdeck.mjsView on unpkg · L58

server/supervisor/vendor/@lydell/node-pty-linux-x64/prebuilds/linux-x64/pty.nodeView file

•path = server/supervisor/vendor/@lydell/node-pty-linux-x64/prebuilds/linux-x64/pty.node kind = native_binary sizeBytes = 75976 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

server/supervisor/vendor/@lydell/node-pty-linux-x64/prebuilds/linux-x64/pty.nodeView on unpkg

sync-sources/hooks/pan-hook-lib.shView file

•path = sync-sources/hooks/pan-hook-lib.sh kind = build_helper sizeBytes = 5485 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

sync-sources/hooks/pan-hook-lib.shView on unpkg

resources/icon.icoView file

•path = resources/icon.ico kind = high_entropy_blob sizeBytes = 29519 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

resources/icon.icoView on unpkg

sync-sources/skills/okf/templates/repo/.okf/scripts/okf_common.pyView file

•path = sync-[redacted]/.okf/scripts/okf_common.py kind = payload_in_excluded_dir sizeBytes = 5759 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

sync-sources/skills/okf/templates/repo/.okf/scripts/okf_common.pyView on unpkg

server/server.jsView file

•path = server/server.js kind = oversized_source_file sizeBytes = 2268106 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

server/server.jsView on unpkg

dist-electron/main.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @overdeck/desktop@0.45.13 matchedIdentity = npm:QG92ZXJkZWNrL2Rlc2t0b3A:0.45.13 similarity = 0.467 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-electron/main.jsView on unpkg

server/public/assets/chunk-ZUYEQ4TG-B82Qm37l.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = var e={V...AZZX

High

Secret Pattern

Google API key in server/public/assets/chunk-ZUYEQ4TG-B82Qm37l.js

server/public/assets/chunk-ZUYEQ4TG-B82Qm37l.jsView on unpkg · L1

Source & flagged code

14 flagged

package.jsonView file

Lines 21-61json

21 "resources",

22 "drizzle",

23 "sync-sources"

24 ],

25 "engines": {

26 "node": ">=22.0.0"

27 },

28 "scripts": {

29 "dev": "bun run --parallel dev:bundle dev:electron",

30 "dev:bundle": "tsdown --watch",

31 "dev:electron": "bun run scripts/dev-electron.mjs",

32 "build": "tsdown",

33 "build:publish": "node scripts/build-for-publish.mjs",

34 "prepublishOnly": "node scripts/build-for-publish.mjs",

35 "start": "bun run scripts/start-electron.mjs",

36 "typecheck": "tsc --noEmit",

37 "test": "vitest run --configLoader runner --passWithNoTests",

38 "dist:linux": "node scripts/prepare-server-resources.mjs && electron-builder --linux AppImage --publish never && node scripts/smoke-appimage-cli.mjs && node scripts/stamp-update-manifests.mjs",

39 "dist:mac": "node scripts/prepare-server-resources.mjs && electron-builder --mac dmg zip --arm64 --publish never && node scripts/stamp-update-manifests.mjs",

40 "dist:win": "node scripts/prepare-server-resources.mjs && electron-builder --win nsis --publish never && node scripts/stamp-update-manifests.mjs",

41 "postinstall": "electron-rebuild -f -w node-pty 2>/dev/null; exit 0"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L41

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L41

42 },

43 "dependencies": {

44 "conf": "^13.0.0",

45 "electron-updater": "^6.8.3",

46 "electron": "40.6.0"

47 },

48 "devDependencies": {

49 "@electron/notarize": "^2.5.0",

50 "@overdeck/contracts": "workspace:*",

51 "@types/node": "^22.0.0",

52 "electron-builder": "^25.1.8",

53 "tsdown": "^0.21.7",

54 "typescript": "^5.7.3",

55 "vitest": "^4.0.18",

56 "@electron/rebuild": "^4.2.0"

57 },

58 "build": {

59 "appId": "com.overdeck.app",

60 "productName": "Overdeck",

61 "generateUpdatesFilesForAllChannels": true,

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView file

22patternName = aws_access_key severity = critical line = 22 matchedText = `,m.push... t};

Critical

Critical Secret

Package contains a critical-looking secret pattern.

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView on unpkg · L22

22patternName = aws_access_key severity = critical line = 22 matchedText = `,m.push... t};

Critical

Secret Pattern

AWS access key ID in server/public/assets/chunk-EIO257PC-DnXo63uH.js

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView on unpkg · L22

dist-electron/preload.jsView file

Lines 1-21javascript

1let electron = require("electron");

2//#region src/preload.ts

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-electron/preload.jsView on unpkg · L1

3/**

4* Preload script for the Overdeck Electron renderer.

5*

6* Exposes `window.overdeckBridge` via contextBridge.exposeInMainWorld.

server/queries-ZABd5aXP.jsView file

Lines 31-71javascript

31import { i as createActiveSlice, l as init_dag, o as getDispatchableItems, s as groupItemsByWave } from "./dag-CJpgf9A3.js";

32import { c as generateFixedPointPromptSync, f as initHookSync, n as checkHookSync, p as init_hooks } from

bin/overdeck.mjsView file

Lines 38-78javascript

38}

39

40/** Verify the dashboard server bundle exists inside the package. */

41function checkServerBundle() {

42 const serverPath = join(packageDir, "server", "server.js");

43 if

server/supervisor/vendor/@lydell/node-pty-linux-x64/prebuilds/linux-x64/pty.nodeView file

•path = server/supervisor/vendor/@lydell/node-pty-linux-x64/prebuilds/linux-x64/pty.node kind = native_binary sizeBytes = 75976 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

server/supervisor/vendor/@lydell/node-pty-linux-x64/prebuilds/linux-x64/pty.nodeView on unpkg

sync-sources/hooks/pan-hook-lib.shView file

•path = sync-sources/hooks/pan-hook-lib.sh kind = build_helper sizeBytes = 5485 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

sync-sources/hooks/pan-hook-lib.shView on unpkg

resources/icon.icoView file

•path = resources/icon.ico kind = high_entropy_blob sizeBytes = 29519 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

resources/icon.icoView on unpkg

sync-sources/skills/okf/templates/repo/.okf/scripts/okf_common.pyView file

•path = sync-[redacted]/.okf/scripts/okf_common.py kind = payload_in_excluded_dir sizeBytes = 5759 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

sync-sources/skills/okf/templates/repo/.okf/scripts/okf_common.pyView on unpkg

server/server.jsView file

•path = server/server.js kind = oversized_source_file sizeBytes = 2268106 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

server/server.jsView on unpkg

dist-electron/main.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @overdeck/desktop@0.45.13 matchedIdentity = npm:QG92ZXJkZWNrL2Rlc2t0b3A:0.45.13 similarity = 0.467 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-electron/main.jsView on unpkg

server/public/assets/chunk-ZUYEQ4TG-B82Qm37l.jsView file

Lines 1-7javascript

1var e={VITE_APP_BACKEND_V2_GET_URL:`https://json.excalidraw.com/api/v2/`,VITE_APP_BACKEND_V2_POST_URL:`https://json.excalidraw.com/api/v2/post/`,VITE_APP_LIBRARY_URL:`https://libraries.excalidraw.com`,VITE_APP_LIBRARY_BACKEND:`https://us-central1-excalidraw-room-persistence.cloudfunctions.net/libraries`,VITE_APP_PLUS_LP:`https://plus.excalidraw.com`,VITE_APP_PLUS_APP:`https://app.excalidraw.com`,VITE_APP_AI_BACKEND:`https://oss-ai.excalidraw.com`,VITE_APP_WS_SERVER_URL:`https://oss-collab.excalidraw.com`,VITE_APP_FIREBASE_CONFIG:`{"apiKey":"AIzaSyAd15pYlMci_xIp9ko6wkEsDzAAA0Dn0RU","authDomain" ...